What's New
Single Sign-On (SSO) Support
- OIDC Authentication - Sign in with any OpenID Connect provider (Keycloak, Azure AD, Google, Auth0, Pocket ID, etc.)
- Account Linking/Unlinking - Link or unlink SSO from Account settings
- Auto-registration - Optionally create accounts automatically on first SSO login
- Domain Filtering - Restrict SSO registration to specific email domains
- Enforce SSO-only - Disable password login for regular users while keeping admin fallback access
Core implementation by Dmitry Abramov
Russian Language Support
- Full Russian translation for the interface
Contributed by Dmitry Abramov
Configuration
New environment variables for SSO (see config/env.sso.example):
ENABLE_SSO=true
SSO_PROVIDER_NAME=Keycloak
SSO_CLIENT_ID=your-client-id
SSO_CLIENT_SECRET=your-client-secret
SSO_DISCOVERY_URL=https://your-idp/.well-known/openid-configuration
SSO_REDIRECT_URI=https://your-speakr-host/auth/sso/callback
SSO_AUTO_REGISTER=true
SSO_ALLOWED_DOMAINS=
SSO_DISABLE_PASSWORD_LOGIN=false
See the SSO Setup Guide for detailed instructions.
Upgrading
Warning
Backup First — Before upgrading, back up your database and uploaded files. While migrations are automatic, having a backup ensures you can recover if anything goes wrong.
Docker (Recommended):
# Stop the container and back up your database
docker compose down
cp -a instance instance.backup
# Then upgrade
docker compose pull
docker compose up -dManual:
git pull
pip install -r requirements.txt
python src/app.pyDatabase migrations run automatically on startup.