What's New in v1.2.0

This release is mostly a polish-and-fix pass on the Enterprise v1.1.0 feature set, plus one new capability: Windows RDP access.

New: Windows RDP (Beta)

You can now connect to Windows machines over RDP, not just a terminal shell — a full Windows desktop streamed to your browser. See Windows RDP (Beta) for setup and current limitations.

Fixed: vsay-auth

• JWT token rotation — tokens now correctly expire and rotate on the intended 24-hour cycle. Previously, some sessions held onto stale tokens past their expiry window.
• Refresh token flow — POST /api/auth/refresh no longer drops a session early when called near the expiry boundary; refreshing a still-valid token reliably returns a new one.
• Password reset — the forgot-password / reset-password flow now works end-to-end. See the Authentication API for the endpoints.

Fixed: vsay-agent

• Reliability fixes to the agent's reconnect logic around the same token-rotation window, so agents no longer briefly show offline when the backend rotates credentials.

Everything Else

All other Enterprise v1.1.0 functionality — multi-tenancy, hierarchical RBAC, audit logs, session recording, real-time monitoring, OIDC/OAuth2 login, Keycloak authentication — carries over unchanged, with general UI polish. See How We Are Different and Architecture for the full feature set.