⭐ Highlights
- 🆔 OpenID Connect (OIDC) authentication support
- ⚠️ Breaking change: authentication configuration renamed and refactored
- 🔐 New authentication architecture enabling Desktop & CLI registration via OIDC
- 🏢 Advanced LDAP support (service bind, admin break-glass, DN/CN, auto user & permissions)
- 🔑 Support for OTP recovery codes and application-based client registration
- 🧩 Improved configuration validation and error diagnostics
- ✨ User experience improvements (recent items redesign, file rename behavior)
- 📊 JSON logging output for improved observability
- ➕ And many other improvements and refinements
➡️ Read the release announcement
⚠ BREAKING CHANGES
- auth: rename method to provider in AuthConfig and replace authMethod with authProvider for naming consistency (9d187e0)
- backend:auth:ldap: move adminGroup to options (96d52c9)
Features
- auth:oidc: enhance OIDC configuration (8bcf35d)
- auth:oidc: revise authentication flow logic (abb9979)
- auth:sync: introduce
registerWithAuthto enable desktop client registration from external process (OIDC) (b6525ec) - auth: implement OIDC authentication support and refactor auth providers (28bbf1d)
- auth: refactor authentication services and add desktop client registration support (08c6e0f)
- auth: support desktop app OIDC authentication flow (0d6963f)
- backend:auth:ldap: add service bind support, adminGroup DN/CN handling, optimized search flow, tests, and updated docs (f7b9d0f)
- backend:auth:ldap: add autoCreateUser and autoCreatePermissions (96d52c9)
- backend:auth: add LDAP/OIDC local password fallback and admin break-glass access (23a93b5)
- backend:config: improve error messages for environment config validation (a5df529)
- backend:sync: add support for TOTP recovery codes during client registration (3cb3ea4)
- backend:sync: improve sync path error handling and enforce subdirectory selection (549ada3)
- backend: add
jsonOutputoption to logger (02cbe04) - frontend:spaces: improve server connection error handling and UI feedback (097b230)
- frontend/backend: add
clientauth scope for password-based apps to register servers across desktop apps and CLI (5f131bf) - frontend: allow filename rename validation on blur (da930b8)
- frontend: restyle recents widget (9845502)
- frontend: update widget badge styles and color scheme (10feb97)
Bug Fixes
- backend:webdav: ensure lock paths in headers are decoded correctly (ceb2f38)
- backend:webdav: set correct http status line (a651fc3)
- frontend:routes: remove redundant
canActivateChildguard from app routes (3b5a80a) - frontend:spaces: remove tap directive keyboard handler blocking spaces in edit input and preserve whitespace in displayed file name (e0b328b)