-
AOC v1.7.8
Stablereleased this
2026-04-27 07:41:36 +00:00 | 7 commits to main since this releaseHotfix: login/logout restored
Fixed
- CORS wildcard no longer stripped automatically — v1.7.7 removed
*fromCORS_ORIGINSwhenAUTH_ENABLED=true, which broke deployments using the default wildcard. v1.7.8 restores the wildcard and only logs a warning. - CSP headers now allow MSAL auth flows — Added
login.microsoftonline.comtoconnect-src,frame-src, andform-actionso Microsoft Entra authentication works correctly.
Who should upgrade
Anyone who deployed v1.7.7 and experiences missing login/logout buttons or auth failures.
export AOC_VERSION=v1.7.8 docker compose -f docker-compose.prod.yml pull docker compose -f docker-compose.prod.yml up -dDownloads
- CORS wildcard no longer stripped automatically — v1.7.7 removed