v0.30.0

People can change their name and password on their account page. There is no migration in this release.

Added

• Your name and password on the account page. A new name reaches everyone in your workspaces at once, in mentions already written too. Someone who signs in through GitHub or a sign-in provider has no password here, and the page says so. A name they change stays theirs: the provider's is read only when the account is made. (#240)

Security

• A new password needs the current one, at five tries a minute. The change emails the person and ends every other session, whatever the request asks, since whoever knew the old password may be the one asking. A tab left open in the browser that made the change carries on with the new session. (#240)
• A name is 1 to 100 characters, at sign-up too, and a rename changes nothing else. Ten a minute. (#240)

If you run your own

• Anyone holding a session can now rename that account, within the rules above. There is no setting for it.
• On a server without email, the password email is not sent. Everything else about the change still happens.