Skip to content

v1.5.7

Compare
Choose a tag to compare
@arteymix arteymix released this 24 Aug 18:19
· 124 commits to development since this release

This release addresses an issue with password reset and verification tokens that can be consumed by a third-party (i.e. an anti-virus software that analyses emails) by adding a minimal User-Agent-based challenge.

  • implement a challenge for validating password reset and verification tokens
  • redirect to the login page if a token was already used
  • strip authentication token when logging errors in RemoteResourceService
  • allow service accounts to be used as remote search user
  • set the User-Agent header with rdp/{version} when communicating with partner registries
  • use the production mode when bundling resources with Webpack
  • update Spring Boot to 2.6.15
  • update frontend dependencies