Hotfix for production docker container to build properly.

Today, we are excited to share the 2.7.0 stable release 🎉

🌟 Help us spread the word about Hasura Backend Plus by starring the repo 🌟 .

Major Improvements & New Features

New Documentation

Documentation has been rewritten from scratch using Docusaurus and is now live!

Hasura Backend Plus Documentation

The new documentation includes up to date material:

• Introduction
• Getting Started
• OAuth Providers
• Storage Rules
• Emails
• Environment Variables
• API Reference

https://github.com/nhost/hasura-backend-plus/pull/631

Repository Cleanup

This is what we've done to clean up the repository:

• Cleaned up unused and old files .
• Restructured docker and docker-compose files.
• Simplified yarn scripts in package.json.

Allow users to add a password

Previously users who registered using an OAuth provider or via Magic LInk were not able to add a password. This is now fixed.

https://github.com/nhost/hasura-backend-plus/pull/627

Redirect on the account activation

Users now get redirected to the app after clicking the activation email.

https://github.com/nhost/hasura-backend-plus/pull/628

Follow us on Twitter and Discord

If you find Hasura Backend Plus valuable, make sure to follow us on Twitter and Discord.

Bug-fix release

Metadata tracked automatically by HBP.

More coming soon...

• Use register instead of sign-up for Magic Link (https://github.com/nhost/hasura-backend-plus/pull/576)

Using this release

Use the following docker image:

nhost/hasura-backend-plus:v2.5.4

Incorrect release. Don't use!

• PGOPTIONS in docker file (https://github.com/nhost/hasura-backend-plus/commit/2a8106b5caacc82da69fed91ab83a0a10e4b4c6a)

Using this release

Use the following docker image:

nhost/hasura-backend-plus:v2.5.2

New Features

Bug fixes

Other

• Always redirect users on login with Magic Link. (https://github.com/nhost/hasura-backend-plus/pull/537)
• Changed ENABLE_MAGIC_LINK to MAGIC_LINK_ENABLE (https://github.com/nhost/hasura-backend-plus/pull/532)
• Added action_url for Magic Link emails (https://github.com/nhost/hasura-backend-plus/pull/536)

Using this release

Use the following docker image:

nhost/hasura-backend-plus:v2.5.1

New Features

• Manage migrations with postgres-migrations (#507)

Bug fixes

• LinkedIn hotfix (#526)

Other

• The environment variable DATABASE_URL must be added to the Hasura Backend Plus container. The value should be the same as HASURA_GRAPHQL_DATABASE_URL that is used for Hasura.

Using this release

Use the following docker image:

nhost/hasura-backend-plus:v2.5.0

New Features

• Magic Link passwordless register and login method (#465).
• sub and iss included in JWT tokens (#496)

Bug fixes

• Make rate limit work behind a proxy (#460)
• Typo in cache header (#479)
• Fix expire check for tickets (#493)

Other

• Dynamically set environment variables during tests (#466)
• Use express-boom (#480)
• Added VS Code debugger (#486)

Using this release

Use the following docker image:

nhost/hasura-backend-plus:v2.4.0

New Features

• Blur images with b query parameter (#446).
• Round corner of images with r query parameter (#444).

Bug fixes

• 8f54bc7 Make rate limit work when HBP is behind a proxy
• 5363905 Password length is not checked on login
• b06dd13 Use auth middleware to get refresh token on logout
• b88c051 Change the name of the 'Key' key to (all lowercase) 'key' for storage objects
• 41b38f4 Add double quotes to the ETag of transformed images
• 0676ccd Correct max-age header value
• e8422df Last-Modified header toUTCString
• fc20dde Avoid generate error when register user because no ticket is available

Other

• 9a3ab4e Increase the authenticator window for TOTP
• efff2de Updated /auth/activate docs
• 195ecec Vuepress upgraded

Using this release

Use the following docker image:

nhost/hasura-backend-plus:v2.3.0

This patch release fixes two issues:

Allows for the missing option cookie when registering a user
Adds the user to the response when using TOTP MFA

• /login, /refresh and /register now return a session object containing the JWT data and the user
• Registering a user automatically logs in that user

• Transfer images (width, height, quality) by specifying query parameter (ex: .../example.jpg?w=100) (#403)
• Added ALLOWED_USER_ROLES that a user can have upon registration
• Bypass all permissions with x-admin-secret (Same value as Hasura's admin secret) (#401)
• Revoke storage tokens (#401)
• server: add support for Postgres arrays in JWT claims to support _in operator for Hasura Permissions (#378)

server: Default to email if no display_name exists for OAuth Provider.
server: Merge accounts using external OAuth providers.
server: Fix default allowed roles for OAuth Providers.

server: display_name is attached for email templates (#320)
server: Added auth middleware to support non-cookie approach for refresh and JWT tokens (#321)

Just to trigger docker hub

server: Support streaming content (#307)

• server: Added version endpoint
• build: multi-staged docker file (#274)
• build: reduction of the docker image from 617MB to 216MB (#291)
• server: Add SameSite=None header to mitigate future cross-site errors from Chrome (#294)
• server: Removed X-Frame-Options for GET storage requests.
• server: Return file key on upload
• server: add COOKIE_SECURE (default: true) and COOKIE_SAME_SITE (default: lax) environment variables