v5.1.2

tinyauthapp/tinyauthv5.1.2Jul 20, 2026by steveiliop56

AI Summary

A critical patch addressing redirection logic issues for Nginx/Swag users and security vulnerabilities in access controls.

Key Highlights

Fixed redirection logic issues, especially for HTTPS to HTTP downgrade
Parent domain is now considered a trusted domain
Added support for OAuth auto-redirect in OIDC flow
Updated dependencies

New Features

OAuth auto-redirect in OIDC flow
Parent domain trusted domain status

Full Release Notes

# Tinyauth v5.1.2

This path fix addresses some issues around the redirection logic (especially for Nginx/Swag users) and some security issues in access controls.

> [!WARNING]
> This release contains security fixes, please update as soon as possible.

## Improvements

- Parent domain is now considered a trusted domain
- Allow for OAuth auto-redirect in OIDC flow

## Fixes

- Make `login_for` parameter optional
- Fix redirection issues in HTTPS to HTTP downgrade redirect
- Fix ACLs normalization in Docker and Kubernetes ACL providers

## Technical

 - Update dependencies

**Full Changelog**: https://github.com/tinyauthapp/tinyauth/compare/v5.1.1...v5.1.2