Skip to content

v1.7.7

Latest
Latest

Choose a tag to compare

View all tags
@ShaneIsrael ShaneIsrael released this 21 Aug 04:09
v1.7.7
9e73899
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's changed

Two new security features have been added to Fireshare along with a couple other minor improvements and fixes.

Security & Authentication

  • Two-factor authentication (TOTP) - optional MFA for logins, with a new multi-step login flow (code entry + error handling). See Security.md for setup.
  • Login IP whitelisting - restrict which IPs are allowed to attempt a login.
  • Login button is now hidden in the navbar when logins are disabled due to IP whitelisting.

LDAP Fixes

Note: These LDAP fixes were primarily tested with AI as I do not have an easy way to test and validate LDAP. If there are any issues please report them ASAP.

  • LDAPS now works out of the box. The images ship CA certs but OpenLDAP had no CA configured, so every ldaps:// handshake failed with a bare "Can't contact LDAP server". Connections now verify against the system CA bundle.
  • New LDAP_TLS_CACERT and LDAP_TLS_REQCERT options for private/internal CAs.
  • LDAP_STARTLS is now actually implemented (it was previously read but unused).
  • ⚠️ Boolean env vars are parsed properly. LDAP_ENABLE, LDAP_STARTLS, and DISABLE_ADMINCREATE previously treated any value as true — including false. If you set one of these to false/0/no, it now does what you meant. Double-check these before upgrading.
  • Fireshare keeps serving if the LDAP server is unreachable at startup, so local accounts can still log in.
  • Stale service binds reconnect automatically instead of breaking every login until a restart.
  • Added connect/operation timeouts, clearer TLS failure logging, and fixed a connection leak on failed logins.

Library Scanning

  • MINUTES_BETWEEN_VIDEO_SCANS=0 now disables the automatic scan entirely - useful if you'd rather scan on demand from the admin panel. Startup logs tell you which mode you're in.
  • An invalid value falls back to the default of 5 with a warning, instead of silently turning scanning off.

UI/UX

  • View count icon turns red on private videos/images so they're easier to spot at a glance.
  • More reliable touch-device detection on video cards (now uses modern media queries). @Hyrull

Responsive Layout

  • Reworked the video modal layout for short and narrow viewports - the video and info panel stay usable and balanced on any screen size.

Contributors

Hyrull
Assets 2
Loading