joaovitoriasilva/endurain v0.16.0-RC2 on GitHub

v0.16.0-RC2 - Release Candidate 2 for v0.16.0 - Single Sign-On support, steps data, sleep data, sleep targets for health metrics and sleep scoring system

This is not a final version, expect bugs and errors
MariaDB support is dropped. Use PostgreSQL as your DB. Check docs if need to migrate from MariaDB to PostgreSQL
Your users sessions will be deleted on upgrade. Users will have to authenticate again
Migration from previous Alpha versions is not supported!

⚠️ Warning: Migration from previous Alpha and RC versions is not supported!
Add instructions for bare-metal install to documentation #426
Refactor bulk import to use thread pool executor #399
Added missing translation files to Crowdin
Refactor health_targets, health_weight, health_steps and health_sleep API for simplicity and add tests
Add ability to delete, create or edit sleep entry
Add sleep scoring system on manual sleep entries
New sleep scoring docs and updated gallery screenshots
New default login photo
Dependency bump

⚠️ Warning: Migration from previous Alpha versions is not supported!
Add user max heart rate override for HR zone calculations #390
Fix pace calculation for lap swimming activities without splits #427
On SSO IdP creation, if custom logo is selected the user can now input an URL for the image #58

⚠️ Warning: Migration from previous Alpha versions is not supported!
Merged changes made until v0.15.9
Fix for some activities with gps track do not show speed/pace chart #422
Move activity visibility settings to a collapsible #423
Added steps data to Health section
Line chart in weight section is now inline with the changes made to activity charts
Added targets for weight and steps

Fixed enable/disable provider from the list level #58
Icon hint inside provider's edit dialog is now aligned with available templates #58
Fixed issue that was breaking "Auto-redirect to SSO" #58
Added ability to have local login as a backup for SSO, even with "Auto-redirect to SSO" enabled. Adding ?forceLocalLogin=true to the url enables this. Example: https://endurain.com?forceLocalLogin=true #58
Enabled redirect on login. Example:
- User is not logged in and navigates to https://endurain.com/settings
- Redirects to https://endurain.com/login?redirect=/settings
- User logs in using local or SSO auth
- User is then redirected to https://endurain.com/settings instead of home page

You will need to change column idp_refresh_token in users_identity_providers table from varchar to text. Example with final stage bellow:

Drop MariaDB support
Introduces support for external identity providers (SSO) #58
New password hasher utility, replacing legacy bcrypt and password logic
New token manager utility for JWT creation/validation
Refresh tokens are now hashed before being stored -> safer (no JWT leakage)
Hashed content now uses Argon2id. Users passwords are updated automatically on new login
Switched file security module to external module - safeuploads
Backend now correctly handles missing files or missing routes on requests
New auth module, centralizing authentication (local and SSO)
Dependency bump

Migrated some frontend components to TS
Introduces support for external identity providers (SSO) #58
Centralized and unified modal logic with new reusable Bootstrap modal composable
Added new validationUtils.ts for validation helper functions
Refactor asset imports to use centralized constants
Dependency bump