Skip to content

TaskView

v1.19.6 Breaking

This release includes 1 breaking change for platform teams planning a safe upgrade.

Published 6mo Productivity & Wikis
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

graphview kanban-board nodejs productivity project-management self-hosted
+4 more
task task-management task-manager todoapp

Affected surfaces

auth rbac

Summary

AI summary

Authentication now uses HTTP-only cookies for JWT storage instead of client-side storage.

Full changelog

v1.19.6
Changes

Updated authentication flow to use HTTP-only cookies for JWT storage instead of client-side storage
Improved security and consistency of auth between web and Capacitor mobile apps
Refactored CORS configuration to allow explicit origin control

Environment

CORS_REMOVE_DEFAULT_ALLOWED_ORIGINS=true
CORS_ALLOWED_ORIGINS=https://taskview.handscream.com,https://app.taskview.tech,capacitor://taskview.handscream.com,capacitor://app.taskview.tech,http://localhost:3000

Breaking Changes

  • Authentication flow changed to store JWTs in HTTP-only cookies instead of client-side storage
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track TaskView

Get notified when new releases ship.

Sign up free

About TaskView

Project and task management platform

All releases →

Related context

Beta — feedback welcome: [email protected]