Skip to content

Faucet 2.4.0

Choose a tag to compare

View all tags
@Harrsn Harrsn released this 11 Oct 22:34
· 10 commits to main since this release
v2.4.0
21e84be
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security and visibility: two-factor sign-in, passkeys, and a clear record of everything the hunter grabbed.

Highlights

  • Two-factor sign-in. Authenticator codes (Bitwarden, 1Password, Google or Microsoft Authenticator) with ten one-time recovery codes. Required for admins, optional for members. Codes can't be replayed, and wrong ones count toward sign-in throttling.
  • Passkeys. Sign in with Face ID, Touch ID, Windows Hello, a security key or your password manager — from a button or straight from the username field. No password, no code; phishing-resistant. Manage them on the new Account page.
  • Grab history. Activity → Grabs shows every grab with why it was picked ("picked from 4 of 11 found; skipped 2 wrong show, 5 too few seeders") and what became of it.
  • Blocklist. Activity → Blocklist shows the releases Faucet won't grab again, problems first, with Allow again.
  • Pinned dependencies. Exact, hash-checked versions in the image and CI; upgrades arrive as Dependabot pull requests instead of silently on rebuild.

Fixes

  • ⋯ menus no longer get cut off inside lists.
  • A sign-in page left open across an upgrade now says to refresh instead of looping.

Upgrading

Admins are asked to set up two-factor at their next sign-in (Account page). Have your authenticator app ready. FAUCET_REQUIRE_ADMIN_2FA=0 turns the requirement off.

Full details: CHANGELOG.md

Assets 2
Loading