-
v27.1-rc.3
Pre-Releasegithub/ci (branch) GitHub Actionsannounce / announce (release) Successful in 32sci / notices (push) Successful in 1m24sci / build (push) Skippedci / publish (push) Skippedgithub/ci (tag) GitHub Actionsci / github (push) Successful in 3m34sreleased this
2026-10-29 17:20:09 +00:00 | 47 commits to main since this releaseThe third release candidate of the 27.1 series. It pairs with inbuxa-server 27.1-rc.3.
Changed: when you set up an OpenID Connect directory, the console now asks for the client ID that the provider issues tokens to, and sends it as the expected audience. Server 27.1-rc.3 refuses tokens issued to other clients when the audience is set.
New: the security page flags OpenID Connect directories with no audience set, because those accept tokens issued to any other app at the same provider.
Container image:
registry.coffeylabs.org/inbuxa/inbuxa-admin:27.1-rc.3, also tagged:27.1-rc.:lateststays on v2026.10.26.2.Downloads