Release notes v17.4.1

Release Details

v17.4.1 - Basic Auth push fix

A small patch release fixing a server-to-server authentication bug for sites using Umbraco's Basic Auth shared-secret bypass.

Fixed

  • Publisher: server-to-server push requests no longer fail with 401 The request requires user authentication on a target site that has Umbraco's Basic Auth shared-secret bypass configured (Umbraco:CMS:BasicAuthSettings:SharedSecret). The header carrying the shared secret was being built with the wrong key/value pairing and then silently overwritten before the request went out, so the target rejected the push as unauthenticated even when the secret was configured correctly on both servers.