0.6.0

What's Changed

This release includes the following major milestones:

• Many overall layout and UX tweaks
• Add 2-factor authentication support to client
• Add auth attempt logs and brute-force lockouts
• Improve user registration UX
• Add PWA support
• Add WebAuthn unlock support
• Implement vault synchronize/merge logic
• Add documentation

🚀 New Features

• Change email to username for main user authentication by @lanedirt in #176
• Make .NET dataprotection work in both local development and when running through docker by @lanedirt in #179
• Add TOTP authenticator support to client by @lanedirt in #182
• Add vault auth attempt logging and auto lockout to combat brute force by @lanedirt in #191
• Update admin menu links by @lanedirt in #194
• Add email delete option in client by @lanedirt in #197
• Add user registration log entry and include auth log E2E tests by @lanedirt in #201
• Add gzip compression for client app by @lanedirt in #204
• Optimize GitHub actions for stability (#203) by @lanedirt in #206
• Prevent error when attempting to encrypt/decrypt empty string (#217) by @lanedirt in #218
• Add log truncate buttons to admin by @lanedirt in #222
• Implement client password change feature by @lanedirt in #229
• Add loading icon to logout to improve UX by @lanedirt in #238
• Add additional vault metadata by @lanedirt in #237
• Add forgot password screen to client by @lanedirt in #239
• Update Playwright stability by @lanedirt in #241
• Optimize default argon2id settings for enhanced security by @lanedirt in #242
• Add PWA support by @lanedirt in #243
• Fix mobile menu open/close (#244) by @lanedirt in #247
• Update admin mobile menu link content by @lanedirt in #248
• Optimize refresh token logic, add IP address and integrate remember m… by @lanedirt in #249
• Fix delay in navigating to admin log pages by @lanedirt in #251
• Implement vault synchronize/merge support by @lanedirt in #252
• Move user menu items to mobile menu for mobile screens by @lanedirt in #258
• General refactoring, update folder structure, code cleanup by @lanedirt in #259
• Add support for persisting encryption key by @lanedirt in #270
• Make webauthn implementation secure by @lanedirt in #272
• Revert JsInteropService to have init in properties by @lanedirt in #274
• Update note widget to support newlines and anchor tags by @lanedirt in #273
• Make 2fa input field a number by @lanedirt in #278
• Add WASM error detection and show application warning if WASM is not supported by client by @lanedirt in #282
• Mobile responsive tweaks by @lanedirt in #283
• Refactor blazor components to reduce duplicated code by @lanedirt in #284
• Update ClientPlaywrightTest.cs (#220) by @lanedirt in #286
• Make all UI components compatible with dark mode by @lanedirt in #288
• Saving existing credential with one or more attachments fails by @lanedirt in #296
• Improve ux for login and create account flow by @lanedirt in #310
• Optimize credential AddEdit page for mobile by @lanedirt in #313
• Uploading multiple attachments doesnt work by @lanedirt in #316
• Fix account creation mobile interface for safari browser by @lanedirt in #318
• Login flow optimizations by @lanedirt in #321
• Expose all config settings through config object by @lanedirt in #322
• Improve error message for unlock page if API cannot be reached by @lanedirt in #324
• Show page refresh button if loading takes too long by @lanedirt in #325
• Replace welcome screen with simple tutorial by @lanedirt in #327
• Add beta indication by @lanedirt in #328
• Add static app version and show in footer by @lanedirt in #337
• Deleting user that has email (claims) throws error by @lanedirt in #346
• Improve documentation by @lanedirt in #344
• Add support email to .env to show in client application by @lanedirt in #354
• Remove first step from create wizard by @lanedirt in #355
• Update AppInfo.cs with new release version by @lanedirt in #357

🐞 Bug Fixes

• Update admin logs path as /logs folder doesn't work correctly due to … by @lanedirt in #193
• Fix client app loading screen delay by @lanedirt in #195
• Fix email anchor tag target=blank conversion by @lanedirt in #198
• Fix bug in auth log IP address by @lanedirt in #231
• Add default revision number to existing vaults to prevent merge conflicts by @lanedirt in #255
• Hide timeout notification after new login attempt by @lanedirt in #266
• Get latest vault by revision number instead of updated at timestamp by @lanedirt in #348

🧩 Dependencies Updates

• Update all NuGet packages to latest stable versions

New Contributors

• @dependabot made their first contribution in #207

Full Changelog: 0.5.0...0.6.0