TAG
#authentication
Stories connected through a shared idea, actor, technology or theme.
WeKan 12.25 improves OAuth and SAML sign-in flowsWeKan 12.25 changes Google, OAuth/OIDC and SAML authentication so sign-in returns to the same browser window by default. Its hosting documentation also improves real-client-address forwarding for Caddy and Sandstorm deployments.→Frappe Press patches authentication disclosure and agent-job handlingThe release prevents login endpoints from revealing account status and moves login-mail delivery into a background job. It also records who cancelled an agent job.→Claude Code 2.1.286 improves permission and cloud-credential recoveryThe release shows counts such as “2 of 5” when several permission requests are pending and adds mouse navigation for fullscreen lists. It also fixes cases where GCP or AWS credential refreshes opened multiple login browsers and where resumed sessions lost turns.→Docker publishes an MCP Gateway OAuth helperThe package was extracted from Docker's MCP Gateway work and provides OAuth-discovery support for gateway integrations. Its release establishes a separately versioned component for authentication plumbing around MCP services.→Supabase Realtime returns 401 for malformed authorization headersThe release changes malformed Authorization headers to return HTTP 401. The release notes list this authentication change as the sole bug fix in v2.137.5.→Pi 0.86.1 adds Meta Muse access and faster repeat launchesPi 0.86.1 lets users authenticate to Meta Muse through /login meta or META_API_KEY and refreshes the model API key automatically. It also enables Node's persistent compile cache and fixes several agent-runtime errors involving diagnostics, context limits and strict tool schemas.→Google Antigravity CLI 1.2.5 improves subagent guidance and recoveryAntigravity CLI 1.2.5 automatically gives Markdown-defined agents that declare subagent invocation access to the available subagent roster and delegation instructions. It also preserves background task names, clears definitively rejected credentials, records externally interrupted commands as cancelled and fixes frozen thinking frames.→Better Auth 1.7.3 restores schema compatibility and tightens authentication defaultsThe release restores compatibility with 1.6 account schemas and enables initialisation-time schema validation by default, rejecting authentication requests when detected mismatches remain. It also adds Cloudflare as a social provider, Have I Been Pwned password checks and fixes for OAuth callbacks, session handling and TOTP re-enrolment.→curl 8.22.0 ships security fixes and experimental HTTP Message Signaturescurl 8.22.0 includes security fixes across curl and libcurl, alongside 302 bug fixes and 525 commits. It adds experimental RFC 9421 HTTP Message Signatures, changes SPNEGO NTLM fallback behaviour and drops TLS-SRP, among other platform and protocol updates.→OpenCode adds Azure Entra sign-in and fixes replayable Bedrock reasoningOpenCode v1.18.24 stops Bedrock reasoning responses from being cached as unreplayable empty messages and lets Azure providers authenticate through Microsoft Entra ID via the Azure CLI. It also reads supported v2 configuration fields, easing mixed-version deployments.→