v3.4.3

CaviraOSS/LongMemoryv3.4.3Jul 30, 2026by UNITRONIX

AI Summary

A hotfix release addressing open issues, including masking client configuration public keys, fixing OIDC authentication, and hardening enrollment pending devices.

Key Highlights

Fixed OIDC client login stuck on 'Waiting' by correcting the user.info payload in the auth-query.
Fixed Viewer-only outbound ID not found with service stopped by fixing TCP RegisterPk IP bind.
Changed Client Configuration public key masked by default for security.
Fixed Enrollment pending_device hardening and included fixes for SignedId and Unban kebab.

Full Release Notes

## [3.4.3] — 2026-07-30

Hotfix from open-issue remediation. Ships via Settings → Updates (panel) unless noted.

### Changed
- Client Configuration public key masked by default (#319)
- Docker update channel (#299): GHCR uses BETTERDESK_IMAGE_TAG, not panel channel switch

### Fixed
- OIDC client stuck on Waiting account auth (#326 / #304) — user.info in auth-query payload
- Viewer-only outbound ID not found with service stopped (#327) — TCP RegisterPk IP bind + client login token
- Enrollment pending_device hardening (#302)
- Prior Unreleased: #313 SignedId, #315 admin delete, #325 native TLS, #320 enrollment UI, #321 MeshAgent web cert, #323 Unban kebab, #319 light theme

### Docs
- Caddy WSS / 308 (#294), Docker channel vs image tag (#299)

Verify: update panel → restart if prompted → retest linked issues.


## What's Changed
* hotfix: open issues remediation (3.4.3) by @UNITRONIX in https://github.com/UNITRONIX/BetterDesk/pull/328


**Full Changelog**: https://github.com/UNITRONIX/BetterDesk/compare/v3.4.2...v3.4.3