SecureOne Releases

New Features

• Public license onboarding page at /license/admin/license_lead_info.html — accessible before any license is activated.
• Dual-action license UI: Request License and Activate Token forms on a single page, consistent with scan-agent UX patterns.
• Browser-aware middleware: HTML Accept header requests from unlicensed browsers now receive a 307 redirect to the onboarding page instead of a JSON 403.
• License-aware auth: /login routes now pre-check license status and redirect to onboarding when no license exists.

Bug Fixes

• Fixed SECUREONE_LICENSE_SERVER_URL is not configured error — added DEFAULT_LICENSE_SERVER_URL fallback with env-var priority chain.
• Fixed deployment_type 422 enum validation error — added normalization to map free-text values (Host Binary, self-hosted, cloud) to valid onprem / saas enum values.
• Fixed env-var public path override silently replacing defaults — _public_paths() now merges env paths with DEFAULT_PUBLIC_PATHS.
• Fixed /license/admin/license_lead_info.html returning 403 — route added to public path allowlist and permission bypass list.

Configuration

• New .env license block: SECUREONE_LICENSE_ENFORCE, SECUREONE_LICENSE_FILE, SECUREONE_LICENSE_PUBLIC_KEY_PATH, SECUREONE_LICENSE_ALGORITHMS, SECUREONE_LICENSE_SERVER_URL, all endpoint paths, and SECUREONE_LICENSE_SYNC_INTERVAL_SECONDS.

Internal / Architecture

• New app/routers/license_lead_info.py with _render_page() helper, action-based POST dispatch, dual protected + public router registration.
• New RBAC resources: ADMIN_SETTINGS_LICENSE_LEAD_INFO and ADMIN_SETTINGS_LICENSE_LEAD_INFO_SUBMIT.
• app/core/licensing.py: Added _normalize_license_request_payload(), _normalize_deployment_type(), default URL fallback chain.