1.0.20

Bugfix

• [security] A user manager who is not a super administrator can no longer grant super-admin access through an invitation.
• [security] Administrators who hold super access only through a group are now protected from being taken over by a lower-privileged user manager, and the API-key management guard that was meant to enforce this now works.
• [security] Password reset, invitation and single sign-on links are now built from the site's configured address rather than the address the request arrived on, so they can no longer be redirected to a server an attacker controls.
• [security] The API no longer accepts a front-end session that has passed its password but not yet its two-factor code.
• Media stored outside the standard folder, as on a multi-site install, now shows correctly in the admin media manager instead of appearing as broken images. Thanks to @nerdyjan for the diagnosis and the fix.
• Thumbnails are now generated for media in the site media folder, which previously failed silently and left every item without a preview.
• Blueprint fields keep the rest of their documented common attributes on the way to the admin, so sublabel, display_label, labelclasses and outerclasses work again as they do in Grav 1.7 (#18).
• The scheduler status now reports which environment the site and the last scheduler run used, so the admin can warn when a cron job runs under a different configuration than the site (#4248).

New

• Added an After Save preference for Flex Objects, so the admin remembers where you chose to go after saving a record (#160).
• A premium package can now name its own store and checkout link, so packages sold outside the Grav Premium store send buyers to the right place instead of always to licensing.getgrav.org.