42.63.0

Features

Add a changelog link to the About dialog4191

The About dialog now has a Changelog link. It opens the changelog page for the version of Virtool that you use.

Fixes

Fix live updates, downloads, avatars, and uploads behind a reverse proxy that uses HTTP Basic authentication4197

A reverse proxy that uses HTTP Basic authentication sends its credentials with each browser request. Virtool treated these credentials as an API key and refused the request, so live updates, downloads, avatars, and uploads failed.

Virtool now uses your session when the credentials are not a valid API key. A valid API key still takes priority.

Stop a security check from signing users out when their authenticator setup is incomplete4198

If your authenticator setup was not complete, a correct code at a security check completed the setup and signed you out. Virtool now refuses the code at the security check until the setup is complete.

Stop password recovery requests from locking out or invalidating another user's recovery link4195

Another person could send repeated recovery requests for your account. These requests could block your own requests or make your recovery link stop working.

Refused requests no longer extend the limit, and a blocked address can't use up the limit of your account. A public request now leaves a recovery link that is less than one hour old in place and sends no email, unless the email for that link failed. Links from administrators are not affected.

Maintenance

  • Store the newest changelog entry date each user has seen4196