v1.52.0

TaskView v1.52.0

Fixed issues

• #101 - Organization buttons opened the wrong tab.
• #77 - OIDC login failed behind a reverse proxy. The callback URL is now resolved consistently (from the configured callback URL or the public API URL) in both the login request and the token exchange.

SSO improvements

• Email domain verification. Before an SSO configuration takes effect for an email domain, the organization now has to prove it owns that domain - either with a DNS TXT record or a file served at /.well-known/taskview-sso-verify.txt. This prevents one organization from capturing logins for a domain it doesn't own (https://taskview.tech/docs/features/sso#domain-verification).
• For air-gapped installs where DNS/HTTP checks aren't possible, a new SSO_TRUSTED_DOMAINS environment variable lists domains that skip the ownership check (https://taskview.tech/docs/features/sso#domain-verification).
• The login page now shows clearer SSO error messages (unverified domain, email already in use) instead of a generic error.
• OIDC now also picks up the preferred_username claim from the identity provider (#95).