Skip to content

v2.1.0

Compare
Choose a tag to compare
@benjie benjie released this 20 Jan 11:35

The community have really enjoyed playing with the starter; and they've given back. This release contains a number of features and fixes contributed by the community; in particular I'd like to thank (in no particular order) @JoeSchr, @singingwolfboy, @makoncline, @MobliMic, @Charlex, @alexk111 and @hos.

Here are some highlights:

  • SECURITY: does not fall back to generating a (weak) random SECRET if no envvar set; instead throws an error
  • SECURITY: enhances the database schema with greater SECURITY DEFINER function security
  • DOCKER: fixes a bug in the production Dockerfile where the email templates were not included, improves Docker build times
  • SIGNIFICANT FIX: the user__forgot_password task has been fixed, it was using the user id as if it were a user_email id (which works whilst those ids line up on an empty database, but stops working when they diverge - e.g. when anyone adds a second email).
  • Fixes deploying to Heroku if you're not us 😉 (we have a demo mode which resets everything, if demo mode was not set previously it would bail out to get you to change your config, now it just warns but continues in non-demo mode)
  • Fixes an issue where the last_active value for a session was never updated
  • TypeScript is no longer used to enforce lintable issues (like not using variables/parameters) so you can code free-er with less interruption
  • Fixes a large number of issues with TypeScript/types, including improving build times thanks to project references
  • Upgrades almost all the dependencies
  • Fixes missing dependencies (thanks to depcheck, now added to CI)
  • Informs users that they should commit the initial version of the starter if they clone from the zip option
  • Upgrades VSCode configuration/integration based on latest VSCode changes (much faster linting/formatting)
  • Disables poweredBy header
  • Refactors components into their own package to show how it can be done
  • Tests Docker build on CI to ensure it's always valid
  • Password strength indicator has been added
  • ARIA autoComplete fields have been added to various inputs