v0.8.2-beta
gtsteffaniak/filebrowserv0.8.2-betaAug 25, 2025by gtsteffaniak
AI Summary
This beta release (v0.8.2-beta) introduces a new deny-by-default access control feature for OIDC user sources, adds "open parent folder" functionality to context menus and search results, and includes several bug fixes for public shares and static asset access issues. The release also upgrades to Go 1.25 and adjusts download limit counting.
Key Highlights
- New `source.config.denyByDefault` configuration for deny-by-default access rules in OIDC sources
- Added "open parent folder" option in context menu and search results
- Fixed shares redirecting to login issue and public share download problems
- Upgraded to Go 1.25 with green tea GC enabled
- Bundled ffmpeg 8.0 in Docker image
New Features
- source.config.denyByDefault configuration for deny-by-default access control
- OIDC user source access based on username and groups with denyByDefault support
- "Open parent folder" in context menu and search results
- Friendly "share not found" page
- Updated invalid share message for clarity
- Go 1.25 upgrade with green tea GC
- TOTP secrets now accept non-secure strings (shows warning)
- Adjusted download limit to count text file viewing in editor
- Disabled file viewer setting now enforced on backend
Full Release Notes
## What's Changed **New Features**: - added `source.config.denyByDefault` configuration to enable a deny-by-default access rule. A source enabled with this will deny access unless an "allow" rule was specifically created. (Similar to creating a root-level denyAll rule) - allow oidc user source access and permission based on username and groups is fulfilled by denyByDefault source with access rules https://github.com/gtsteffaniak/filebrowser/issues/824 - "open parent folder" in context menu and search results https://github.com/gtsteffaniak/filebrowser/issues/1121 - added friendly "share not found" page. **Notes**: - 8.0 ffmpeg version bundled with docker - go 1.25 upgrade with green tea GC enabled - totp secrets accept non-secure strings, only throwing warning - adjusted download limit so it also counts viewing text "content" of files (like in editor). You can also "disable file viewing" to stop the editor from showing. lower quality file image previews are not counted as downloads. - updated invalid share message to be more clear https://github.com/gtsteffaniak/filebrowser/issues/1120 **BugFixes**: - fixed /public/static routes issue - shares redirect to login - https://github.com/gtsteffaniak/filebrowser/issues/1109 - some static assets not available to anonymous user - https://github.com/gtsteffaniak/filebrowser/issues/1102 - more safari style issues https://github.com/gtsteffaniak/filebrowser/issues/1110 - fix public share download issues https://github.com/gtsteffaniak/filebrowser/issues/1118 https://github.com/gtsteffaniak/filebrowser/issues/1089 - fixed disable file viewer setting and enforced on backend **Full Changelog**: https://github.com/gtsteffaniak/filebrowser/pull/1123