Skip to content

feat: hide CIRA in profile when disabled on the server - #3445

Closed
nmgaston wants to merge 2949 commits into
mainfrom
hideDisabledCIRA
Closed

feat: hide CIRA in profile when disabled on the server#3445
nmgaston wants to merge 2949 commits into
mainfrom
hideDisabledCIRA

Conversation

@nmgaston

@nmgaston nmgaston commented Jul 16, 2026

Copy link
Copy Markdown
Contributor

This pull request refines the handling of the CIRA (Cloud Internet Remote Access) feature in the profile management UI, improving both the user experience and code maintainability. The main changes ensure that CIRA options only appear when available, prevent users from selecting CIRA when it's disabled, and clean up related UI and translation strings. The test suite is expanded to cover these scenarios.

CIRA feature handling and UI improvements:

  • The CIRA connection option and related fields in profile-detail.component.html are now only shown if CIRA is enabled, preventing users from selecting or viewing CIRA options when the feature is unavailable. The fallback logic ensures profiles referencing CIRA automatically switch to a supported mode if CIRA is disabled.
  • The warning icon and tooltip indicating a profile uses CIRA when it's disabled are removed from the profiles list, streamlining the UI.

Logic and state management:

  • Introduced a new ciraAvailabilityResolved signal to track when the server's CIRA feature status is known, preventing premature changes to profile forms before the server response arrives.
    Test coverage:

  • Added and updated tests in profile-detail.component.spec.ts to verify correct behavior when CIRA is enabled, disabled, or the feature status is pending, including automatic fallback logic and UI visibility.
    Translation cleanup:

  • Removed unused translation strings related to CIRA being disabled from all localization files, as the warning and inline notes are no longer shown in the UI.

PR Checklist

  • Unit Tests have been added for new changes
  • API tests have been updated if applicable
  • All commented code has been removed
  • If you've added a dependency, you've ensured license is compatible with Apache 2.0 and clearly outlined the added dependency.

What are you changing?

Anything the reviewer should know when reviewing this PR?

If the there are associated PRs in other repositories, please link them here (i.e. device-management-toolkit/repo#365 )

dependabot Bot and others added 30 commits April 8, 2026 14:28
Bumps nginx from `0848ca8` to `6a93380`.

---
updated-dependencies:
- dependency-name: nginx
  dependency-version: mainline-alpine-slim
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps node from `64202f1` to `8a40d4c`.

---
updated-dependencies:
- dependency-name: node
  dependency-version: 25-bullseye-slim
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the angular-stack group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `21.2.6` | `21.2.7` |
| [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `21.2.6` | `21.2.7` |
| [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `21.2.6` | `21.2.7` |
| [@angular-devkit/build-angular](https://github.com/angular/angular-cli) | `21.2.5` | `21.2.6` |
| [@angular/cli](https://github.com/angular/angular-cli) | `21.2.5` | `21.2.6` |

Updates `@angular/common` from 21.2.6 to 21.2.7
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.7/packages/common)

Updates `@angular/compiler` from 21.2.6 to 21.2.7
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.7/packages/compiler)

Updates `@angular/core` from 21.2.6 to 21.2.7
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.7/packages/core)

Updates `@angular-devkit/build-angular` from 21.2.5 to 21.2.6
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@v21.2.5...v21.2.6)

Updates `@angular/cli` from 21.2.5 to 21.2.6
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@v21.2.5...v21.2.6)

---
updated-dependencies:
- dependency-name: "@angular/common"
  dependency-version: 21.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular-stack
- dependency-name: "@angular/compiler"
  dependency-version: 21.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular-stack
- dependency-name: "@angular/core"
  dependency-version: 21.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular-stack
- dependency-name: "@angular-devkit/build-angular"
  dependency-version: 21.2.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: angular-stack
- dependency-name: "@angular/cli"
  dependency-version: 21.2.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: angular-stack
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps node from `8a40d4c` to `346a545`.

