Merge pull request #432 from sebadob/prepare-v0.23.0

Prepare v0.23.0

CHANGELOG.md

@@ -1,6 +1,6 @@
 # Changelog
 
-## v0.23.0-beta3
+## v0.23.0
 
 This release does the first preparations to prepare a future v1.0.0 release.  
 Quite a few values have been cleaned up or improved.
@@ -313,6 +313,12 @@ Instead, it only returns the peer IP that Rauthy extracted for this request. Thi
 configure the extraction, for instance when you are behind a reverse proxy or CDN.  
 [758b31c](https://github.com/sebadob/rauthy/commit/758b31cb5dc2277a0cc3ec31f15b5de90ff00ea7)
 
+#### New sorting options for users
+
+Users in the Admin UI can now be sorted by their `created_at` or `last_login` timestamp.  
+Users that never have logged in will always be at the end of the list, since this value might be `undefined`.  
+[4c41d64](https://github.com/sebadob/rauthy/commit/4c41d64f570dbbe94dcb8b681ac31608ed492652)
+
 ### Bugfixes
 
 - The button for requesting a password reset from inside a federated account view has been
@@ -336,6 +342,11 @@ configure the extraction, for instance when you are behind a reverse proxy or CD
 - `/authorize` for logins had a bit too strict validation for the user password, which had a chance that
   a new password a user just set, would be rejected because of some invalid special chars not being allowed
   [9bb0a72](https://github.com/sebadob/rauthy/commit/9bb0a72fe2e3cc87e000b6db36c84fcf2d255bf5)
+- when resources in the Admin UI have been re-fetched, for instance because of a user deletion, the search input
+  has not been emptied
+  [033db25](https://github.com/sebadob/rauthy/commit/033db25db695d2565bc4adcdfe07a77125c2a9a5)
+- the deprecated `x-xss-protection` header has been removed
+  [5008438](https://github.com/sebadob/rauthy/commit/50084385df887f4782bbe9224e63bc60719600fd)
 
 ## 0.22.1
 

Cargo.toml

@@ -11,7 +11,7 @@ members = [
 exclude = ["rauthy-client"]
 
 [workspace.package]
-version = "0.23.0-beta3"
+version = "0.23.0"
 edition = "2021"
 authors = ["Sebastian Dobe <[email protected]>"]
 license = "Apache-2.0"

README.md

@@ -155,17 +155,17 @@ Either just take a look at the [Rauthy Book](https://sebadob.github.io/rauthy/),
 the application yourself with docker on your localhost:
 
 ```
-docker run --rm -p 8080:8080 ghcr.io/sebadob/rauthy:0.22.1-lite
+docker run --rm -p 8080:8080 ghcr.io/sebadob/rauthy:0.23.0-lite
 ```
 
 **Note on using Safari:**
 
 If you want to test with Safari with plain HTTP, you need to add `-e COOKIE_MODE=danger-insecure`.
 Rauthy always builds secure cookies by default, but Safari does not treat localhost as secure like
-all other browsers. This option has been implemented in `v0.23.0-beta3`. So you might test with:
+all other browsers:
 
 ```
-docker run --rm -p 8080:8080 -e COOKIE_MODE=danger-insecure ghcr.io/sebadob/rauthy:0.23.0-beta3-lite
+docker run --rm -p 8080:8080 -e COOKIE_MODE=danger-insecure ghcr.io/sebadob/rauthy:0.23.0-lite
 ```
 
 ## Contributing

docs/getting_started/docker.html

@@ -181,7 +181,7 @@ <h2 id="testing--local-evaluation"><a class="header" href="#testing--local-evalu
 <pre><code>docker run --rm \
     -p 8080:8080 \
     --name rauthy \
-    ghcr.io/sebadob/rauthy:0.22.1-lite
+    ghcr.io/sebadob/rauthy:0.23.0-lite
 </code></pre>
 <p>This will start the container in interactive mode with an in-memory SQLite database. Just take a look at the log at the
 logs to see the URL and first password.</p>
@@ -190,7 +190,7 @@ <h2 id="testing--local-evaluation"><a class="header" href="#testing--local-evalu
     -e DATABASE_URL=sqlite:data/rauthy.db \
     -p 8080:8080 \
     --name rauthy \
-    ghcr.io/sebadob/rauthy:0.22.1-lite
+    ghcr.io/sebadob/rauthy:0.23.0-lite
 </code></pre>
 <div id="admonition-note" class="admonition admonish-note">
 <div class="admonition-title">
@@ -288,7 +288,7 @@ <h2 id="production-setup"><a class="header" href="#production-setup">Production
     -v $(pwd)/rauthy/data:/app/data \
     -p 8080:8080 \
     --name rauthy \
-    ghcr.io/sebadob/rauthy:0.22.1-lite
+    ghcr.io/sebadob/rauthy:0.23.0-lite
 </code></pre>
 <p><strong>6. Restrict DB files access even more</strong><br />
 After rauthy has done the first start, you could harden the access rights of the SQLite files even more.<br />

docs/getting_started/k8s.html

@@ -320,7 +320,7 @@ <h3 id="create-and-apply-the-stateful-set"><a class="header" href="#create-and-a
         fsGroup: 10001
       containers:
         - name: rauthy
-          image: ghcr.io/sebadob/rauthy:0.22.1-lite
+          image: ghcr.io/sebadob/rauthy:0.23.0-lite
           imagePullPolicy: IfNotPresent
           securityContext:
             # User ID 10001 is actually built into the container at the creation for

