v1.5.7
This release addresses an issue with password reset and verification tokens that can be consumed by a third-party (i.e. an anti-virus software that analyses emails) by adding a minimal User-Agent
-based challenge.
- implement a challenge for validating password reset and verification tokens
- redirect to the login page if a token was already used
- strip authentication token when logging errors in RemoteResourceService
- allow service accounts to be used as remote search user
- set the
User-Agent
header withrdp/{version}
when communicating with partner registries - use the production mode when bundling resources with Webpack
- update Spring Boot to 2.6.15
- update frontend dependencies