---
updated-dependencies:
- dependency-name: node
  dependency-version: 25-bullseye-slim
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@bbbca2d...043fb46)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [jasmine-core](https://github.com/jasmine/jasmine) from 6.1.0 to 6.2.0.
- [Release notes](https://github.com/jasmine/jasmine/releases)
- [Changelog](https://github.com/jasmine/jasmine/blob/main/RELEASE.md)
- [Commits](jasmine/jasmine@v6.1.0...v6.2.0)

---
updated-dependencies:
- dependency-name: jasmine-core
  dependency-version: 6.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…3257)

Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.16.1 to 2.17.0.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@fe10465...f808768)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) from 8.58.1 to 8.58.2.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.58.2/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: typescript-eslint
  dependency-version: 8.58.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.11 to 1.16.0.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](follow-redirects/follow-redirects@v1.15.11...v1.16.0)

---
updated-dependencies:
- dependency-name: follow-redirects
  dependency-version: 1.16.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the angular-stack group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `21.2.7` | `21.2.8` |
| [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `21.2.7` | `21.2.8` |
| [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `21.2.7` | `21.2.8` |
| [@angular-devkit/build-angular](https://github.com/angular/angular-cli) | `21.2.6` | `21.2.7` |
| [@angular/cli](https://github.com/angular/angular-cli) | `21.2.6` | `21.2.7` |

Updates `@angular/common` from 21.2.7 to 21.2.8
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.8/packages/common)

Updates `@angular/compiler` from 21.2.7 to 21.2.8
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.8/packages/compiler)

Updates `@angular/core` from 21.2.7 to 21.2.8
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.8/packages/core)

Updates `@angular-devkit/build-angular` from 21.2.6 to 21.2.7
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@v21.2.6...v21.2.7)

Updates `@angular/cli` from 21.2.6 to 21.2.7
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@v21.2.6...v21.2.7)

---
updated-dependencies:
- dependency-name: "@angular/common"
  dependency-version: 21.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular-stack
- dependency-name: "@angular/compiler"
  dependency-version: 21.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular-stack
- dependency-name: "@angular/core"
  dependency-version: 21.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular-stack
- dependency-name: "@angular-devkit/build-angular"
  dependency-version: 21.2.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: angular-stack
- dependency-name: "@angular/cli"
  dependency-version: 21.2.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: angular-stack
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: madhavilosetty-intel <madhavi.losetty@intel.com>
Bumps [hono](https://github.com/honojs/hono) from 4.12.12 to 4.12.14.
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.12.12...v4.12.14)

---
updated-dependencies:
- dependency-name: hono
  dependency-version: 4.12.14
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.1 to 4.35.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@c10b806...95e58e9)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.35.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…3267)

Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.17.0 to 2.18.0.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@f808768...6c3c2f2)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: DevipriyaS17 <devipriya.s@intel.com>
Bumps nginx from `6a93380` to `c9366b8`.

---
updated-dependencies:
- dependency-name: nginx
  dependency-version: mainline-alpine-slim
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [cypress](https://github.com/cypress-io/cypress) from 15.13.1 to 15.14.0.
- [Release notes](https://github.com/cypress-io/cypress/releases)
- [Changelog](https://github.com/cypress-io/cypress/blob/develop/CHANGELOG.md)
- [Commits](cypress-io/cypress@v15.13.1...v15.14.0)

---
updated-dependencies:
- dependency-name: cypress
  dependency-version: 15.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [eslint](https://github.com/eslint/eslint) from 10.2.0 to 10.2.1.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.2.0...v10.2.1)

---
updated-dependencies:
- dependency-name: eslint
  dependency-version: 10.2.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.3.0 to 6.4.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@53b8394...48b55a0)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: DevipriyaS17 <devipriya.s@intel.com>
Dependabot's angular-stack group bumped @angular/common, @angular/compiler,
and @angular/core to 21.2.9 but left the rest at 21.2.8.
Because @angular/animations@21.2.8 pins @angular/core to exactly 21.2.8, npm install failed with ERESOLVE.
Bumped the remaining @angular/* packages to ~21.2.9 so peer dependencies resolve cleanly:

