Post by GoToSocial

Hello, we just created the first release candidate for version 0.19.0 of #GoToSocial:

https://github.com/superseriousbusiness/gotosocial/releases/tag/v0.19.0-rc1

Adventurous admins can try out this release candidate using the 0.19.0-rc1 docker tag, or by downloading the proper tar archive on the release page.

This version contains several database migrations so you will need to be patient when upgrading, and backup your database first!!

Release highlights:

OAuth token scope enforcement: Token scopes (read, write etc) now actually do stuff! So we removed the big "scopes don't do stuff!" warning in the docs. The enforced scopes match the Mastodon API token scopes, so there shouldn't be any surprises for bot owners / app developers.
See https://docs.gotosocial.org/en/latest/api/swagger/ for more info.
Token review / invalidation: You can now review and invalidate tokens issued for your account in the settings panel, to help keep your account secure.
Docs: https://docs.gotosocial.org/en/latest/user_guide/settings/#access-tokens
Create and manage applications in the settings panel: Handy for people who want to run bots and applications with GoToSocial!
Docs: https://docs.gotosocial.org/en/latest/user_guide/settings/#applications
Gallery-style profile layout option: You can now choose to lay out the web view of your profile in a 'gram style gallery. Good for people who mostly post media and want to put that at the forefront.
Docs: https://docs.gotosocial.org/en/latest/user_guide/settings/#select-layout
Support for two-factor authentication (aka 2FA): If your instance isn't configured to use an OIDC provider, you can now secure your account with 2FA via a QR code and an authenticator app. When logging in with 2FA enabled, you will have to provide a time-based one-time password. Security!
Docs: https://docs.gotosocial.org/en/latest/user_guide/settings/#two-factor-authentication
Lots of web view tweaks including nicer media rendering on chrome, proper blurhash support, much better support for keyboard-based page navigation, wider font support for different scripts, and more.

Thanks for reading! :)

The "Application Details" view in the settings panel, showing a user-created application, with options to view the client ID and client secret, request an API access token, and delete the application.

ALT

The "2FA" section of the settings panel, showing a QR code that one can scan to enable 2FA. There's also the option to copy the 2FA secret to the clipboard so it can be pasted into an authenticator app instead.

ALT

The "Access Tokens" page in the settings panel, showing a list of access tokens belonging to the requesting account. Each token shows the app name, app website, scope, when it was created, and when it was last used. There's an "invalidate token" button under each token entry.

ALT

0 0 1 View Post & Replies See Original