Cloud Release Notes

v1.0.0-build.52-channel.stable (stable · latest)v1.0.0-build.51-channel.stable (stable)v1.0.0-build.50-channel.stable (stable)v1.0.0-build.93-channel.insider (insider)

insider 2026-10-02 JSON ↗

• Added Initial release of Niksphere Cloud
• Added Multi-architecture Docker container support (linux/amd64 and linux/arm64)
• Added Integrate actor-based IdP broker with dynamic OIDC authentication
• Added Add configuration-driven admin provisioning (admin_username/admin_password/admin_pat, settable via NIKSPHERE_CLOUD_ADMIN_* environment variables or the config file) for emergency access and headless CI/CD provisioning
• Changed Prevent the provisioning worker from hanging indefinitely on a stuck provider call
• Changed Generate a random, per-installation default admin account on a genuinely empty installation (shown once in that startup''s log output) instead of a fixed admin/admin default
• Fixed Fix Cloud starting with an invalid trusted_proxies setting and silently trusting every proxy; Cloud now refuses to start when an entry is not a valid IP address or CIDR range, or when a range such as 0.0.0.0/0 would trust every client
• Fixed Fix external identity provider login page leaking OAuth client secrets to the browser (IdP Broker)
• Fixed Apply configured idp_token_expiry_hours / idp_refresh_token_expiry_days settings instead of ignoring them; remove dead, unused OIDC config options
• Fixed Fix CLI and web logins using conflicting, unregistered OAuth client IDs by seeding dedicated niksphere-cli and niksphere-cloud-web clients
• Fixed Fix login failing with a Postgres value too long for type character varying(255) error during token exchange, caused by JWT (RS256) access token signatures exceeding the column size sized for opaque HMAC signatures (IdP Broker)
• Fixed Fix the web app reloading endlessly after a successful login by correcting the API client''s OIDC session lookup, which used a stale client ID and so never found the access token
• Fixed Fix /auth/me always returning an empty sub field due to a context key mismatch between the auth middleware and the handler
• Fixed Fix the navbar showing the user''s internal ID instead of their display name by propagating the actor''s name through /auth/me
• Security Remove the hardcoded default admin credential (admin/admin, previously identical across every installation) in favor of a per-installation randomly generated or explicitly configured administrative account
• Security Close several security vulnerabilities in the web interface (cloud console and IdP broker login pages), including denial-of-service and open-redirect issues
• Security Close several security vulnerabilities in the backend server, including TLS/certificate handling and authentication token issues