Skip to content

v1.7.0 - OAuth sessions, audit log filters, bot user UI

Choose a tag to compare

View all tags
@TaherSayed TaherSayed released this 24 May 15:17
· 13 commits to main since this release
v1.7.0
7b27824

First release in the v1.7 line — closes the visibility gaps that emerged once OAuth went live.

New

  • Active OAuth sessions table on the OAuth Clients page. Lists every access token issued via the OAuth flow, with client, bound WP user, scopes, issued / last-used / access-expires / refresh-expires timestamps. Per-row Revoke action kills one session without nuking the parent client.

  • Audit log filters + pagination + CSV export. Filter by status (ok/fail), method, tool, IP, date range. Free-text search across method / tool / note / ip. Paginated at 50 per page. "Export CSV" button streams up to the last 50 000 rows.

  • Bot user banner on the Tokens page surfacing the wp-commander-bot service account (if the wizard created it) with role + Edit-user link, and the reasoning for binding tokens to it.

  • Audit log noise dedup. The post-OAuth-refresh "(pre-auth) cmcp_invalid_token" cascade (SDK retrying with a now-revoked stale token between refresh + cached use) is now deduplicated to one row per IP per minute when there is a successful OAuth token issuance from the same IP in the same window.

No schema change

Pure additive release. The new OAuth sessions view reads from the existing wp_cmcp_oauth_tokens table.

Assets 3
Loading