-
AOC v1.7.9
Stablereleased this
2026-04-27 08:09:52 +00:00 | 6 commits to main since this releaseHotfix: auth diagnostics and rate-limit exemptions
Fixed
- Rate-limit exemptions —
/api/config/auth,/api/config/features,/health, and/metricsare now exempt from rate limiting so config fetching cannot be blocked. - Generic exception handler —
HTTPExceptionresponses now return proper JSON instead of re-raising, preventing potential response corruption.
Diagnostics added
- Frontend auth button now shows
Auth: OFForAuth: misconfiguredinstead of an empty circle when auth is disabled or misconfigured. - Browser console logging —
initAuth()now logs clearconsole.error/console.warnmessages when the auth config fetch fails or auth is disabled. - Backend startup log — prints
auth_enabled=True/Falseand version on boot so you can verify configuration from container logs. - Backend debug logging —
/api/config/authendpoint logs each request.
Who should upgrade
Anyone who deployed v1.7.7 or v1.7.8 and experiences missing login/logout buttons or auth failures.
Troubleshooting auth
After upgrading, open browser Developer Tools → Console and look for:
AOC auth is disabled. Set AUTH_ENABLED=true in .env to enable login.→ Your.envhasAUTH_ENABLED=falseAOC auth misconfigured: missing client_id or tenant_id→AUTH_CLIENT_IDorAUTH_TENANT_IDis missingAuth config fetch failed: 500→ Backend error; checkdocker compose logs backend
export AOC_VERSION=v1.7.9 docker compose -f docker-compose.prod.yml pull docker compose -f docker-compose.prod.yml up -dDownloads
- Rate-limit exemptions —