← All news
  • Release
  • 2 min read

Tilspire 1.12.0

Managing the Operator API: one proof for fifteen minutes, Create, Read, Update and Delete rights, and Extend and Roll for credentials.

tilspire 1.12.0 makes the Operator API easier to run day to day: fewer interruptions while you set it up, clearer rights, and a quick way to replace a secret.

One proof, fifteen minutes #

Changes on the Operator API page still ask for your password and a code from your authenticator app, but one proof now covers the next 15 minutes, so setting up grants no longer means a code for every switch. Issuing or rolling a credential still asks every time. The page shows when the window closes, and End now closes it early.

Create, Read, Update, Delete #

Gates and grants are now tables with four rights side by side. Proposing a new page and proposing an edit to one are separate rights, so an assistant can be allowed to suggest edits without adding pages. Every existing grant to propose became both rights, so no credential can do more or less than before. Delete is shown but not offered for your content: the API still can't delete anything on your site, only withdraw its own waiting proposals.

Extend and Roll #

Extend gives a live credential more time without a new secret. Roll swaps its secret for a new one with the same name, addresses and grants, and withdraws what the old one had waiting — the step to take if a secret may have leaked. A credential whose account has changed its password or two-factor sign-in is marked Account changed, and Roll brings it back.

This announcement and the updated documentation were proposed through the Operator API and approved by a person. Read the Operator API guide, or see the changelog.