Skip to content

Release 6.40.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 26 Jul 15:54
6.40.1
49a90e6
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Poznote 6.40.1

This release focuses on user profiles and multi-user administration: a new My Profile editor, a richer user management panel, and safer SSO account matching.

New Features

  • My Profile

    Edit your username, first name, last name, and email address from the new My Profile modal in Settings. Your first and last name are displayed in the admin panel and preserved when accounts are provisioned through SSO.

    An email you set yourself is stored as unverified: only verified emails (set by an administrator or synced from the SSO provider) are used to match accounts at SSO login, so a self-set email can never capture someone else's account.

  • Improved user management panel

    The user management table now shows each user's first and last name, a new Created column with the account creation date, and clearer indicators for account status (active or inactive) and the admin role.

    The allowed users field in SSO settings has been reworked as a chip interface, with a button to copy the whole list in one click.

  • Search in storage statistics

    A search box lets you filter the storage statistics table to find an account quickly.

  • Option to hide sharing restrictions

    A new POZNOTE_HIDE_RESTRICT_USERS environment variable hides the "Restrict to specific users" toggles in share dialogs (shared notes and folders page, and workspace sharing). Existing restrictions keep working, they just can no longer be changed from the UI.

Improvements

  • Checking a task on a public shared note now updates instantly and syncs with the server in the background.
  • Reworked buttons and layout in the user settings modals.
  • The troubleshooting guide now explains that passwords are managed from the Poznote interface, not from .env.

Fixes

  • Public share pages now always act on the share owner's data. Previously, a visitor logged in to another account on the same instance could have their requests routed to their own account instead of the share.
  • Public note pages now load CSS and JavaScript with cache-busting, so styles and scripts are no longer stale after an update.
  • SSO account matching can no longer link a login to a profile already bound to a different SSO identity through a username or email collision.

API

  • PATCH /users/me updates your own profile (username, first and last name, email). GET /users/me now also returns first_name, last_name, and display_name.

As always, thank you for your feedback and support! If you enjoy Poznote, you can support its development on Ko-fi. ❤️

Assets 2
Loading