This release upgrades go-authcrunch from v1.4.1 to v1.5.0, bringing refreshed embedded portal applications and improved application routing to Caddy. Dependency update.
Embedded portal applications
The portal now ships refreshed User Profile, Security Manager, and File Vault applications. Links appear according to API enablement and the signed-in user's role. Upstream implementation.
| Application | URL with a /auth portal mount
| Access requirements |
|---|---|---|
| User Profile | /auth/profile/
| Portal user or administrator; profile APIs retain their independent enablement. |
| Security Manager | /auth/operator/
| Enabled admin API and portal administrator role. |
| File Vault | /auth/documents/
| Enabled and initialized Documents API, plus a portal user or administrator role. |
Routing and asset fixes
- Applications support root and nested portal mounts, deep links, and lazy-loaded assets. Missing asset files and translation catalogs return
404instead of application HTML. Application routing. - Inferred mounts containing URL-escaped characters preserve the correct application base, asset lookup, and redirect queries. Explicitly declared mounts retain their existing strict validation. Escaped-mount fix.
- Application assets enforce authorization before conditional responses and use
no-storecaching. Only an enabled application's exact manifest is public. Asset handling.
Upgrade notes
operatoranddocumentsare now reserved complete segments in declared portal mounts. Review custom mount names before upgrading. Mount reservations.- Custom templates referencing the retired
profile/images/banner.svg, old fonts, or hashed Profile bundles need updated asset references. Profile asset refresh. - File Vault retains the Documents API's storage, origin, mount, and current local browser-session requirements. An administrator role or external-provider login alone does not grant Documents API access. Documents integration requirements.