Changelog
42.61.4
Fixes
Encrypt links in queued email (#4183)
Recovery, verification, and invitation links are now encrypted while they wait in the email queue. Virtool removes them from the database when a message is sent or fails.
Maintenance
- Prepare to remove the unused forced password reset column from the database (#4184)
42.61.3
Fixes
- Build each image inside its Dockerfile, with no change to the image contents (#4163)
Administrators send recovery links instead of setting passwords (#4175)
Administrators can help users recover access with a one-time link. They can no longer set a user's password or require a password reset.
Action required: Users who had a pending required password reset have their password replaced during the upgrade and are signed out. Send each of them a recovery link so they can set a new password. Users with a verified email address get a password-changed notice.
Return to the correct page after you sign in (#4161)
When you open a Virtool link before you sign in, Virtool now takes you to that page after you sign in. It keeps the search terms, filters, and section in the link. Before this change, a link with search terms or filters could open the wrong page.
Virtool now ignores a sign-in link that points to a different website. A link of this type can no longer send you away from Virtool after you sign in. This also applies to the links in email address verification messages.
Return the same sign-in error for disabled accounts and wrong passwords (#4174)
A disabled or not-yet-activated account now gets the same error code and message as a wrong password. Before, only the status matched.