oriolrius/pki-manager-web v1.6.1

on GitHub

What's Changed

Security / RBAC

• CA creation now requires admin role: Regular users can no longer create Certificate Authorities. The ca.create endpoint now uses adminProcedure with explicit role verification.

Bug Fixes

• fix(rbac): Added explicit admin role check in CA create mutation as defense-in-depth
• fix(docker): Corrected GHCR image names in docker-compose configuration
• fix(tests): Improved E2E RBAC tests to properly capture and validate API responses

Testing

• All 19 RBAC E2E tests now pass against production
• Tests properly verify that regular users receive HTTP 403 FORBIDDEN when attempting admin operations

Full Changelog: v1.6.0...v1.6.1