Skip to content

v1.6.1

Choose a tag to compare

View all tags
@oriolrius oriolrius released this 13 Feb 09:17
· 792 commits to main since this release
v1.6.1
6aeb33e

What's Changed

Security / RBAC

  • CA creation now requires admin role: Regular users can no longer create Certificate Authorities. The ca.create endpoint now uses adminProcedure with explicit role verification.

Bug Fixes

  • fix(rbac): Added explicit admin role check in CA create mutation as defense-in-depth
  • fix(docker): Corrected GHCR image names in docker-compose configuration
  • fix(tests): Improved E2E RBAC tests to properly capture and validate API responses

Testing

  • All 19 RBAC E2E tests now pass against production
  • Tests properly verify that regular users receive HTTP 403 FORBIDDEN when attempting admin operations

Full Changelog: v1.6.0...v1.6.1

Assets 2
Loading