What's coming in 6.1

[jdaviescoates]

@girish Nextcloud High Performance Backend https://forum.cloudron.io/post/18253

[doodlemania2]

@girish It's been a bit since I peaked at it, but if I recall, there are three main components to the High Performance Backend and two of those components wanted a TURN API. Hopefully/maybe (hehe), I documented it.

[mehdi]

@girish quick question about :

proxyAuth: add 2fa

How's this gonna work with the basic-auth? Or is it just gonna be ignored for basic auth? (in this case, it does not really bring any additional security)

[girish]

@mehdi Currently, it is ignored. Do you think we should maybe disable password validation with basic auth and make it only work with app passwords?

[mehdi]

@girish said in What's coming in 6.1:

@mehdi Currently, it is ignored. Do you think we should maybe disable password validation with basic auth and make it only work with app passwords?

That's an interesting idea. Another possible way would be to only allow BasicAuth if explicitely asked for in the Manifest. It would need a minor change for the apps that need it, but it's totally acceptable IMO. (both options are not exclusive :))

[girish]

@mehdi I made an issue for this, so I can look into this for 6.2 - https://git.cloudron.io/cloudron/box/-/issues/765

[girish]

Quick update on this: release is mostly done, just going through the CI tests.

[jimcavoli]

@girish Just to double-check, the proxyAuth changes also include the path-exclusion logic, right?

[girish]

@jimcavoli Yes, proxyAuth exclusion is implemented. I only implemented a simple approach with a ! pattern for now (not an array).

[d19dotca]

Any ETA on 6.1, by any chance?

[girish]

@d19dotca Should be out today.

[p44]

@girish

[girish]

6.1 is out now. As always, we will roll out slowly since there are many changes. We are already aware of a small breakage that affected one server, so we will make a 6.1.1 soon till we find out any other issues. The breakage will manifest itself in the UI as "Waiting for platform to update" when installing an app or updating an app. If you hit this, let us know here, so we can know how common it is but most of the servers we control updated fine.

[marcusquinn]

@girish

[girish]

To minimize the risk, 6.1.1 is already out with the change.

[marcusquinn]

@girish All instances updated without a prob - but - no domain aliases?

[girish]

@marcusquinn It has to be enabled in the apps on case by case basis. I pushed out an update to surfer a few minutes back, if you want to see how the UI looks. EspoCRM update is coming up shortly. And WordPress afterwards.

[marcusquinn]

@girish Ahh, perfect. Yeah could do with soon as I kinda promised some people

[girish]

@marcusquinn Just fixing the tests, so should be out today (espocrm).

[marcusquinn]

@girish Just tested this for ya. Maybe a typo in there?