v3.2.6

zhu-xlab/GlobalBuildingAtlasv3.2.6Jul 5, 2026by poeti8

AI Summary

This release focuses on security hardening and improving the OIDC authentication flow, including vulnerability fixes in dependencies and user agent parsing.

Key Highlights

Configurable OIDC prompt (`OIDC_PROMPT`) to prevent forced re-authentication
Ability to customize OIDC login button text (`OIDC_BUTTON_TEXT`)
Security updates: Switched to `express-useragent` and updated `nodemailer`
Enhanced cookie security by setting `SameSite: Lax`

New Features

OIDC_PROMPT configuration option
OIDC_BUTTON_TEXT configuration option
New express-useragent library for user agent parsing

Full Release Notes

- Add `OIDC_PROMPT`. Fixes OIDC forced re-authentication by making the prompt configurable. (PR #967 by @Jignesh4611)
- Add `OIDC_BUTTON_TEXT` to change OIDC login button text
- Use a new useragent library (`express-useragent`) to parse user agent. Fixes vulnerabilities found in the useragent package
- Update nodemailer package to fix vulnerabilities
- Set `SameSite: Lax` for signed-in cookies
- Use 404 HTTP status code for the 404 page
- Fix typo in the report page