Two new Generic OAuth admin controls, plus a clearer Send-to-eReader error and two interface fixes.
docker pull ghcr.io/new-usemame/calibre-web-nextgen:v4.0.171
# or :latest
Added
- Choose what permissions new Generic OAuth users get. Instead of every OAuth sign-up inheriting the one global default role, admins can set a per-provider permission set (downloads, viewer, uploads, edit, delete, change password, edit public shelves) for accounts auto-created via Generic OAuth. Leaving it unconfigured keeps the existing global default, so upgrading changes nothing until you opt in. Existing users are untouched. Thanks to @lduesing.
- Restrict Generic OAuth/OIDC login to specific identity-provider groups. Admins can require that a user belong to an allowed list of OAuth groups before an account is created or logged in, and can name the token claim that carries the group list (handy for Keycloak/Authentik, which often use a custom claim rather than `groups`). Membership is checked before any account is provisioned, and turning it on with an empty allow-list denies everyone rather than admitting all directory users. Thanks to @lduesing.
Fixed
- "Send to eReader" now shows the real reason it failed. When your mail server rejected the recipient address, the send used to die with a confusing `TypeError` and hid the actual rejection. It now reports the address and the server's reason (e.g. `kid@home.net: 550 User unknown`) so you can fix it. Reported by @kurtlieber.
- Beta (`:dev`) builds no longer nag about a "false" update. If you run the beta image, the "update available" banner kept pointing at the latest stable release even though a beta build is already ahead of it. Beta builds are now recognised and don't show the banner.
- Stacked notices no longer pile up into an unreadable blur. When more than one pop-up notice showed at once — e.g. the duplicate-scan setup notice plus the update banner — they all floated to the same spot and rendered on top of each other. They now stack neatly in a column.
Thanks to @lduesing and @kurtlieber.
Contributors
kurtlieber and lduesing