Skip to content

Traefik Manager

v1.0.4 Breaking

This release includes breaking changes for platform teams planning a safe upgrade.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

alpine-linux bcrypt crsf csrf-protection docker fernet
+13 more
flask flask-limiter flask-session gunicorn phosphor-icons python ruamel-yaml tailwind-css totp traefik traefik-management traefik-web-ui vanilla-js

Affected surfaces

auth breaking_upgrade

Summary

AI summary

Fixed Authelia forward‑auth template to use the current endpoint and ensured OIDC callback URLs honor X‑Forwarded‑Proto for HTTPS.

Full changelog

Bug Fixes

  • Authelia forward-auth template uses deprecated endpoint - the built-in Authelia middleware template was using the legacy /api/verify?rd=... URL. Updated to /api/authz/forward-auth to match current Authelia documentation. (#39)
  • OIDC callback URL uses http instead of https behind reverse proxy - TM now respects X-Forwarded-Proto from Traefik so OIDC redirect URIs correctly use https when running behind a TLS-terminating reverse proxy. (#40)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Traefik Manager

Get notified when new releases ship.

Sign up free

About Traefik Manager

Clean web interface for managing Traefik

All releases →

Related context

Beta — feedback welcome: [email protected]