mirror of
https://github.com/spiral-project/ihatemoney.git
synced 2025-05-03 19:51:49 +02:00
293735eca7
* Fixed exposed password in session The project password was set in clear text in the session cookie. The cookie payload is only base64 encoded so it must not be used to store private information. The password is simply replaced by a boolean. * Simplify authentication logic
67 lines
1.6 KiB
ReStructuredText
67 lines
1.6 KiB
ReStructuredText
Changelog
|
|
=========
|
|
|
|
This document describes changes between each past release.
|
|
|
|
2.0 (unreleased)
|
|
----------------
|
|
|
|
Breaking changes
|
|
================
|
|
|
|
- ``ADMIN_PASSWORD`` is now stored hashed. The ``ihatemoney generate_password_hash`` command can now be used to generate a proper password HASH (#236)
|
|
- Turn the WSGI file into a python module, renamed from budget/ihatemoney.wsgi to ihatemoney/wsgi.py. Please update your Apache/Gunicorn configuration! (#218)
|
|
- Admin privileges are now required to access the dashboard (#262)
|
|
|
|
Changed
|
|
=======
|
|
|
|
- Logged admin can see any project (#262)
|
|
- Simpler and safer authentication logic (#270)
|
|
- Better install doc (#275)
|
|
|
|
Added
|
|
=====
|
|
|
|
- ``ihatemoney generate-config`` to give working examples of config files (#275)
|
|
- Statistics tab (#257)
|
|
- Python3.6 support (#259)
|
|
- ALLOW_PUBLIC_PROJECT_CREATION setting (#262)
|
|
- Projects can be edited/deleted from the dashboard (#262)
|
|
- ACTIVATE_ADMIN_DASHBOARD setting (#262)
|
|
- Link to the dashboard in the navigation bar (#262)
|
|
|
|
Removed
|
|
=======
|
|
|
|
- Remove unused option in the setup script
|
|
|
|
1.0 (2017-06-20)
|
|
----------------
|
|
|
|
Added
|
|
=====
|
|
|
|
- Apache WSGI Support (#191)
|
|
- Brush up the Makefile (#207, #201)
|
|
- Externalize the settings from source folder (#193)
|
|
- Makefile: Add new rule to compile translations (#207)
|
|
- Project creation can be restricted to admin (#210)
|
|
- More responsive layout (#213)
|
|
|
|
Changed
|
|
=======
|
|
|
|
- Some README enhancements
|
|
- Move tests to budget.tests (#205)
|
|
- The demo project can be disabled (#209)
|
|
|
|
Fixed
|
|
=====
|
|
|
|
- Fix sphinx integration (#208)
|
|
|
|
0.9 (2017-04-04)
|
|
----------------
|
|
|
|
- First release of the project.
|