-
v1.0.0
Stablereleased this
2026-10-24 11:55:06 +02:00 | 12 commits to main since this release1.0.0 (2026-10-24)
Bug Fixes
- auth: compare userinfo subject; docs: fix Docker volume permissions (a02a70b)
- auth: honor PocketBase password-auth settings at runtime (00d0250)
- auth: make OIDC discovery independent of a canceled login (f4bc027)
- auth: preserve OAuth2 API signup while blocking public registration (e0ce072)
- auth: reject sessions for unverified accounts (a9151d8)
- auth: require verified accounts for PocketBase authentication (8019f54)
- oauth2: prevent createData identity squatting and bound mail sends (b6fa5d4)
- security: harden OIDC discovery, headers, origin checks and UI fallbacks (cf832d6)
- security: lock down signup, serialize checks, and harden RDAP/OIDC (6b93200)
- ui: clear stale list notices on add responses (38f330a)
- ui: clear stale notices and require verified password accounts (892a1fc)
- watchlist: only consume the daily retry after a completed check (a35b806)
- watchlist: persist manual-check allowance atomically with the result (845c510)
Code Refactoring
- rename project to domainhawk (1b6de4d)
Features
- add WHOIS fallback and per-user watchlist limits (8ab55b9)
- api: add never-expiring tokens and streamline docs (96a17ec)
- api: add personal API tokens and watchlist API (237fc2c)
- api: rate limit authenticated API requests (2ef3999)
- api: support unlimited token lifetimes and refine docs (f3a1f8f)
- auth: add account settings, registration, reset codes and help (6bffba0)
- core: add config, domain validation, and RDAP availability checker (6dc58c3)
- notifications: add SMTP email alerts, domain cache, and daily re-check limit (12a34d4)
- observability: add structured logs and log level (63ec7b7)
- ui: add hawk branding, docs pages, and fix watchlist dividers (911b43b)
- watchlist: add domain search and public docs navigation (195c3de)
- watchlist: add RDAP checks, scheduling, notifications, and HTMX UI (f42f0fc)
BREAKING CHANGES
- environment variables now use the DH_ prefix, session cookies and API token prefixes changed, and Docker volume names changed. The initial migration ID is kept intentionally so existing databases do not re-run the schema migration.
Downloads
-
Source code (ZIP)
1 download
-
Source code (TAR.GZ)
1 download