tinyauth Releases

This release introduces LDAP display name support and custom claim mapping for OAuth. It enhances user experience by remembering OpenID Connect consent and improves system stability with Docker connection backoff and security hardening.

Sep 7, 2026

This is a patch release addressing a security vulnerability (GHSA-r27r-rr9v-vv37). It includes a critical security fix and updates to dependencies.

Jul 30, 2026

A critical patch addressing redirection logic issues for Nginx/Swag users and security vulnerabilities in access controls.

Jul 20, 2026

A small patch fix release addressing specific issues including LDAP user lookups and OAuth whitelist handling in ACLs.

Jul 17, 2026

Tinyauth v5.1.0 achieves official OpenID Connect™ certification, introduces major access control improvements including deny-by-default policies and Kubernetes support, adds LDAP functionality, and addresses security vulnerabilities.

Jul 15, 2026

This release adds first-class TypeScript SDK integrations for Vercel AI SDK, Mastra, and OpenAI, closes security gaps including agent lifecycle management auth and recall filter injection, and fixes event-loop-blocking bugs in on-prem restart and session end.

Jul 14, 2026

This release focuses on closing a second wave of security hardening, including HttpOnly/SameSite cookies, streaming file uploads to prevent memory exhaustion, and strict input validation, alongside TypeScript SDK fixes.

Jul 9, 2026

This release introduces channel selection diagnostics, folds upstream truncated reasoning content, and adjusts circuit breaker defaults, alongside numerous fixes for the discovery flow and model registry.

Jul 7, 2026

This major security hardening pass fixes path traversal vulnerabilities, CORS credential exposure, and gates destructive UI endpoints to localhost, while collapsing the legacy scope model to a single `agent_id`.

Jul 6, 2026

This release improves Embedding compatibility, adds native extraction of OpenAI reasoning tags, and enhances the dashboard with channel pinning capabilities.

Jul 5, 2026

This release improves stability with upstream overload detection and rate limiting cooling mechanisms, alongside fixes for cost display and DeepSeek compatibility.

Jul 4, 2026

This release introduces native WebSocket v2 support, advanced session handling with writeback and synthesis, and improved caching for reasoning content.

Jul 3, 2026

This release focuses on enhanced usage tracking, provider fixes, and model updates including new capabilities for NVIDIA and support for ClinePass.

Jul 3, 2026

This release adds token cost statistics functionality and improves load balancing, diagnostics, and fixes for specific provider configurations.

Jul 3, 2026

Ships an official TypeScript SDK, adds a memory edit command, introduces v2 memory route response models, and includes security hardening fixes.

Jun 26, 2026

Adds a token-saver dashboard, integrates Venice AI, overhauls the Blackbox catalog, and fixes various provider compatibility issues including DeepSeek, Gemini, and streaming usage.

Jun 26, 2026

Refactors webapp state, adds bulk account activation/inactivation, and updates the SDK types.

Jun 22, 2026

Adds conversation memory extraction to turn chat history into typed memories with full provenance metadata.

Jun 22, 2026

Introduces native image generation for Antigravity and adds authentication and quota tracking for the CodeBuddy CN provider.

Jun 21, 2026

Updates SDK OpenAPI spec and generated types.

Jun 20, 2026