Starstruk Logo MarkStarstruk

v3.2.6

higress-group/higressv3.2.6Jul 5, 2026by poeti8

AI Summary

This release focuses on OIDC authentication improvements, adding configurable prompts and button text, while also addressing security vulnerabilities in dependencies and updating cookie policies.

Key Highlights

  • Added `OIDC_PROMPT` to fix forced re-authentication by making the prompt configurable
  • Added `OIDC_BUTTON_TEXT` to change the OIDC login button text
  • Updated `express-useragent` and `nodemailer` packages to fix vulnerabilities
  • Set `SameSite: Lax` for signed-in cookies

New Features

  • Configurable OIDC prompt
  • Customizable OIDC login button text

Full Release Notes

- Add `OIDC_PROMPT`. Fixes OIDC forced re-authentication by making the prompt configurable. (PR #967 by @Jignesh4611)
- Add `OIDC_BUTTON_TEXT` to change OIDC login button text
- Use a new useragent library (`express-useragent`) to parse user agent. Fixes vulnerabilities found in the useragent package
- Update nodemailer package to fix vulnerabilities
- Set `SameSite: Lax` for signed-in cookies
- Use 404 HTTP status code for the 404 page
- Fix typo in the report page