C
v3.145.0
3.145.0 (2026-08-09) Features create record on save instead of on Add click (8b6b978)
C
v3.144.0
3.144.0 (2026-08-06) Features move casbin group rules on user rename (cdd805c)
C
v3.143.0
3.143.0 (2026-08-06) Bug Fixes clear captcha input when refreshing inline captcha (1ee6deb) Features delete by original owner and name when canceling add (9bdde95)
C
v3.142.0
3.142.0 (2026-08-06) Features add properties field to product (c94305f)
C
v3.141.0
3.141.0 (2026-08-04) Features add configurable record retention days per organization (8799cfe)
C
v3.140.1
3.140.1 (2026-08-03) Bug Fixes increase Provider.Scopes column size to varchar(200) (fffa920)
C
v3.140.0
3.140.0 (2026-08-03) Features preserve rfc 8707 resource in fast auto-signin flow (#5690) (6876c61)
C
v3.139.0
3.139.0 (2026-08-03) Features auto-revoke permissions after configurable expire time (468a508)
C
v3.138.0
3.138.0 (2026-08-03) Bug Fixes apply organization default avatar in AddUser when avatar is empty (a590f8a) Features add batch UpdatePermissions API to reduce Casbin enforcer rebuilds (c12e495) make token retention days configurable per organization (a164b06)
C
v3.137.0
3.137.0 (2026-08-03) Features add backchannel logout URL field to application edit page (48c571d)
C
v3.136.0
3.136.0 (2026-08-02) Features keep password requirement popover open until requirements are met (e7884bb)
C
v3.135.0
3.135.0 (2026-08-02) Features preserve RFC 8707 resource parameter in OAuth consent flow (aac215b) set index.html lang attribute to prevent browser mistranslation (0ffe928)
C
v3.134.0
3.134.0 (2026-08-02) Features prevent privilege escalation via forged access keys in AddKey/UpdateKey (ffe28a4)
C
v3.133.0
3.133.0 (2026-08-01) Features forward the request language to the Custom HTTP Email provider (#5670) (2840e2a)
C
v3.132.0
3.132.0 (2026-08-01) Features save the language chosen on the signup page to the new user (#5672) (c3f0edf)
C
v3.131.0
3.131.0 (2026-08-01) Features exempt org admins from CheckLoginPermission to avoid login lockout (483e104)
C
v3.130.0
3.130.0 (2026-08-01) Features Socks5 proxy supports auth (#5687) (2313913)
C
v3.129.0
3.129.0 (2026-08-01) Features add avatar claim to custom jwt (#5688) (2ba1cbb)
C
v3.128.0
3.128.0 (2026-07-30) Bug Fixes serve uploaded files with sandbox, nosniff and attachment headers (#5668) (2b9a052) Features clean up sessions for all applications, not only app-built-in (3f67672)
C
v3.127.0
3.127.0 (2026-07-30) Features keep logout audit records when logPostOnly is enabled (27a9c58)
C
v3.126.0
3.126.0 (2026-07-30) Features reject forgot password for LDAP users before sending the code (c13cd7a)
C
v3.125.0
3.125.0 (2026-07-24) Features capture Beego session id before regeneration so logout deletes the DB session row (8bb6c39)
C
v3.124.0
3.124.0 (2026-07-24) Features preserve device userCode through social login round-trip (f9f608f)
C
v3.123.0
3.123.0 (2026-07-22) Features adapt forget password placeholder to configured providers (216da12)
C
v3.122.0
3.122.0 (2026-07-22) Features match email case-insensitively in GetEmailAndPhone (554a879)
C
v3.121.0
3.121.0 (2026-07-21) Features keep lastSigninTime as previous login in password grant token (e3003a4)
C
v3.120.0
3.120.0 (2026-07-21) Features unmask Email/SMS provider categories so forget password works (cf17074)
C
v3.119.0
3.119.0 (2026-07-17) Features hide forget-password verification methods without a matching Email/SMS provider (24f6273) populate user last_signin_time and last_signin_ip on login (50e77ad)
C
v3.118.0
3.118.0 (2026-07-17) Features change provider Content field to mediumtext to fix overflow error (33a571e)
C
v3.117.0
3.117.0 (2026-07-14) Features show MFA setup for LDAP users with empty signupApplication (c52a703)