v3.1.0 backend/v3.1.0

medium risk

haiwen/seafileOct 1, 2026 → Oct 1, 20260 days between releases

What's New

Hanko v3.1 introduces Organizations and Roles, while AgentOS v3.1 adds RBAC and Filesystem features

Breaking Changes

  • Client IP resolution defaults to `direct` mode; reverse proxy users must configure `trusted_proxies` and `ip.extractor`

New Features

  • Organizations and Roles management for B2B applications
  • Custom Claims and Mapping for identity providers (SAML/OIDC)
  • Session lifecycle webhooks
  • Tenant-scoped user IDs
  • Improved password imports (bcrypt)

Improvements

  • Improved password imports using bcrypt

Bug Fixes

  • Security fix for IP extraction; defaulting to `direct` mode

Upgrade Notes

Reverse proxy users must configure `trusted_proxies` and `ip.extractor` to maintain previous behavior. If using AgentOS, manual migration scripts are required for the filesystem table.

The Two Releases

v3.1.0

v3.1.0

Oct 1, 2026· 21 days ago

Introduces AgentOS RBAC, a new filesystem package, and AIMLAPITools, while requiring manual migration for the filesystem table and making MCP tools opt-in.

Full release notes
backend/v3.1.0

Hanko v3.1

Oct 1, 2026· 21 days ago

Hanko v3.1 introduces Organizations and Roles for B2B applications, Custom Claims and Mapping for identity providers, and session lifecycle webhooks, alongside a security fix for IP extraction.

Full release notes