v0.1.3

Tencent/WeKnorav0.1.3Sep 16, 2025by lyingbug

AI Summary

This release (v0.1.3) of WeKnora focuses on significant security enhancements including a new login authentication system, XSS vulnerability fixes, and API key hiding in the UI. The release also includes bug fixes for OCR AVX support, Docker architecture downloads, and COS file service initialization.

Key Highlights

Added new login authentication functionality with user authorization and session management
Fixed XSS attack vulnerabilities in frontend components for enhanced security
Implemented API key hiding in UI to prevent information leakage
Fixed OCR AVX support issues for broader hardware compatibility
Added login page and improved frontend routing with authentication flow

New Features

New login authentication system with user management
Login page with session management and access control
Adjusted App and Docreader log output for better debugging
Modified COS file service initialization parameters and URL processing
Enhanced Docker binary downloads for target architecture
Frontend health check dependencies improved

Full Release Notes

## What's Changed
* fix: try fix ocr avx not support by @lyingbug in https://github.com/Tencent/WeKnora/pull/275
* fix: frontend depends app health by @lyingbug in https://github.com/Tencent/WeKnora/pull/277
* feat: Adjust App & Docreader log output by @lyingbug in https://github.com/Tencent/WeKnora/pull/283
* fix(docreader): Download binary by target arch in docker by @lyingbug in https://github.com/Tencent/WeKnora/pull/291
* fix(ui): Ignore showing APIKEY for security by @lyingbug in https://github.com/Tencent/WeKnora/pull/294
* chore(docs): Fix Docs Spell by @lyingbug in https://github.com/Tencent/WeKnora/pull/295
* fix(ui): Fix xss attact by @lyingbug in https://github.com/Tencent/WeKnora/pull/299
* feat: Modify COS file service initialization parameters by @begoniezhao in https://github.com/Tencent/WeKnora/pull/300
* feat: Add Login Page by @lyingbug in https://github.com/Tencent/WeKnora/pull/301


### 🔒 Security Features
- **NEW**: Added login authentication functionality to enhance system security
- Implemented user authentication and authorization mechanisms
- Added session management and access control
- Fixed XSS attack vulnerabilities in frontend components

### 📚 Documentation Updates
- Added security notices in all README files (English, Chinese, Japanese)
- Updated deployment recommendations emphasizing internal/private network deployment
- Enhanced security guidelines to prevent information leakage risks
- Fixed documentation spelling issues

### 🛡️ Security Improvements
- Hide API keys in UI for security purposes
- Enhanced input sanitization and XSS protection
- Added comprehensive security utilities

### 🐛 Bug Fixes
- Fixed OCR AVX support issues
- Improved frontend health check dependencies
- Enhanced Docker binary downloads for target architecture
- Fixed COS file service initialization parameters and URL processing logic

### 🚀 Features & Enhancements
- Improved application and docreader log output
- Enhanced frontend routing and authentication flow
- Added comprehensive user management system
- Improved initialization configuration handling

### 🛡️ Security Recommendations
- Deploy WeKnora services in internal/private network environments
- Avoid direct exposure to public internet
- Configure proper firewall rules and access controls
- Regular updates for security patches and improvements

**Full Changelog**: https://github.com/Tencent/WeKnora/compare/v0.1.2...v0.1.3