LocalAI

0 Fork 0

mirror of https://github.com/mudler/LocalAI.git synced 2026-10-28 09:08:54 -04:00

Files

T

Ettore Di Giacinto 180822c546 fix(mcp): require https for the oauth2 token_url

The client secret is sent to token_url, so a plain http endpoint would
expose it. Reject non-https URLs except for loopback hosts, which keeps
local identity providers and tests working. Document the restriction,
recommend client_secret_env over a literal secret, and note that rotating
a *_env secret needs a restart because sessions and cached tokens are
keyed by configuration, not by the environment value.

Assisted-by: Claude Code:claude-sonnet-5-5
Signed-off-by: Ettore Di Giacinto <mudler@localai.io>

2026-10-13 08:08:43 +00:00

advanced

feat(pii): extend a detection over the next word (extend_to_next_word)

2026-10-13 08:06:49 +00:00

features

fix(mcp): require https for the oauth2 token_url

2026-10-13 08:08:43 +00:00

getting-started

feat(launcher): ship an AppImage on tagged releases (#12647 )

2026-10-12 17:17:43 +02:00

operations

feat(pii): extend a detection over the next word (extend_to_next_word)