v4.15.0

songquanpeng/one-apiv4.15.0Oct 4, 2026by github-actions[bot]

Upgrading?

AI Summary

This release addresses various stability and security issues related to user management, session handling, and group/permission uploads.

Key Highlights

  • Fixed handling of missing organization and user in user removal.
  • Fixed redirect behavior after login.
  • Fixed access-token session revocation by SSO logout.
  • Restrictions on uploaded groups, roles, and permissions.

Full Release Notes

## Changelog
### Bug fixes
* 0feded28b8aa13a03ff722f70bf7890415b1d1e7 fix: handle missing organization and user in remove-user-from-group API
* 29c245172e8b4556bbae37473f89e9bf9a6a9a4b fix: mark JWT-Custom refresh tokens with tokenType refresh-token
* 0cef429dabdcd9a371d09d15300f10ddc9726a8d fix: redirect to the requested page after login
* 956c405ceba9d3b02ce586799e47d1e21dea51dd fix: release camera on unmount and attach video after face dialog mounts
* 84a262a397a05fd8bc0407591a501eac6026bc2d fix: restrict uploaded groups, roles and permissions to the admin's organization
* 2301694036cbdcf932b3b1cbef02fb61d9820429 fix: return error when loading enforcer model config fails
* 5b4e48f651dd42ca460fdab31833cac754be168b fix: skip existing groups, roles and permissions by row owner in uploads

Related Repositories