42.61.3
Users who had a pending required password reset have their password replaced during the upgrade and are signed out. Send each of them a recovery link so they can set a new password. Users with a verified email address get a password-changed notice.
Fixes
Administrators send recovery links instead of setting passwords4175
Administrators can help users recover access with a one-time link. They can no longer set a user's password or require a password reset.
Return to the correct page after you sign in4161
When you open a Virtool link before you sign in, Virtool now takes you to that page after you sign in. It keeps the search terms, filters, and section in the link. Before this change, a link with search terms or filters could open the wrong page.
Virtool now ignores a sign-in link that points to a different website. A link of this type can no longer send you away from Virtool after you sign in. This also applies to the links in email address verification messages.
Return the same sign-in error for disabled accounts and wrong passwords4174
A disabled or not-yet-activated account now gets the same error code and message as a wrong password. Before, only the status matched.
Maintenance
- Build each image inside its Dockerfile, with no change to the image contents4163