Join the discord to stay up to date and have early previews
Changelog
Hi, sorry for the very quick release, someone flagged a potential security issue and I wanted to tackle it as soon as possible. Currently leaving the API_KEY unset is actually leaving all requests open, adding a key obviously blocks them, but after this update if you never set an api key all requests will be rejected unless you have a valid browser session.
Important security fix
- Fix API authentication to block all requests if an API_KEY is not set. #61
minor bugfix
- Fix user dropdown closing cronjob modals #63