The intent of this changelog is to give an overview of the major changes
and fixes made to Blërg. For a detailed changelog, see the git log.
+<a name="v1.11"><h2>Verison 1.11 - released Thursday, March 5th, 2015</h2></a>
+
+<h3>Features Added</h3>
+<ul>
+<li>Password recovery - Passwords can now be recovered using a URL containing
+authenticated reset information. These can be generated in advance for
+safe-keeping (like recovery codes), or sent via email if you have registered an
+email address.</li>
+<li>Email notifications - You can register an email address that will receive a
+daily digest of updates to your feed. It also allows password resets via
+email.</li>
+<li>The recovery and email features above as well as password changes have been
+added to a new Account Center page.</li>
+<li>A new environment variable BLERG_HOME has been added to the install
+environment that points to the root of the blerg data store.</li>
+</ul>
+
+<h3>HTTP API Changes</h3>
+<ul>
+<li>Password recovery and email are configured via APIs on /aux/recovery and
+/aux/email, respectively. They're implemented with new Perl CGIs in
+aux/cgi. Documentation forthcoming.</li>
+</ul>
+
+<h3>Perl API Changes</h3>
+<ul>
+<li>Missing documentation for auth functions has been added.</li>
+<li>A <code>configuration</code> module function has been created to access the
+runtime configuration in <code>blergconf</code>.</li>
+</ul>
+
+<h3>C API Changes</h3>
+<ul>
+<li>There is now a function <code>auth_get_counter</code> which returns an
+opaque 32-bit integer that will change when the password is changed. It's
+intended to be used to invalidate things after a password change (like the
+above recovery links).</li>
+</ul>
+
+<h3>Bugs Squashed</h3>
+<ul>
+<li>Fixed a bug in the perl version of <code>subscription_list</code> where it
+was fetching the first 50 entries instead of the last.</li>
+</ul>
+
+<a name="v1.10"><h2>Version 1.10 - released Sunday, October 26th, 2014</h2></a>
+
+<h3>Features Added</h3>
+<ul>
+<li>When you are mentioned, the "Feed Your Vanity" button will now light up to
+let you know. This is implemented internally by a "mentioned" flag on the
+account. See the API changes below.</li>
+<li>Password storage and authentication have been compacted down to two files,
+reducing size and disk seeks.</li>
+</ul>
+
+<h3>HTTP API Changes</h3>
+<ul>
+<li>/feedinfo is now /status, which now handles both account status (new feed
+entries and mentioned status) and subscription status for other users.</li>
+<li>/unsubscribe has been removed in favor of sending a boolean "subscribed"
+parameter to /subscribe.</li>
+<li>The logged-in username is now part of the auth cookie, removing the need to
+POST the username for authenticated requests.</li>
+<li>Authentication backend changes allow sessions to be expired. The session
+timeout defaults to one hour, and can be changed by tweaking
+AUTHENTICATION_TIMEOUT in config.h.</li>
+</ul>
+
+<h3>C API Changes</h3>
+<ul>
+<li>Password retrieval functions (<code>auth_get_*</code>) are no longer part
+of the C API.</li>
+<li><code>blerg_{get,set}_mute(*blerg)</code> has been generalized into
+<code>blerg_{get,set}_status(*blerg, flags)</code> to support new mentioned
+flag.</li>
+</ul>
+
+<h3>Features Deprecated</h3>
+<ul>
+<li>Autoconf build system was removed because I don't care to maintain it. I
+might revisit it later, but right now, it's misleading to have it available
+when it doesn't work.</li>
+</ul>
+
+<h3>Bugs Squashed</h3>
+<ul>
+<li>Password updates now use locks, eliminating a potential race condition that
+could corrupt the password if two updates happened simultaneously.</li>
+<li>Fixed one instance of testing mmap result against NULL instead of
+MAP_FAILED.</li>
+<li>Fixed a number of bugs with stringbucket implementation.</li>
+<li>Now building with <code>-Wall</code>, which has found a lot of small
+bugs.</li>
+</ul>
+
<a name="v1.9.1"><h2>Version 1.9.1 - released Tuesday, June 17th, 2014</h2></a>
<h3>Features Added</h3>
projects / blerg.git / blobdiff