• v1.7.8 7fe53f882a

    AOC v1.7.8
    All checks were successful
    CI / lint-and-test (push) Successful in 51s
    Release / build-and-push (push) Successful in 2m4s
    Stable

    tomas.kracmar released this 2026-04-27 07:41:36 +00:00 | 7 commits to main since this release

    Hotfix: login/logout restored

    Fixed

    • CORS wildcard no longer stripped automatically — v1.7.7 removed * from CORS_ORIGINS when AUTH_ENABLED=true, which broke deployments using the default wildcard. v1.7.8 restores the wildcard and only logs a warning.
    • CSP headers now allow MSAL auth flows — Added login.microsoftonline.com to connect-src, frame-src, and form-action so Microsoft Entra authentication works correctly.

    Who should upgrade

    Anyone who deployed v1.7.7 and experiences missing login/logout buttons or auth failures.

    export AOC_VERSION=v1.7.8
    docker compose -f docker-compose.prod.yml pull
    docker compose -f docker-compose.prod.yml up -d
    
    Downloads