Skip to main content

TideCloak 0.14.2


Summary

TideCloak 0.14.2 is a patch release that fixes two issues affecting the embedded Tide Admin Console introduced in 0.14.0 — an auth-bootstrap failure caused by a hardcoded localhost:8080 auth-server URL, and missing console provider jars in release images. It also lands a lockfile regen to unblock the admin-ui build under --frozen-lockfile.

Key Features

Admin Console Auth Bootstrap Fix : The embedded Tide Admin Console was baking http://localhost:8080 as the auth-server URL at build time, causing a CSP / third-party-iframe timeout on fresh and upgraded deployments. It now bakes the deployment's real issuer via VITE_KC_URL.

Release Image Provider Jars : Release images could ship without the console provider jar. Added a provider-set gate to the release build and included the previously-missing tidecloak-errors-shared jar.

Admin UI Lockfile Regen : Regenerated the lockfile pinning @tideorg/js 0.14.0 so the admin-ui build no longer fails under --frozen-lockfile.

Enclave SRI : sha256-HYMlsSowJDlLQTQaEjDGELbWzjYpc52oLbXKbdV3Go8=

Detailed changelog

For a granular per-repository breakdown of changes (Midgard, Heimdall, ORK, Ragnarök, TideJS, TideCloakJS, Asgard, master-libs, tidecloak-idp-extensions, tidecloak-iga-extensions, tidecloak-override, and upstream Keycloak), see the detailed changelog.