Skip to content
This repository has been archived by the owner on Jul 12, 2023. It is now read-only.

v1.1.2
Compare
Choose a tag to compare
@sethvargo sethvargo released this 09 Nov 15:39
· 111 commits to main since this release
v1.1.2
f47bca0
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

Security

  • SECURITY PATCH! This release fixes an issue where users or API keys with permission to expire verification codes could have expired codes that belonged to another realm if they guessed the UUID.

Self-report

  • Allows HTTP GET request method (in addition to POST) for initiating the user report webview. The API key and nonce must still be passed as HTTP headers (unless dev mode is also enabled). dev mode should NOT be enabled in production to avoid logging the API key query params. (#2260, @mikehelmick)

Operations

  • Make Cloud Scheduler timezone configurable in Terraform via var.cloud_scheduler_timezone and update the default value to UTC time. (#2262, @sethvargo)
  • Return more detailed responses on code expiration errors. Only return 500 on server-side errors. (#2264, @sethvargo)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Assets 2
Loading