- @angular/animations
- @angular/forms
- @angular/platform-browser
- @angular/platform-browser-dynamic
- @angular/router
- @angular/compiler-cli (dev)
- @angular/localize (dev)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) from 9.39.4 to 10.0.1.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](https://github.com/eslint/eslint/commits/v10.0.1/packages/js)

---
updated-dependencies:
- dependency-name: "@eslint/js"
  dependency-version: 10.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…3272)

Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.18.0 to 2.19.0.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@6c3c2f2...8d3c67d)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) from 8.58.2 to 8.59.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.0/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: typescript-eslint
  dependency-version: 8.59.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: DevipriyaS17 <devipriya.s@intel.com>
Bumps [cypress](https://github.com/cypress-io/cypress) from 15.14.0 to 15.14.1.
- [Release notes](https://github.com/cypress-io/cypress/releases)
- [Changelog](https://github.com/cypress-io/cypress/blob/develop/CHANGELOG.md)
- [Commits](cypress-io/cypress@v15.14.0...v15.14.1)

---
updated-dependencies:
- dependency-name: cypress
  dependency-version: 15.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [prettier-plugin-multiline-arrays](https://github.com/electrovir/prettier-plugin-multiline-arrays) from 4.1.5 to 4.1.6.
- [Release notes](https://github.com/electrovir/prettier-plugin-multiline-arrays/releases)
- [Commits](electrovir/prettier-plugin-multiline-arrays@v4.1.5...v4.1.6)

---
updated-dependencies:
- dependency-name: prettier-plugin-multiline-arrays
  dependency-version: 4.1.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps node from `346a545` to `7f01b6e`.

---
updated-dependencies:
- dependency-name: node
  dependency-version: 25-bullseye-slim
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
## [3.57.2](v3.57.1...v3.57.2) (2026-04-22)

### Performance Improvements

* improve KVM connection time ([f97baa2](f97baa2))
Bumps node from `7f01b6e` to `7ec50c1`.

---
updated-dependencies:
- dependency-name: node
  dependency-version: 25-bullseye-slim
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@rsdmike

rsdmike commented Aug 11, 2026

Copy link
Copy Markdown
Member

+1 to @madhavilosetty-intel's comment — and I'd go a step further: right now the conversion is destructive. Opening an existing CIRA profile on a CIRA-disabled server switches it to Direct and clears ciraConfigName; saving any edit (even just a tag) permanently drops the CIRA association. The server forces the conversion (it 400s updates that still reference a CIRA config), so converting is correct — but there should be a confirmation dialog before saving, and the server already provides the right message for it: "Re-enable CIRA on this instance, or change the connection mode on this profile."

Two related issues in the coercion logic added for the earlier review feedback:

  1. The TLS branch in coerceConnectionModeIfCiraUnavailable() never runs. By the time it executes, tlsMode has already been nulled by the CIRA form logic (and a profile that actually has TLS takes the TLS path earlier and never reaches coercion). So every converted profile lands on Direct — the least secure mode — even when the intent was to keep TLS profiles on TLS.

