wmantly 948fef4adc fix vault 403 + shared secrets (v1.21.0) ...

- vault_broker: always reconcile policy content before serving a cached
  token (compare-and-skip), so stale stored policies can't cause a recurring
  403 'permission denied'; policy content is parsed live by OpenBao, so edits
  apply to existing tokens immediately.
- Shared secrets: publish to secret/shared/<owner>/<slug>; grant read to users
  and apps by editing the grantee's policy content (live-applied). New
  SharedSecret/SharedSecretGrant ORM models, /api/shared-secrets router, and a
  Shared tab in the vault UI.
- package.json + lockfile bumped to 1.21.0 to match the tag.

Co-Authored-By: Claude <noreply@anthropic.com>

2026-08-03 22:13:58 -04:00

..

access_request.js

Release 1.11.0: end-user catalog, access requests, nested groups

2026-07-31 01:22:08 -04:00

api_token.js

Add self-service API tokens (PATs) with UI + Bearer auth (#35)

2026-07-12 17:12:35 -04:00

auth.js

security: sanitize markdown output and reduce PII logging

2026-07-18 22:56:35 -04:00

email.js

chore(release): public-release readiness and security fixes for 1.1.16

2026-07-18 22:08:11 -04:00

group_ldap.js

Release 1.11.0: end-user catalog, access requests, nested groups

2026-07-31 01:22:08 -04:00

index.js

fix vault 403 + shared secrets (v1.21.0)

2026-08-03 22:13:58 -04:00

notification.js

Updated frontend

2026-07-01 11:10:09 -04:00

oauth_client.js

fix: OAuth client API returned client_id: undefined; unknown id 500'd

2026-07-23 16:06:55 -04:00

oauth_code.js

chore(release): public-release readiness and security fixes for 1.1.16

2026-07-18 22:08:11 -04:00

plugin_instance.js

fix: resolve discovery, plugins, and vault issues

2026-08-02 18:45:16 -04:00

resource.js

fix: resolve discovery, plugins, and vault issues

2026-08-02 18:45:16 -04:00

shared_secret_grant.js

fix vault 403 + shared secrets (v1.21.0)

2026-08-03 22:13:58 -04:00

shared_secret.js

fix vault 403 + shared secrets (v1.21.0)

2026-08-03 22:13:58 -04:00

sms.js

feat: Add messaging plugins, Docker discovery, fix reconciliation

2026-08-02 00:16:17 -04:00

token.js

fix: complete ORM port — token/oauth-client API mismatches, use published orm 0.2.8

2026-07-23 02:20:49 -04:00

tos.js

Make Terms of Service editable at runtime by admins (closes #39)

2026-07-16 13:44:46 -04:00

user_ldap.js

fix: enforce pwdAccountLockedTime check in app and LDAP (#68)

2026-08-02 18:15:28 -04:00

user.js

Updated frontend

2026-07-01 11:10:09 -04:00

verification.js

Updated frontend

2026-07-01 11:10:09 -04:00

webhook.js

feat(release): v1.14.0 discovery and conf pages

2026-08-01 01:21:27 -04:00