release: 1.3.2 — LiteSpeed/Hostinger header normalization

Author: wpsistic-pixel

CHANGELOG.md

@@ -7,6 +7,16 @@ Format: [Keep a Changelog](https://keepachangelog.com/) · Versioning: [SemVer](
 
 Nothing yet.
 
+## [1.3.2] — 2026-09-11
+
+### Fixed
+
+- HMAC authentication on LiteSpeed/Hostinger hosting: incoming `X-Bridgistic-*` headers are
+  rewritten to underscored (`X_Bridgistic_*`) variants, so signature verification saw no
+  credentials and every API call failed with `401 bridgistic_auth_missing`. Header names are
+  now normalized (`_` → `-`, lowercased) before verification. Affects Hostinger, LiteSpeed
+  Enterprise and any stack that underscores custom header names.
+
 ## [1.3.1] — 2026-09-03
 
 ### Fixed

wordpress-plugin/bridgistic/bridgistic.php

@@ -3,7 +3,7 @@
  * Plugin Name:       Bridgistic
  * Plugin URI:        https://github.com/wordpressistic/bridgistic
  * Description:        Connect your WordPress site to any AI model — Claude, ChatGPT, Codex, Gemini, Cursor or any MCP client — with production-safe, scoped control — HMAC-signed requests, least-privilege keys, dry-run and human approval on destructive ops, one-call rollback, full audit, usage metering, and scheduled playbooks.
- * Version:           1.3.1
+ * Version:           1.3.2
  * Requires at least: 6.4
  * Requires PHP:      8.0
  * Author:            Shuvo Sarker (WordPressistic)
@@ -24,7 +24,7 @@
 	exit; // No direct access.
 }
 
-define( 'BRIDGISTIC_VERSION', '1.3.1' );
+define( 'BRIDGISTIC_VERSION', '1.3.2' );
 define( 'BRIDGISTIC_FILE', __FILE__ );
 define( 'BRIDGISTIC_DIR', plugin_dir_path( __FILE__ ) );
 define( 'BRIDGISTIC_URL', plugin_dir_url( __FILE__ ) );

wordpress-plugin/bridgistic/readme.txt

@@ -4,7 +4,7 @@ Tags: mcp, ai, claude, chatgpt, gemini, automation, rest-api
 Requires at least: 6.4
 Tested up to: 6.8
 Requires PHP: 8.0
-Stable tag: 1.3.1
+Stable tag: 1.3.2
 License: GPL-2.0-or-later
 License URI: https://www.gnu.org/licenses/gpl-2.0.html