github 0xJacky/nginx-ui v2.9.5

3 hours ago

Features

  • None.

Bug Fixes

  • Select the local account for OIDC logins only from trusted claims: a configured Identifier no longer falls back to other claims, name is no longer used, and email requires email_verified unless the new TrustUnverifiedEmail option is enabled (GHSA-q856-qj25-p7fc). Existing setups that matched users by display name or by unverified email must set Identifier to a stable claim; see the OIDC guide by @0xJacky (cab1e54f)
  • Verify the organization, audience and token type of Casdoor tokens, and resolve JWT-Standard tokens by username rather than display name (GHSA-gv2g-m37c-8wwh). Users of other Casdoor organizations can no longer sign in; see the Casdoor guide by @0xJacky (bffd49fb)
  • Show the container's uptime on the dashboard when Nginx UI runs inside an LXC container by @0xJacky (e3832ce1)
  • Keep endpoint settings when restoring a portable backup by @0xJacky (9a42b757)
  • Keep a loopback listener from failing the HTTP-01 route check when issuing certificates by @0xJacky (1f5f3f48)
  • Make the Retry button of the certificate issue dialog work by @0xJacky (e202fbf2)
  • Treat file names Windows rejects as missing files instead of logging errors by @0xJacky (a1bb61cd)
  • Read the nginx log level only from a bracketed tag in nginx output by @kevin9327 (00d48cb4)

Contributors

@0xJacky
@kevin9327

Don't miss a new nginx-ui release

NewReleases is sending notifications on new releases.