v2.9.0

English

Fixed

• Remote access to a device — terminal, web proxy and command execution — now requires permission for that specific device; being signed in is no longer enough, and devices outside your groups are no longer reachable by ID.
• The device-connection script, which carries the device token and TURN credentials, is now available only to users who are allowed to add devices.
• The service now refuses to start when no password is configured, instead of starting up in a state where nobody can sign in.

中文

修复

• 远程访问设备(终端、Web 代理、执行命令)现在会校验你对该设备的权限,仅登录不再足够,也无法再通过设备 ID 访问自己分组之外的设备。
• 设备接入脚本中包含设备令牌与 TURN 凭据,现在仅允许有添加设备权限的用户获取。
• 未配置密码时服务不再启动,避免启动后无人能登录的状态。