Appocore 2.4 — Session security & access control
A set of security and access-control improvements: sessions that don't drop, precise permissions, and live data.
Until now, when an access token expired the user was simply logged out. Appocore now silently refreshes the expiring token ahead of time over OAuth 2.0, and tokens are short-lived — so your users are no longer kicked out mid-work, and the platform is meaningfully safer: a stolen token quickly becomes useless.
Access control got more precise: permission checks now consider several roles and rights at once, and each screen hides the blocks a user isn't allowed to see before they even render. Data came alive too — a realtime channel over WebSockets pushes changes to the screen without a manual refresh.
Integrations: OAuth 2.0
Ready to get started?
See how the Appomart team launches Appocore for you — from setup and configuration to support.
Related articles
2.16Appocore 2.16 — Admin navigation by group, images in the editor, tidier tables
The admin panel gets grouped navigation, image upload right in the manual editor and tables that no longer stretch.
2.16Appocore 2.16 — Clear errors and uploads that finish
Rate limits that say so, upload limits that actually apply, large uploads that no longer stop at the limit, and a promo price that no longer sticks to a paid plan.
web 2.2Appocore website 2.2 — A faster foundation and a Changelog section
The same website, only faster, and a new Changelog section with the full product history since 2022.
