v.1.9.0 (main 1.9)
Back End / API Changelog
This changelog only refers to chanegs to the API and back end. If you want to read about changes in the front end, take a look at the front end releases.
Major Changes
ReCAPTCHA Validation
Requests to the POST /api/users
(account registration) endpoint and POST /api/users/me/passwordreset/confirm
(password reset confirmation) now must be validated using a ReCAPTCHA v2 response which is then validated against Google's ReCAPTCHA validation API endpoint.
If you are self-hosting myrunes, you need to add the site key as well as the secret key to the myrunes backend config file under the webserver
category.
webserver:
# ...
recaptcha:
sitekey: "your_site_key_here"
secretkey: "your_secret_key_here"
Then, you can access your site key via the GET /api/recaptchainfo
endpoint.
Minor
- It will be checked now if an entered e-mail address is already being used by another account. This fixes an unconventional behaviour which resets the password of the account which was queried first by e-mail when resetting password by e-mail address.
This means you should change the mail of accounts which use same e-mail addresses!
Docker Image
# docker pull myrunes/backend:1.9.0