v1.1.1

What's Changed

• Added full support for bearer token authentication to allow for mobile apps (which are being prototyped now)
  • https://github.com/amiantos/lurker-android
  • https://github.com/amiantos/lurker-ios
• Added rate limiting to protect auth endpoints
• Added proper support for oidentd (similar to TheLounge's setup)
• Improved how locked down paused user accounts are

What's Changed - Detailed

• Accept bearer session tokens on the WebSocket and REST (#489) by @amiantos in #570
• Add per-IP auth rate limiting / brute-force backoff (#568) by @amiantos in #572
• Add oidentd shared-daemon ident mode (LURKER_OIDENTD_FILE) by @amiantos in #575
• WS protocol versioning + upgrade hardening (#569, #574) by @amiantos in #577
• Block paused-account writes centrally in requireAuth (#573) by @amiantos in #576
• Release 1.1.1 by @amiantos in #579

Full Changelog: v1.1.0...v1.1.1