Skip to content

v0.1.53

Choose a tag to compare

@taylorwalton taylorwalton released this 01 Apr 20:22
· 123 commits to main since this release
1677c31

What's Changed

New Contributors

Full Changelog: v0.1.52...v0.1.53

IMPORTANT: Add to your .env:

SECURITY: JWT secret for token signing.

⚠️ The default value below is publicly known — change it before any deployment!

Generate a unique secret with: openssl rand -base64 32

JWT_SECRET=REPLACE_ME

SECURITY: Dedicated secret for signing OAuth2 state tokens (SSO flows).

If not set, falls back to JWT_SECRET — set this to isolate SSO state signing.

Generate with: openssl rand -base64 32

SSO_STATE_SECRET=REPLACE_ME

SECURITY: Fernet encryption key for TOTP secrets stored in the database.

If not set, falls back to a key derived from JWT_SECRET.

⚠️ Once set and users have enrolled 2FA, do NOT change this key — existing

TOTP secrets in the database will become unreadable.

Generate with: python -c "from cryptography.fernet import Fernet; print(Fernet.generate_key().decode())"

TOTP_ENCRYPTION_KEY=REPLACE_ME