penpot

mirror of https://github.com/penpot/penpot.git synced 2026-07-21 21:47:50 +00:00

History

🐛 Skip end-user SSO gate on nitrate org management endpoints (#10559 )

get-teams-detail, get-org-invitations and delete-org-invitations lacked
::rpc/auth false, so wrap-nitrate-sso ran on them whenever params carried
an organization-id. For SSO-active orgs this rejected the org owner's
admin-console reads with a 401, since their Penpot session has no SSO
grant for the org. These are shared-key protected management calls made
on the org owner's behalf and never use profile-id, so they should not
require an end-user SSO session — matching their sibling endpoints.

2026-07-07 12:22:17 +02:00

dev

📎 Update Kaleidos Copyright (#9929 )

2026-05-29 11:24:58 +02:00

resources

✨ Send warning for email about nitrate orgs with sso (#10413 )

2026-06-25 09:53:07 +02:00

scripts

✨ Add configurable resource usage limits for imagemagick (#10240 )

2026-06-18 17:52:01 +02:00

src

🐛 Skip end-user SSO gate on nitrate org management endpoints (#10559 )