v0.8.11-beta

gtsteffaniak/filebrowserv0.8.11-betaOct 28, 2025by gtsteffaniak

AI Summary

This release focuses on improving OnlyOffice integration, authentication, and cookie handling. Key changes include a complete revamp of cookie management with the auth cookie renamed to `filebrowser_quantum_jwt` and no longer session-based for password users, plus proxy authentication improvements that promote users to admin if their username matches the admin username.

Key Highlights

  • Complete cookie handling revamp - auth cookie renamed to `filebrowser_quantum_jwt` and is now fully backend managed
  • OnlyOffice integration improvements including proper logging/error handling and fixes for proxy authentication
  • Proxy-based authentication now works with Docker and can promote users to admin based on username
  • Removed share setting `enableOnlyOfficeEditing` - now uses `allowEditing` instead
  • Added automatic Halloween theme (Oct 31st) that can be disabled via `frontend.styling.disableEventThemes`

Breaking Changes

  • Removed share setting `enableOnlyOfficeEditing` - now uses value from `allowEditing`
  • Auth cookie name changed from `auth` to `filebrowser_quantum_jwt`
  • Auth cookie for password users is no longer session based
  • Anonymous users can now edit if a share has edit permissions enabled
  • Removed state jwt state variable - now 100% cookie based

New Features

  • OnlyOffice debugger now shows backend logs for admin users
  • Proxy auth promotion: if proxy username equals auth.adminUsername, user is promoted to admin
  • Guard against accidentally cancelling uploads
  • Halloween theme that automatically applies on October 31st (can be disabled)
  • No 'Incompatible user settings detected' message on first setup

Full Release Notes

## What's Changed

 **New Features**:
 - OnlyOffice debugger now shows backend logs as well for admin users.
 - If proxy auth based `username` equals `auth.adminUsername`, the user will be promoted to admin.
 - Guard against accidently cancelling uploads #1419
 - Added a quirky halloween theme that automatically applies on october 31st -- you can disable this from happening by setting `frontend.styling.disableEventThemes`

 **Notes**:
 - Removed share setting `enableOnlyOfficeEditing` -- uses value from `allowEditing`
 - Anonymous users can now edit if a share has edit permissions enabled.
 - No "Incompatible user settings detected" message if its first setup
 - cookie handling revamped
   - fully backend managed
   - `auth` cookie name changed to `filebrowser_quantum_jwt`
   - auth cookie for password users no longer session based #1439
   - removed state jwt state variable -- 100% cookie based.

 **BugFixes**:
 - Fixed issue editing onlyoffice on shares #1397
 - Added proper and robust logging / error handling for the onlyoffice callback. #1422 #1068
 - If a file was moved/renamed/deleted onlyoffice would re-save the original file without error, now it gives error the file doesn't exist anymore.
 - OnlyOffice integration does not work behind proxy authentication #1422
 - proxy-based authentication with docker does not work unless set up with password-based login first #1226
 - Select all bug on safari mobile #1421
 - Dragging a item into itself #1446

## New Contributors
* @fox34 made their first contribution in https://github.com/gtsteffaniak/filebrowser/pull/1442
* @pyroch made their first contribution in https://github.com/gtsteffaniak/filebrowser/pull/1441
* @Nouuu made their first contribution in https://github.com/gtsteffaniak/filebrowser/pull/1440

**Full Changelog**: https://github.com/gtsteffaniak/filebrowser/compare/v0.8.10-beta...v0.8.11-beta