From 87f6438b893fd67a7a9186eaef4549929a9c1174 Mon Sep 17 00:00:00 2001 From: Alicia Sykes Date: Sun, 1 Aug 2021 15:33:03 +0100 Subject: [PATCH] :bookmark: Bumped to V 1.5.0 and updates changelog --- .github/CHANGELOG.md | 7 ++++++- package.json | 2 +- 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/.github/CHANGELOG.md b/.github/CHANGELOG.md index 323e0ace..aabc74a7 100644 --- a/.github/CHANGELOG.md +++ b/.github/CHANGELOG.md @@ -1,6 +1,11 @@ # Changelog -## ✨ 1.4.8 - Optional Crash Reports [PR #120](https://github.com/Lissy93/dashy/pull/112) +## 🔒 1.5.0 - Improve Robustness of Auth [PR #113](https://github.com/Lissy93/dashy/pull/113) +- Use both username + password for generating token, so that a change in either will log the user out +- Prevent privilege escalation by disallowing a user from modifying their user type through the UI +- Improve the isAuthenticated check, by taking account of empty users array + +## ✨ 1.4.8 - Optional Crash Reports [PR #112](https://github.com/Lissy93/dashy/pull/112) - Adds an optional, off by default method of getting crash reports - This can be enabled in `appConfig.enableErrorReporting`, and will not be used at all unless explicitly activated by user - This is needed for when a user raises a bug which is hard to fix diff --git a/package.json b/package.json index 34fba720..244a838e 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "Dashy", - "version": "1.4.8", + "version": "1.5.0", "license": "MIT", "main": "server", "scripts": {