0.2.12: Hardened authentication & system environment variables

[hunvreus]

I started programming in 2001, with Notepad++ and EasyPHP. I'm pretty excited to now have support for modern PHP apps.

What’s changed

• Hardened authentication: authentication links are now only usable once, cookies/JWT are more strict (iss, aud, exp, iat, type, SameSite=Lax...), we also have ways to invalidate individual user logins (tokens_invalid_before field).
• System environment variables: runner containers now have access to a list of system environment variables: DEVPUSH_IP, DEVPUSH_DEPLOYMENT_ID, DEVPUSH_GIT_COMMIT_SHA, DEVPUSH_ENVIRONMENT...
• Refactored deployment service: I've moved more logic out of the deploy task and into DeploymentService, centralizing the logic for managing aliases, Traefik, etc.
• Exposed Team ID and Project ID: since we are now exposing team and project ID in the containers (via DEVPUSH_TEAM_ID and DEVPUSH_PROJECT_ID), I am displaying these values in the settings screens for teams/projects. This will be useful as well when I add the API.
• Various small improvements and bug fixes.

How to upgrade

sudo /opt/devpush/scripts/update.sh

More info: https://devpu.sh/docs/updating/

---

This discussion was created from the release 0.2.12: Hardened authentication & system environment variables.