This new release comes with a greatly improved and hardened authentication module.
Most importantly, it fixes a DoS vulnerability in the login rate limiter. Minor memory leaks in the rate limiter and authentication middleware have been fixed. The memory footprint of the authentication middleware has been reduced because it does not need to keep a long lived whitelist of streaming tokens anymore.
For clarity, it introduces a breaking API change:authentication tokens for file streaming are generated from the /stream-token instead of /single-use. They are not (and never have been) actually single-use, only restricted to a single file (and 24h).
Thanks @mansurmavlankulov for his contribution to this release by pointing out the DoS and memory leaks issues.