docs/print.html

@@ -405,7 +405,7 @@ <h2 id="testing--local-evaluation"><a class="header" href="#testing--local-evalu
 <pre><code>docker run --rm \
     -p 8080:8080 \
     --name rauthy \
-    ghcr.io/sebadob/rauthy:0.22.1-lite
+    ghcr.io/sebadob/rauthy:0.23.0-lite
 </code></pre>
 <p>This will start the container in interactive mode with an in-memory SQLite database. Just take a look at the log at the
 logs to see the URL and first password.</p>
@@ -414,7 +414,7 @@ <h2 id="testing--local-evaluation"><a class="header" href="#testing--local-evalu
     -e DATABASE_URL=sqlite:data/rauthy.db \
     -p 8080:8080 \
     --name rauthy \
-    ghcr.io/sebadob/rauthy:0.22.1-lite
+    ghcr.io/sebadob/rauthy:0.23.0-lite
 </code></pre>
 <div id="admonition-note" class="admonition admonish-note">
 <div class="admonition-title">
@@ -512,7 +512,7 @@ <h2 id="production-setup"><a class="header" href="#production-setup">Production
     -v $(pwd)/rauthy/data:/app/data \
     -p 8080:8080 \
     --name rauthy \
-    ghcr.io/sebadob/rauthy:0.22.1-lite
+    ghcr.io/sebadob/rauthy:0.23.0-lite
 </code></pre>
 <p><strong>6. Restrict DB files access even more</strong><br />
 After rauthy has done the first start, you could harden the access rights of the SQLite files even more.<br />
@@ -667,7 +667,7 @@ <h3 id="create-and-apply-the-stateful-set"><a class="header" href="#create-and-a
         fsGroup: 10001
       containers:
         - name: rauthy
-          image: ghcr.io/sebadob/rauthy:0.22.1-lite
+          image: ghcr.io/sebadob/rauthy:0.23.0-lite
           imagePullPolicy: IfNotPresent
           securityContext:
             # User ID 10001 is actually built into the container at the creation for

frontend/src/lib/Button.svelte

@@ -132,8 +132,6 @@
     }
 
     .txt {
-        margin-top: 4px;
-        /* fixes misplaced button labels on chrome */
-        -webkit-margin-before: 0;
+        margin-top: 2px;
     }
 </style>

frontend/src/lib/itemTiles/DeleteItemTile.svelte

@@ -15,7 +15,7 @@
             on:click={() => onDelete(label)}
             on:keypress={() => onDelete(label)}
     >
-        <IconStop width="14"/>
+        <IconStop color="--var(--col-bg)" width={14}/>
     </div>
 </div>
 

frontend/src/lib/search/OrderBy.svelte

@@ -67,7 +67,9 @@
         <Tooltip text="Order by" yOffset={-30}>
             <select class="opts font-label" bind:value={selected}>
                 {#each options as opt}
-                    <option value={opt.label}>{opt.label}</option>
+                    <option value={opt.label}>
+                        {opt.label}
+                    </option>
                 {/each}
             </select>
         </Tooltip>
@@ -109,6 +111,8 @@
 
     select {
         height: 2.13rem;
+        padding-top: .2rem;
+        padding-left: .5rem;
         color: var(--col-text);
         background: var(--col-bg);
         font-size: 1.05rem;

frontend/src/lib/search/SearchBar.svelte

@@ -188,6 +188,8 @@
 
     select {
         height: 2.13rem;
+        padding-top: .2rem;
+        padding-left: .5rem;
         color: var(--col-text);
         background: var(--col-bg);
         font-size: 1.05rem;

justfile

@@ -420,7 +420,6 @@ build mode="release" no-test="do-test" image="ghcr.io/sebadob/rauthy": build-ui
         --build-arg="DATABASE_URL={{db_url_sqlite}}" \
         --build-arg="FEATURES=default" \
         --build-arg="MODE={{mode}}" \
-        --progress=plain \
         --push \
         .
 

rauthy-book/src/getting_started/docker.md

@@ -9,7 +9,7 @@ The image contains a basic default config which is sufficient for local testing.
 docker run --rm \
     -p 8080:8080 \
     --name rauthy \
-    ghcr.io/sebadob/rauthy:0.22.1-lite
+    ghcr.io/sebadob/rauthy:0.23.0-lite
 ```
 
 This will start the container in interactive mode with an in-memory SQLite database. Just take a look at the log at the
@@ -22,7 +22,7 @@ docker run -d \
     -e DATABASE_URL=sqlite:data/rauthy.db \
     -p 8080:8080 \
     --name rauthy \
-    ghcr.io/sebadob/rauthy:0.22.1-lite
+    ghcr.io/sebadob/rauthy:0.23.0-lite
 ```
 
 ```admonish note
@@ -130,7 +130,7 @@ docker run -d \
     -v $(pwd)/rauthy/data:/app/data \
     -p 8080:8080 \
     --name rauthy \
-    ghcr.io/sebadob/rauthy:0.22.1-lite
+    ghcr.io/sebadob/rauthy:0.23.0-lite
 ```
 
 **6. Restrict DB files access even more**  

rauthy-book/src/getting_started/k8s.md

@@ -180,7 +180,7 @@ spec:
         fsGroup: 10001
       containers:
         - name: rauthy
-          image: ghcr.io/sebadob/rauthy:0.22.1-lite
+          image: ghcr.io/sebadob/rauthy:0.23.0-lite
           imagePullPolicy: IfNotPresent
           securityContext:
             # User ID 10001 is actually built into the container at the creation for