Release v0.8.0
Breaking Changes:
-
New config files
You have to redo the config file. A new one called config.hjson should be created if you run your server.
More infos about the config format: hjson.org -
Emails are now a lot easier. Examples are in the config.
-
Passwords are now hashed using bcrypt. Old passwords are automatically updated when the user logs in.
New Features:
- Easier config management 6635b44
- Complete overhaul of emails 5cae0b4
- New Config options:
- Added custom script config option 77f8a08
- Added Chrome theme color option
- Added open graph settings
Bugfixes
- Added --production to npm install in README a6160f8
- Added errors to log.txt b7de1a7
- Fixed #103, #102 & #51 51c8e69
- Fixed a lot of security issues c0b6996
- Now using bcrypt to hash passwords
- Switched from md5ed timestamps to JWT's (Login) and true random strings (Email confirmation / Password resets) for tokens.
- Now using helmet for xss and iframe protection
- Updated dependencys
- Added Dependency badge