Caution
Evaluate before upgrading production. This release targets .NET 11 RC3 instead, which has Microsoft's go-live support license.
Portway 0.10.4 hardens token storage and updates the runtime to .NET 11 RC3. It is adviced to update as soon as possible to this version.
Fixes
- Fix: Token verification uses an indexed lookup. Verification time no longer grows with the number of tokens.
- Security: Tokens created or rotated in the console are no longer written to
tokens/. The console displays a new token once. - Security: The first start writes a token file to
tokens/{SERVER_NAME}.txtonly when the console is disabled. - Security: Failed token attempts no longer write part of the presented token to the log.
- Security: Update .NET to 11 RC3, the Scalar API reference to 1.76.2, and various packages and dependencies.
For detailed setup guides and step-by-step instructions, check out our documentation.
Full changelog: v0.10.3...v0.10.4