Skip to content

ContextLattice v3.6.3 - Dashboard Auth Boundary

Choose a tag to compare

View all tags
@sheawinkler sheawinkler released this 30 Jun 23:25
v3.6.3
9848e5d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Patch release for the open-source dashboard auth boundary.

Highlights:

  • Dashboard no longer initializes NextAuth unless AUTH_REQUIRED=true.
  • Local OSS mode returns auth_disabled for /api/auth/session instead of surfacing server configuration errors.
  • Billing page no longer auto-fetches account-only billing state or displays sign-in prompts when auth is disabled.
  • Public README baseline remains current at v3.6.2+ / v3.6 runtime stack language from the prior docs fix.

Validated locally before release:

  • TypeScript, dashboard tests, production build.
  • Runtime /api/auth/session smoke returns 404 {"ok":false,"error":"auth_disabled","authRequired":false}.
  • Playwright /billing smoke renders with no /api/auth requests, no console errors, and no sign-in/create-account UI.
Assets 5
Loading