v0.6.4

• Update fiber
• Add option to require admin verification #121
• Fix OTP enabled bug #125

v0.6.3

• Update fiber
• Update hydra go client
• Trim spaces in names when creating/updating account
• Add better error messages for name length
• Add ability to better control log level

v0.6.2

• Fix sshpubkey update bug

v0.6.1

• Fix account settings update bug
• Add hydra login prometheus counters

v0.6.0

• Major re-write. New login flow and template layout
• Upgrade to bootstrap 5
• Remove database dependency
• Switch to using Fiber web framework and htmx frontend
• New email text/html templates
• Add terms of service url to sign up page #97
• Add better messaging for disabled user at login #22
• Notification email sent anytime account updated #82
• Allow configuring default hash algorithm for OTP #99
• Add user block list #83
• Make server timeouts configurable #109

v0.5.6

• Add config option to replace unexpired password tokens
• Add email flag to resetpw command
• Relax CSP settings to allow inline images and js
• Add change expired password login flow

v0.5.5

• Add security related HTTP headers #55
• Upgrade to latest hydra sdk. Tested against hydra v1.9.2
• Verify nsaccountlock before sending password reset email @cmd-ntrf
• Add option to require admin verification to enable new account @cmd-ntrf
• Restrict username to lowercase and not only number when signing up @cmd-ntrf
• Add option to always skip consent in hydra login flow @isard-vdi

v0.5.4

• Fix bug with missing set-cookie header issue #53

v0.5.3

• Update Login/Conset flow for hydra v1.0.3+oryOS.10
• Add support for SMTP AUTH (@cdwertmann)
• Implement fully encrypted SMTP connection (@g5pw)
• Fix bug if session keys change or session gets corrupted
• Upgrade to echo v4

v0.5.2

• Add option to disable user signup
• Add new command for re-sending verify emails