  2. While /server/features is in flight, an existing CIRA profile shows no selected connection mode at all, because the whole CIRA section is behind @if (ciraEnabled()) and that starts false in enterprise. On a server where CIRA is enabled, the profile briefly renders with only TLS/Direct and nothing selected — which looks like the bug reported earlier in this thread (Aug 3 screenshot). Keeping the section rendered-but-disabled until the features call resolves would fix both the flash and the misleading state.

dependabot Bot and others added 6 commits August 11, 2026 10:06
Bumps [eslint](https://github.com/eslint/eslint) from 10.8.0 to 10.8.1.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.8.0...v10.8.1)

---
updated-dependencies:
- dependency-name: eslint
  dependency-version: 10.8.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [esbuild](https://github.com/evanw/esbuild) from 0.28.1 to 0.28.2.
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](evanw/esbuild@v0.28.1...v0.28.2)

---
updated-dependencies:
- dependency-name: esbuild
  dependency-version: 0.28.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
The session JWT was persisted in localStorage under `loggedInUser`,
leaving it readable by any script running on the page. Console now
issues the same token as an HttpOnly cookie, so the browser no longer
needs its own copy.

- drop the Authorization header from the interceptor and send
  withCredentials instead, so the cookie is stored and returned;
  it is needed on the login request too, or a cross-origin
  Set-Cookie is discarded
- replace the stored token with a `sessionActive` flag, which is a
  UI hint rather than a credential
- purge the legacy `loggedInUser` key on start-up so upgrading does
  not leave a usable token sitting on disk
- call POST /api/v1/authorize/logout, since only the server can
  expire an HttpOnly cookie

Not a breaking change. Release binaries embed this UI, so Console and
the UI ship as one artifact and cannot drift apart. Headless
deployments are unaffected: REST clients keep authenticating with the
Authorization header, which still takes precedence. Only local
development, where the UI is served separately on :4200, needs both
sides moved together.

The KVM/SOL/IDER redirection token is deliberately untouched: it is
already short-lived and held in memory, and it must stay readable by
script because it travels in the Sec-WebSocket-Protocol header.
# [3.64.0](v3.63.1...v3.64.0) (2026-08-12)

### Features

* **login:** use HttpOnly session cookie instead of localStorage ([#3499](#3499)) ([f008ded](f008ded))
PR #3499 moved the session to an HttpOnly cookie issued by the Console
binary. Cloud builds reach MPS and RPS through Kong, whose jwt plugin
only reads the Authorization header and never a cookie, so dropping the
header left every request returning 401.

Branch the auth transport on environment.cloud, which already separates
the two backends throughout the app:

- cloud restores the Authorization header, including on
  /authorize/redirection, which Kong guards and KVM/SOL depend on
- the Console binary keeps withCredentials and the sessionActive flag
- the start-up purge of loggedInUser is now Console-only; under cloud it
  deleted the token the next request needs
- the logout POST is Console-only, since MPS has no such route

Restoring a session checks for a usable token rather than the presence
of the key, and reading it tolerates a corrupt value, since the
constructor calls it and a throw there would take down bootstrap. The
interceptor omits the header when no token is held rather than sending
an empty bearer.

Cloud keeps the JWT in localStorage until MPS issues the cookie and Kong
is configured to read it.
## [3.64.1](v3.64.0...v3.64.1) (2026-08-13)

### Bug Fixes

* **login:** keep bearer auth for cloud builds ([#3501](#3501)) ([301146f](301146f)), closes [#3499](#3499)
@nmgaston

Copy link
Copy Markdown
Contributor Author

@nmgaston Even though CIRA enabled on server, profile disables it image

@madhavilosetty-intel this was fixed.

dependabot Bot and others added 11 commits August 15, 2026 15:11
…3502)

Bumps the angular-stack group with 1 update: [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint).


Updates `typescript-eslint` from 8.66.0 to 8.67.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.67.0/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: typescript-eslint
  dependency-version: 8.67.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: angular-stack
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [cypress](https://github.com/cypress-io/cypress) from 15.20.0 to 15.20.1.
- [Release notes](https://github.com/cypress-io/cypress/releases)
- [Changelog](https://github.com/cypress-io/cypress/blob/develop/CHANGELOG.md)
- [Commits](cypress-io/cypress@v15.20.0...v15.20.1)

---
updated-dependencies:
- dependency-name: cypress
  dependency-version: 15.20.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…3507)

Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.20.1 to 2.21.0.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@b09bb98...05e3151)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 9.0.0 to 10.0.1.
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@c771a70...20cfd1b)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: 10.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Natalie Gaston <natalie.gaston@intel.com>
Bumps the codeql-action group with 4 updates:
[github/codeql-action/init](https://github.com/github/codeql-action),
[github/codeql-action/autobuild](https://github.com/github/codeql-action),
[github/codeql-action/analyze](https://github.com/github/codeql-action) and
[github/codeql-action/upload-sarif](https://github.com/github/codeql-action).


