v0.8.11-beta
gtsteffaniak/filebrowserv0.8.11-betaOct 28, 2025by gtsteffaniak
AI Summary
This release focuses on improving OnlyOffice integration, authentication, and cookie handling. Key changes include a complete revamp of cookie management with the auth cookie renamed to `filebrowser_quantum_jwt` and no longer session-based for password users, plus proxy authentication improvements that promote users to admin if their username matches the admin username.
Key Highlights
- Complete cookie handling revamp - auth cookie renamed to `filebrowser_quantum_jwt` and is now fully backend managed
- OnlyOffice integration improvements including proper logging/error handling and fixes for proxy authentication
- Proxy-based authentication now works with Docker and can promote users to admin based on username
- Removed share setting `enableOnlyOfficeEditing` - now uses `allowEditing` instead
- Added automatic Halloween theme (Oct 31st) that can be disabled via `frontend.styling.disableEventThemes`
Breaking Changes
- Removed share setting `enableOnlyOfficeEditing` - now uses value from `allowEditing`
- Auth cookie name changed from `auth` to `filebrowser_quantum_jwt`
- Auth cookie for password users is no longer session based
- Anonymous users can now edit if a share has edit permissions enabled
- Removed state jwt state variable - now 100% cookie based
New Features
- OnlyOffice debugger now shows backend logs for admin users
- Proxy auth promotion: if proxy username equals auth.adminUsername, user is promoted to admin
- Guard against accidentally cancelling uploads
- Halloween theme that automatically applies on October 31st (can be disabled)
- No 'Incompatible user settings detected' message on first setup
Full Release Notes
## What's Changed **New Features**: - OnlyOffice debugger now shows backend logs as well for admin users. - If proxy auth based `username` equals `auth.adminUsername`, the user will be promoted to admin. - Guard against accidently cancelling uploads #1419 - Added a quirky halloween theme that automatically applies on october 31st -- you can disable this from happening by setting `frontend.styling.disableEventThemes` **Notes**: - Removed share setting `enableOnlyOfficeEditing` -- uses value from `allowEditing` - Anonymous users can now edit if a share has edit permissions enabled. - No "Incompatible user settings detected" message if its first setup - cookie handling revamped - fully backend managed - `auth` cookie name changed to `filebrowser_quantum_jwt` - auth cookie for password users no longer session based #1439 - removed state jwt state variable -- 100% cookie based. **BugFixes**: - Fixed issue editing onlyoffice on shares #1397 - Added proper and robust logging / error handling for the onlyoffice callback. #1422 #1068 - If a file was moved/renamed/deleted onlyoffice would re-save the original file without error, now it gives error the file doesn't exist anymore. - OnlyOffice integration does not work behind proxy authentication #1422 - proxy-based authentication with docker does not work unless set up with password-based login first #1226 - Select all bug on safari mobile #1421 - Dragging a item into itself #1446 ## New Contributors * @fox34 made their first contribution in https://github.com/gtsteffaniak/filebrowser/pull/1442 * @pyroch made their first contribution in https://github.com/gtsteffaniak/filebrowser/pull/1441 * @Nouuu made their first contribution in https://github.com/gtsteffaniak/filebrowser/pull/1440 **Full Changelog**: https://github.com/gtsteffaniak/filebrowser/compare/v0.8.10-beta...v0.8.11-beta