Features
- None.
Bug Fixes
- Select the local account for OIDC logins only from trusted claims: a configured
Identifierno longer falls back to other claims,nameis no longer used, andemailrequiresemail_verifiedunless the newTrustUnverifiedEmailoption is enabled (GHSA-q856-qj25-p7fc). Existing setups that matched users by display name or by unverified email must setIdentifierto a stable claim; see the OIDC guide by @0xJacky (cab1e54f) - Verify the organization, audience and token type of Casdoor tokens, and resolve
JWT-Standardtokens by username rather than display name (GHSA-gv2g-m37c-8wwh). Users of other Casdoor organizations can no longer sign in; see the Casdoor guide by @0xJacky (bffd49fb) - Show the container's uptime on the dashboard when Nginx UI runs inside an LXC container by @0xJacky (e3832ce1)
- Keep endpoint settings when restoring a portable backup by @0xJacky (9a42b757)
- Keep a loopback listener from failing the HTTP-01 route check when issuing certificates by @0xJacky (1f5f3f48)
- Make the Retry button of the certificate issue dialog work by @0xJacky (e202fbf2)
- Treat file names Windows rejects as missing files instead of logging errors by @0xJacky (a1bb61cd)
- Read the nginx log level only from a bracketed tag in nginx output by @kevin9327 (00d48cb4)