v3.2.6

thedevs-network/kuttv3.2.6Jul 5, 2026by poeti8

AI Summary

This release focuses on enhancing OIDC authentication configuration to prevent forced re-authentication and allows for customizing the login button text. It also includes critical security updates to fix vulnerabilities in dependency packages and improves cookie security policies.

Key Highlights

Added `OIDC_PROMPT` to make forced re-authentication configurable
Added `OIDC_BUTTON_TEXT` to customize the login button text
Updated nodemailer package to fix security vulnerabilities
Switched to `express-useragent` for safer user agent parsing
Set `SameSite: Lax` for signed-in cookies for improved security

New Features

Configurable OIDC prompt
Customizable OIDC button text

Full Release Notes

- Add `OIDC_PROMPT`. Fixes OIDC forced re-authentication by making the prompt configurable. (PR #967 by @Jignesh4611)
- Add `OIDC_BUTTON_TEXT` to change OIDC login button text
- Use a new useragent library (`express-useragent`) to parse user agent. Fixes vulnerabilities found in the useragent package
- Update nodemailer package to fix vulnerabilities
- Set `SameSite: Lax` for signed-in cookies
- Use 404 HTTP status code for the 404 page
- Fix typo in the report page