• v1.7.9 e2cea50d87

    AOC v1.7.9
    All checks were successful
    CI / lint-and-test (push) Successful in 2m30s
    Release / build-and-push (push) Successful in 4m46s
    Stable

    tomas.kracmar released this 2026-04-27 08:09:52 +00:00 | 6 commits to main since this release

    Hotfix: auth diagnostics and rate-limit exemptions

    Fixed

    • Rate-limit exemptions/api/config/auth, /api/config/features, /health, and /metrics are now exempt from rate limiting so config fetching cannot be blocked.
    • Generic exception handlerHTTPException responses now return proper JSON instead of re-raising, preventing potential response corruption.

    Diagnostics added

    • Frontend auth button now shows Auth: OFF or Auth: misconfigured instead of an empty circle when auth is disabled or misconfigured.
    • Browser console logginginitAuth() now logs clear console.error / console.warn messages when the auth config fetch fails or auth is disabled.
    • Backend startup log — prints auth_enabled=True/False and version on boot so you can verify configuration from container logs.
    • Backend debug logging/api/config/auth endpoint logs each request.

    Who should upgrade

    Anyone who deployed v1.7.7 or v1.7.8 and experiences missing login/logout buttons or auth failures.

    Troubleshooting auth

    After upgrading, open browser Developer Tools → Console and look for:

    • AOC auth is disabled. Set AUTH_ENABLED=true in .env to enable login. → Your .env has AUTH_ENABLED=false
    • AOC auth misconfigured: missing client_id or tenant_idAUTH_CLIENT_ID or AUTH_TENANT_ID is missing
    • Auth config fetch failed: 500 → Backend error; check docker compose logs backend
    export AOC_VERSION=v1.7.9
    docker compose -f docker-compose.prod.yml pull
    docker compose -f docker-compose.prod.yml up -d
    
    Downloads