Updates `github/codeql-action/init` from 4.37.6 to 4.37.7
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@5595cca...ff2f1c6)

Updates `github/codeql-action/autobuild` from 4.37.6 to 4.37.7
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@5595cca...ff2f1c6)

Updates `github/codeql-action/analyze` from 4.37.6 to 4.37.7
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@5595cca...ff2f1c6)

Updates `github/codeql-action/upload-sarif` from 4.37.6 to 4.37.7
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@5595cca...ff2f1c6)

---
updated-dependencies:
- dependency-name: github/codeql-action/init
  dependency-version: 4.37.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: codeql-action
- dependency-name: github/codeql-action/autobuild
  dependency-version: 4.37.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: codeql-action
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.37.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: codeql-action
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.37.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: codeql-action
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* build(deps): Bump the angular-stack group with 5 updates

Bumps the angular-stack group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `21.2.19` | `21.2.20` |
| [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `21.2.19` | `21.2.20` |
| [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `21.2.19` | `21.2.20` |
| [@angular-devkit/build-angular](https://github.com/angular/angular-cli) | `21.2.20` | `21.2.21` |
| [@angular/cli](https://github.com/angular/angular-cli) | `21.2.20` | `21.2.21` |


Updates `@angular/common` from 21.2.19 to 21.2.20
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/v21.2.20/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.20/packages/common)

Updates `@angular/compiler` from 21.2.19 to 21.2.20
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/v21.2.20/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.20/packages/compiler)

Updates `@angular/core` from 21.2.19 to 21.2.20
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/v21.2.20/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.20/packages/core)

Updates `@angular-devkit/build-angular` from 21.2.20 to 21.2.21
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@v21.2.20...v21.2.21)

Updates `@angular/cli` from 21.2.20 to 21.2.21
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@v21.2.20...v21.2.21)

---
updated-dependencies:
- dependency-name: "@angular/common"
  dependency-version: 21.2.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular-stack
- dependency-name: "@angular/compiler"
  dependency-version: 21.2.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular-stack
- dependency-name: "@angular/core"
  dependency-version: 21.2.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular-stack
- dependency-name: "@angular-devkit/build-angular"
  dependency-version: 21.2.21
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: angular-stack
- dependency-name: "@angular/cli"
  dependency-version: 21.2.21
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: angular-stack
...

Signed-off-by: dependabot[bot] <support@github.com>

* build(deps): align @angular packages on 21.2.20

The angular-stack bump left animations, forms, router, platform-browser,
platform-browser-dynamic, compiler-cli and localize at ~21.2.19 while
core, common and compiler moved to ~21.2.20. Angular declares exact peers
on @angular/core, so npm install failed with ERESOLVE. Align the ranges
and refresh the lockfile.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: madhavilosetty-intel <madhavi.losetty@intel.com>
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 4.2.0 to 4.3.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@bb05f3f...37fe631)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
# [3.65.0](v3.64.1...v3.65.0) (2026-08-20)

### Features

* **devices:** default useTLS and allowSelfSigned on add device ([#3480](#3480)) ([ede6745](ede6745))
@nmgaston
nmgaston force-pushed the hideDisabledCIRA branch 4 times, most recently from d6c4f43 to 57dab5f Compare August 21, 2026 20:00
@nmgaston

Copy link
Copy Markdown
Contributor Author

Moving this over to a clean branch following PR and merge issues: #3514

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.