Releases: lvkaszus/asklvkaszus
Releases · lvkaszus/asklvkaszus
v3.2.2
v3.2.1
v3.2.0
Ask @lvkaszus! - v3.2.0
- Major refactor of validation, error handling, endpoints and documentation
- Improved backend input validation for application, administrator and user endpoints
- Introduced global exception handlers to reduce the use of
try/catchblocks - Added session check for logout and existence check for session users in JWT logic
- Replaced GitHub release API with custom endpoint to avoid rate limits, added extensive response validation
- Enhanced backend error handling with global handlers and better logging
- Added backend healthcheck endpoint
- Updated logger, ratelimits and startup database checks (SQL/Redis wait)
- Switched datetime formatting to
datetime.now(timezone.utc)across the backend - Escaped HTML tags in questions/answers endpoints to prevent injection
- Extended CORS headers and added security-related headers (HSTS, Cache-Control, etc.)
- Removed wildcard
*in CORS config when no client URLs are defined - Removed CSRF requirement from some user-facing endpoints
- Migrated backend tools to
SQLAlchemy, removedmysql-connector-pythondependency - Cleaned up translations and unused code
- Improved frontend validation in Login/Register/Submit Question forms
- Added character count limit for submitting questions
- Introduced React Error Boundary and refactored API calls to be better scoped
- Improved UI in Login, Register, and Recover Password dialogs
- Updated rendering of version info and React route handling in Express
- Removed
React Helmetin favor ofdocument.title - Replaced
useTranslation()in API calls to avoid hook errors - Changed timestamp rendering to locale string
- Allowed frontend access from development domain via
NODE_ENVdetection - Fixed various layout issues after UI component library updates
- Updated application GitHub repository URLs across the app and docs
- Added new API responses throughout the frontend
- Updated dependencies to latest versions
v3.1.2
v3.1.1
Ask @lvkaszus! - v3.1.1
- Added API Documentation and reorganized documentation directory
- Added Apache2 to Reverse Proxy Setup documentation
- Fixed User API Endpoints to have User API Ratelimit instead of Admin API Ratelimit
- Removed displaying backend version on
/apiendpoint, only application name and GitHub repository URL is displayed - Added .dockerignore
- Updated dependencies to latest versions
v3.1.0
v3.0
Ask @lvkaszus! - v3.0
- Completely re-written and re-designed Backend
config.ymlfile instead of.envfile for application configuration- Using JSON Body to send and receive data (instead of HTTP Headers) to fix other problems with encoding/decoding when sending messages/displaying current messages
- Sender Blocking based on sender's IP address blacklisting in one of the database tables (IP Addresses of Users around the internet are public after all, so sender's anonymity/privacy has not been lost!)
- Authorization System that consists of Register + Login + Change Password + Logout features working with JSON Web Tokens (JWT) that are stored in cookies with
HttpOnly=True,Secure=TrueorSecure=False(depending on your configuration) andSameSite=Strictparameters for enhanced protection against XSS and other attacks - Cross-Site Request Forgery (CSRF) Protection by Flask-WTF
- Separate Rate-limiting for Authorization System, User Frontend Endpoints, Admin Frontend Enpoints, User RESTful API Endpoints and Admin RESTful API Endpoints to enhance rate-limiting options customization
- SQLAlchemy instead of pure SQL Queries
- User/Admin Frontend API
- RESTful User/Admin API with option to restrict CORS Access-Control-Allow-Origin header in
config.ymlfile - Feature to completely disable/enable turning on application RESTful User/Admin API by changing Global API setting in application global settings
- User Frontend and Admin Frontend are in one package now (because of CSRF Protection issues when User Frontend was on second domain and when Admin Frontend was on some other domain)
- Update Checker
- 'Approve Questions First' Mode
- Added feature to hide/show all questions or hide/show single question
- Telegram Notifications
- Integrated Backend Tools for recovering/changing administrator password, deleting administrator account or restoring factory default settings
- Re-designed User Interface with Material UI library
and many more...
v2.1-b3
Ask @lvkaszus! - version: 2.1-b3 (2.1-build3)
Changelog:
- Documentation: Added legacy documentation for this application - Documentation for the v3.xx version is not compatible with this and older v2.xx releases of this application!
- Frontend & Admin Panel & Backend: Making this project up to date by updating every library used in the source code of this app!
v2.1-b2
v2.1
Ask @lvkaszus! - version: 2.1
Changelog:
- Frontend & Admin Panel: Fixed incorrect text breaking
- Backend: Implemented 8 character question IDs instead of 4 and now each ID is unique through the use of a Redis database
- Backend: Fixed special characters and emoji encoding issue
- Backend: Clean configuration section