diff options
| author | Simon McVittie <smcv@debian.org> | 2015-05-27 08:52:01 +0100 |
|---|---|---|
| committer | Simon McVittie <smcv@debian.org> | 2015-05-27 08:52:01 +0100 |
| commit | 2afb0dd66332136f47d08f2ee4de292eb73c8779 (patch) | |
| tree | 8f0e79228de5c762870730689ceabb6a9a112c25 /debian | |
| parent | 9ab3d2a6be367b745ad0240e5fb68590c7f850b2 (diff) | |
| download | ikiwiki-2afb0dd66332136f47d08f2ee4de292eb73c8779.tar ikiwiki-2afb0dd66332136f47d08f2ee4de292eb73c8779.tar.gz | |
Do not directly enable emailauth by default, only indirectly via openid
This avoids nasty surprises on upgrade if a site is using httpauth,
or passwordauth with an account_creation_password, and relying on
only a select group of users being able to edit the site. We can revisit
this for ikiwiki 4.
Diffstat (limited to 'debian')
| -rw-r--r-- | debian/NEWS | 12 | ||||
| -rw-r--r-- | debian/changelog | 6 |
2 files changed, 18 insertions, 0 deletions
diff --git a/debian/NEWS b/debian/NEWS index d09b4d9be..c1f343520 100644 --- a/debian/NEWS +++ b/debian/NEWS @@ -1,3 +1,15 @@ +ikiwiki (3.20150330) UNRELEASED; urgency=medium + + The new "emailauth" plugin allows users to authenticate using an email + address, without otherwise creating an account. + + The openid plugin now enables emailauth by default. Please include + emailauth in the disable_plugins setting if this is not desired. + Conversely, if emailauth is required on a wiki that does not enable + openid, you can list it in the enable_plugins setting. + + -- Simon McVittie <smcv@debian.org> Wed, 27 May 2015 08:30:43 +0100 + ikiwiki (3.20150107) experimental; urgency=medium By default, this version of IkiWiki tells mobile browsers that its diff --git a/debian/changelog b/debian/changelog index e483285fa..14ef4e71b 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,5 +1,6 @@ ikiwiki (3.20150330) UNRELEASED; urgency=medium + [ Joey Hess ] * New emailauth plugin lets users log in, without any registration, by simply clicking on a link in an email. * Re-remove google from openid selector; their openid provider is @@ -13,6 +14,11 @@ ikiwiki (3.20150330) UNRELEASED; urgency=medium * Make cgiurl output deterministic, not hash order. Closes: #785738 Thanks, Daniel Kahn Gillmor + [ Simon McVittie ] + * Do not enable emailauth by default, to avoid surprises on httpauth-only + sites. Enable it by default in openid instead, since it is essentially + a replacement for OpenIDs. + -- Joey Hess <id@joeyh.name> Tue, 28 Apr 2015 12:24:08 -0400 ikiwiki (3.20150329) experimental; urgency=high |