Skip to content

v0.3.1

Choose a tag to compare

@github-actions github-actions released this 13 Jul 10:39

HyCanvas v0.3.1

A configuration and polish release. No file-format schema change, so upgrading is a binary swap with no migration.

Configurable sign-in methods

Operators can now choose exactly how people sign in and how accounts are created. Email + password, magic link, and OIDC/SSO each have an independent login and signup toggle, set per instance through AUTH_*_ENABLED environment variables.

  • Defaults preserve prior behavior, so an existing instance is unchanged unless it opts in.
  • The sign-in page shows only the methods you allow; disabled methods are also enforced on the server (their endpoints return 403, not just a hidden button).
  • New: magic-link signup, which creates an account when an emailed link is opened (nothing is created until it is clicked).
  • Safety guardrails: OIDC toggles are inert unless OIDC is configured, and a configuration that would leave no usable login method keeps password login on and logs a warning, so you cannot lock yourself out.
  • Run an SSO-only instance by turning the local methods off and leaving OIDC on. See the README for the recipe and the note about linking existing password accounts.

Sign-in polish

The login screen now waits for the instance's method policy before drawing the form, so a restricted instance no longer briefly shows options it does not allow.

Ownership and positioning

Documentation now names the product on its own terms and attributes the HyScaler trademark to NetTantra Technologies (India) Private Limited, with the legal entity stated where it is load-bearing (NOTICE and the contributor agreement).

Editor

Locked elements are selectable on the canvas, so their unlock controls are reachable without opening the Layers panel; transforms stay blocked while locked.

Platform notes

See the archive descriptions below for setup, .env, and PostgreSQL requirements.