Release Notes

v0.16.15

Stronger protection for stored personal data

Sign-in details for the Client Portal and other stored personal data are now encrypted, and searches you type into lists no longer appear in web addresses.

Features

  • Clearer default location: the Default location field now has an info icon, on the record and in the edit form, that explains what the field decides, and the old help line that described effects that do not exist is gone.
  • Plan terms at a glance: Assign membership, Give trial and Continue after trial now show the chosen plan's price and session length as separate labelled facts.
  • Mollie ready after setup: after a local setup or a reseed of sample data, Mollie is now connected in test mode, so payment requests and the Pay button work without connecting it by hand.
  • Production web addresses in the console: the domain setup command no longer writes the production web addresses of a real business from code, so they are managed in the console.

Fixes

  • Quicker sign-out: signing out of the Client Portal no longer keeps you on the old page for many seconds, and a click during sign-out no longer ends on a false “Your session has expired” message.
  • Reliable sign-out menus: signing out from the admin portal now waits for the server to confirm, shows an error if sign-out is refused, and still clears cached images from your browser when a session ends.
  • Logo changes in the activity log: replacing the business logo or a location logo with another image now shows “Logo image: Changed” in the activity log, where before no entry appeared.
  • Long feedback titles: feedback with a long title can be saved again.
  • Accurate analytics information: the GDPR section under Compliance & Standards in Application Info now describes correctly how analytics is used.
  • Sign-out in every portal: the console and Client Portal Sign out menus now also wait for the server to answer and show an error if sign-out is refused.
  • Cached images cleared on more exits: changing your password and wiping or reseeding sample data now also clear cached images from your browser when you are sent to the sign-in page.
  • Audit log page size: the page-size control in the audit log now changes the number of rows shown, where before it had no effect.

Security and reliability

  • Encrypted personal data: Client Portal sign-in details, invitation email addresses, and personal details kept for new sign-ups and feedback are now stored encrypted.
  • Safer account lookups: all portals now find accounts by email address in one consistent, more protected way.
  • Searches kept out of web addresses: what you type into the search of the invitation history and the audit log is no longer placed in the web address, so it stays out of browser history and access logs. A copied audit-log link still restores the time range, the filters and the page, but the search box starts empty.
  • Console searches kept out of web addresses: searches in the console tenant list, the release-note list and the console audit log are now sent in the request itself instead of the web address, and the audit-log page-size setting is now respected.
  • Invitation history limit: a search, or any sort other than the sent date, over more than 10,000 invitations now shows a “too many records” message instead of loading every row.
  • Signup search by full address: the console signup search now finds an admin email only by the full address, so operators type the whole address.