• v0.1.22 936b1cbcdf

    v0.1.22 Stable

    franz released this 2026-08-03 16:45:17 +00:00 | 29 commits to master since this release

    Signed by franz
    GPG key ID: 1B3418BA53820C4C

    Added

    • [security].extra_form_action for sign-in destinations Forseti can't derive

    Security

    • A registered redirect URI could inject a directive into the sign-in page's CSP

    Fixed

    • Sign-in didn't return to the app when consent was skipped
    • Second-factor sign-in stalled on the challenge page
    • Social sign-in buttons never left the sign-in page
    • Linking an upstream provider from settings was blocked the same way

    Builds, checksums and provenance: https://github.com/franzos/forseti/releases/tag/v0.1.22

    Downloads