Skip to content

EdgeShell v1.8.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 15 Oct 13:43
· 30 commits to main since this release
v1.8.2
597f656

Added

  • Verified email for every account when outgoing mail is set up: after 2FA at the first sign-in, a link is sent to the address and the app opens once it is confirmed. A new address is used only after its link is opened (older links stop working). Accounts from before confirm their address at the next sign-in. Without mail, nothing changes.
  • Password reset by email for every role (to the verified address only; 2FA stays on). Accounts without a verified address still go to the administrators.
  • Admin alerts in the sidebar: open tickets on Issues; reset requests and sign-ups waiting on User Management.
  • Ticket notifications are sent over SMTP when useSend is not configured.

Security

  • Email address checks use a pattern that cannot backtrack (CodeQL py/polynomial-redos), with a length cap.

Changed

  • The activity log is for administrators only: the page, its sidebar link, the dashboard's Recent Activity and Recent Errors panels, and GET /api/v1/activity (403) are no longer available to operators and monitors. Node logs in the Log Viewer are unchanged.
  • The login page's username field no longer suggests an account name.
  • Installing software on nodes is for administrators only: Fleet Setup, Install on Fleet and the OpenRemoteGUI install from a node card. Operators see the same as monitors there; they can still open OpenRemoteGUI where it already runs.
  • API page in the sidebar (Intelligence, API) for every role: your sessions and service keys, what your role allows on this server, the API address, a quick start, and links to the OpenAPI spec and guide (administrators also get a link to Administration, API Access). It replaces the API section on My account.
  • API guide as a readable page: the API page's "API guide" opens docs/API.md in a new tab as one formatted page with a table of contents (built by tools/build_api_guide.py; CI fails if it drifts from the doc). The raw OpenAPI JSON stays available for tools.

Container image

docker pull devprincekumar/edgeshell:1.8.2
docker pull ghcr.io/855princekumar/edgeshell:1.8.2

Platforms: linux/amd64, linux/arm64

Assets 2
Loading