Skip to content

Publish 2.1.0

Compare
Choose a tag to compare
@zargarzadehm zargarzadehm released this 25 Apr 08:22
· 281 commits to dev since this release

guard-service

2.1.0

Minor Changes

  • Add Cors headers to all apis according to config
  • Add rate limit to all apis
  • add trust key to Tss

Patch Changes

  • add salt to the apiKey to prevent precomputed hash attacks

⚠️ Notes: We have made a security enhancement in the guard-service apiKey authentication. While we will continue to support the old algorithm (generating just a blake2b hash of your apiKey), we have transitioned to using salted hash instead of a plain hash. It is important to note that the previous method of creating the apiKeyHash may be vulnerable to precomputed attacks. We recommend regenerating your apiKey using the latest version of our CLI application. You can find instructions on how to do this in our documentation.

Full Changelog: 2.0.0...2.1.0