force unset realtime connections auth state
This commit is contained in:
+4
-1
@@ -2,7 +2,10 @@
|
||||
|
||||
- Silenced the superuser IPs confirmation if there is no change.
|
||||
|
||||
- Updated UI extensions APIs to allow top-level `await` in the initialization script.
|
||||
- Updated the _experimental_ UI extensions APIs to allow top-level `await` in the initialization script.
|
||||
|
||||
- Force unset the auth state of existing realtime connections on user password, collection secret, etc. changes.
|
||||
_This is not strictly necessery because the realtime connections has short-lived idle timeout by design but nonetheless it was implemented to minimize the abuse vectors._
|
||||
|
||||
|
||||
## v0.38.0
|
||||
|
||||
Reference in New Issue
Block a user