Yeraze/meshmonitor v2.6.2

v2.6.2 - OIDC and Service Worker Fixes

on GitHub

What's Changed

Bug Fixes

• OIDC Authentication: Fixed service worker intercepting OIDC callback requests, preventing successful login

  • Service worker now properly excludes all /api/* routes from caching
  • Added skipWaiting and clientsClaim for immediate service worker updates
  • Added explicit session save before redirect to ensure session persistence
  • Added <base> tag to HTML for proper relative URL resolution

• Map Loading: Fixed Content Security Policy blocking OpenStreetMap tile requests

  • Added OpenStreetMap tile domains to CSP imgSrc and connectSrc directives
  • Prevents thousands of CSP violation errors on page reload
  • Map tiles now load reliably via service worker caching

Technical Details

The service worker was using Workbox's generateSW mode which was intercepting API routes and serving cached HTML instead of allowing requests to reach the Express server. This release adds multiple layers of protection to ensure API routes are never cached or intercepted, while still allowing efficient caching of map tiles and static assets.

Full Changelog: v2.6.1...v2.6.2

What's Changed

• fix: Prevent service worker from intercepting OIDC callback requests by @Yeraze in #222

Full Changelog: v2.6.1...v2.6.2

🚀 MeshMonitor v2.6.2

📦 Installation

Docker (recommended):

docker run -d \
  --name meshmonitor \
  -p 8080:3001 \
  -v meshmonitor-data:/data \
  ghcr.io/Yeraze/meshmonitor:v2.6.2

🧪 Testing

✅ All tests passed
✅ TypeScript checks passed
✅ Docker images built for linux/amd64, linux/arm64, linux/arm/v7

📋 Changes

See commit history for detailed changes.