Poznote 6.126.0-beta
Important
If you use SSO (OIDC), read the Security section before updating.
This release changes how SSO sign-ins are linked to existing accounts and gives you more control over the phone layout.
✨ New
- Hide the scroll arrows: Element visibility has a new "Scroll to top and bottom arrows" option that hides the arrows at the bottom-right of a note. #1663
- Collapsible icon menu on phones: the left icon menu now has its collapse chevron on a phone too, so the list can take the full width. #1663
🚀 Improved
- On a phone, hiding the Element visibility button also removes it from the "..." menu. #1663
🔒 Security
- SSO no longer links an existing account by its username: an SSO sign-in now matches an existing account only by its OIDC subject or by a verified email (case does not matter). Before, anyone who could choose their username at the identity provider could sign in to an account that had never used SSO, the admin account included.
- Action for admins: an account that used to sign in through SSO only because its username matched will be refused at its next SSO sign-in. Before you update, add the email the provider sends to that account in Settings > Admin Tools > User Management. You can also paste the OIDC subject into it, which the server log shows after a refused sign-in.
❤️ Enjoying Poznote?
Thank you to everyone whose donations have allowed Poznote to keep growing and become what it is today. If you would like to support the project, it is this way: Ko-fi.
Poznote Discord community -> https://discord.gg/fuEV6uqf4N
Poznote is also available in Caliber Node and PikaPods.
If you're curious about my other projects, you can find them at timpoz.com. 😊