v0.1.2

QAuth v0.1.2 is the second patch release of the 0.1 line. It carries one change from main and nothing else from it, and is cut from release/v0.1.0. It is still pre-1.0, and no release has had an external security audit yet; see SECURITY.md.

Added

• Scopes for CIMD clients from the seed manifest (#770). A CIMD client starts with no scopes, and until now only a hand-written database row could give it any. The seed manifest's new cimd_clients section sets a CIMD client's scopes and audience and nothing else: the client's metadata document still supplies every other field, and re-resolving it never changes the grant. An entry has no secret, so the seed prints none for it, and every run sets the row to the entry's values. The seed refuses, and leaves unchanged, an entry whose client_id belongs to a client that is not a CIMD client, and exits 1. The Docker guide describes it.

Before you upgrade from v0.1.1

• Nothing breaks. clients is now optional in the seed manifest, so a manifest may hold only CIMD entries; existing manifests validate and behave as before.
• No migrations and no new settings.

Full Changelog: v0.1.1...v0.1.2