This release strengthens account security by revoking sessions after password changes, securing authentication cookies over HTTPS, hashing authentication tokens at rest, and throttling failed login attempts. It also fixes several watch history and watch date issues and adds support for MySQL Unix socket connections.
What's Changed
- Feature: Add MySQL Unix socket support by @leepeuker in #812
- Fix: Fix watch date editing by @leepeuker in #821
- Fix: Preserve watch history when deleting locations by @leepeuker in #822
- Fix: Fix positioning for unknown watch dates by @leepeuker in #823
- Fix: Preserve explicit watch date positions by @leepeuker in #824
- Security: Revoke sessions on password change by @leepeuker in #816
- Security: Set secure authentication cookies over HTTPS by @leepeuker in #817
- Security: Hash authentication tokens at rest by @leepeuker in #818
- Security: Throttle failed login attempts by @leepeuker in #820
- Maintenance: Replace ZipStream with native ZIP export by @leepeuker in #810
- Maintenance: Clarify that TV support is not planned by @leepeuker in #811
Full Changelog: 0.74.0...0.75.0