Changelog update

This commit is contained in:
binwiederhier
2026-06-22 21:07:55 -04:00
parent 9b3ab5a302
commit 2b30ce9ee0
+5 -3
View File
@@ -1953,13 +1953,15 @@ and the [ntfy Android app](https://github.com/binwiederhier/ntfy-android/release
This release adds **password reset** via email, and reworks email verification to use durable, This release adds **password reset** via email, and reworks email verification to use durable,
link-based magic links (replacing the old in-memory 6-digit codes). Email stays optional at link-based magic links (replacing the old in-memory 6-digit codes). Email stays optional at
signup; a user can reset their password only once they have a verified "primary" (recovery) signup; a user can reset their password only once they have a verified "primary" (recovery)
email. All of this rides on the existing SMTP configuration -- no new config flag. email.
All of this work is probably not useful for self-hosters, but it hopefully will be useful for me,
since I do have to reset emails on a regular basis.
**Features:** **Features:**
* Add password reset via emailed magic link, with a "Forgot password?" link on the login page and a `ntfy user reset-pass` CLI command for admins * Add password reset via emailed magic link, with a "Forgot password" link on the login page and a `ntfy user reset-pass` CLI command for admins
* Rework email verification to use durable, single-use, expiring magic links instead of in-memory 6-digit codes, and add a "primary" email (used for account recovery and as the `X-Email: yes` target) with verified/unverified state in the account UI * Rework email verification to use durable, single-use, expiring magic links instead of in-memory 6-digit codes, and add a "primary" email (used for account recovery and as the `X-Email: yes` target) with verified/unverified state in the account UI
* Auto-send a verification link to the billing email after a Stripe checkout, so paying users can set up password recovery
**Bug fixes + maintenance:** **Bug fixes + maintenance:**