Changelog
Short overview of updates and new features. This changelog is shown only until the project is published on GitHub. After that, all updates will be tracked in the repository.
Security
- Rotated session IDs after OAuth login to mitigate session fixation
- Minor technical improvements in session handling
Security & session updates
- Removed access token persistence; tokens stay in session only
- Added session cookie lifetime selector (incl. browser-close and 8h)
- Clarified session/login copy in UI and self-host docs
- Updated health status to report session-only auth mode
- Added migration to clear legacy token storage fields
- Updated privacy policy to reflect session-only tokens
Improvements
- Added a note indicating how to manually split a post using ####
- Added a changelog to document updates
- Added privacy policy (German/English)
- Added legal notice (German/English)
Improvements
- Privacy-first analytics without cookies or IPs
- Admin stats page with daily and total counts
- Total instances counter
Error handling
- Clearer error messages
Improvements
- Manual splitting of long posts via ####
Patches
- Session cookie only set on consent (connect account click)
- Feedback form only visible after OAuth connection
- Copy tweaks (logout/data deletion)
- Rate limiter for OAuth connection attempts
- Rate limiter for feedback submissions
- Media upload size limit