-
v1.1.1
StableMiauRizius released this
2026-06-10 04:31:55 +02:00 | 0 commits to main since this releaseJust to test docker deployment. No migration needed
Downloads
-
v1.1.0
Stable2026-06-10 03:33:27 +02:00 | 21 commits to main since this releaseRelease v1.1.0
Project Overview
MiauInv is a web-based inventory management system designed for tracking, organizing, and managing assets. This release focuses on strengthening account security, expanding authentication capabilities, improving user account management, and refining repository governance and CI workflows.
Core Features & Improvements
- Multi-Factor Authentication: Added TOTP-based MFA with QR-code enrollment, manual setup support, recovery-code generation, recovery-code regeneration, and account-level 2FA management.
- Passkey Authentication: Introduced WebAuthn-based passkey support with discoverable login, passkey registration, passkey removal, and passkey management from the account settings interface.
- Account Settings: Added a dedicated account settings page for changing usernames, updating passwords, managing 2FA, handling recovery codes, and managing passkeys.
- Authentication Hardening: Improved session security by revoking refresh sessions after sensitive account changes such as password updates, 2FA changes, and passkey modifications.
- Recovery-Code Management: Recovery codes are now generated securely, stored only as hashes, shown only after generation, and consumed as single-use fallback credentials.
- Rate Limiting: Added basic in-memory rate limiting for authentication and sensitive account endpoints to reduce brute-force and abuse potential.
- Improved Password UI: Replaced separate password visibility buttons with inline icon-based controls and removed unfinished avatar placeholder elements from the account settings UI.
Security & Authentication
- TOTP Setup Flow: TOTP secrets are no longer stored before confirmation. Setup secrets are held temporarily and only persisted after the first valid authenticator code.
- Passkey Login Flow: Passkey login now works without requiring a username and is treated as a complete phishing-resistant sign-in flow.
- Session Revocation: Existing refresh tokens are revoked after password changes, 2FA activation or deactivation, recovery-sensitive changes, and passkey management actions.
- Secure Credential Storage: Refresh tokens, recovery codes, and passkey credential data are stored server-side with appropriate hashing or structured persistence depending on the credential type.
- Updated Security Documentation: Expanded authentication, database, and security documentation to describe MFA, passkeys, recovery codes, rate limiting, and session behavior.
Repository & Workflow Improvements
- Contribution Guidelines: Added dedicated contribution guidelines covering signed commits, protected
mainbranch rules, pull request requirements, issue usage, branch naming, and release branch conventions. - Signed Commit Policy: Documented that all commits must be signed and all changes must be submitted through pull requests.
- CI Workflow Optimization: Updated the test-and-lint workflow to use a dedicated Go runner image and reduce unnecessary setup overhead.
- Documentation Cleanup: Removed outdated testing documentation references where no full test suite exists yet and aligned README documentation links with the current repository structure.
Deployment & Infrastructure
- Database Schema Extensions: Added persistent storage for MFA recovery codes, WebAuthn passkey credentials, and WebAuthn challenge state.
- Automatic Migration Support: Existing SQLite databases are migrated forward with the new account security fields and authentication-related tables.
- Docker Image Updates: Release images should be rebuilt and published for
v1.1.0andlatest.
Repository Visuals
- Updated documentation to reflect the current account settings, authentication, and security capabilities of the application.
Downloads
-
v1.0.2 Stable
2026-06-09 14:49:05 +02:00 | 37 commits to main since this releaseRelease v1.0.2
Project Overview
MiauInv is a web-based inventory management system designed for tracking, organizing, and managing assets. This release focuses on transitioning the core architecture to a fully production-ready deployment state, enhancing data dynamism, improving infrastructure orchestration, and expanding project documentation.
Core Features & Improvements
- Dynamic Analytics: Replaced all hardcoded system metrics with live database aggregations. The dashboard now dynamically calculates total assets, active projects, and physical locations directly via SQLite backend hooks.
- Enhanced Client Validation: Refactored input sanitization and error boundaries. The system now returns precise HTTP status codes (such as 422 Unprocessable Entity) for logical validation failures like excessive password lengths.
- Documentation Architecture: Expanded repository transparency by adding a dedicated
docs/directory containing complete technical specifications for the underlying database schema, data integrity constraints, and the dual-token JWT authentication flow.
Deployment & Infrastructure
- Production Reverse Proxy Support: Optimized containerization layouts to work natively behind a Caddy reverse proxy environment. Internal communication paths are locked down securely within dedicated external proxy networks.
- Optimized Container Builds: Finalized the multi-stage scratch Dockerfile compilation pipeline, ensuring minimum image footprints while maintaining secure TLS data transport layers.
Repository Visuals
- Updated the primary project documentation to include interactive frontend workspace previews, profiling the layout matrices for the Dashboard, Inventory, Locations, and Projects interfaces.
Downloads
-
v1.0.0 Stable
2026-06-08 15:36:46 +02:00 | 45 commits to main since this releaseRelease v1.0.0
Project Overview
MiauInv is a web-based inventory management system designed for tracking, organizing, and managing assets. This initial stable release establishes the core architecture, securing both the frontend and backend components while providing a containerized deployment pipeline.
Core Features
- User Authentication: Secure JWT-based authentication system utilizing both HTTP-Only cookies and Authorization headers for API and page routing.
- Role-Based Access Control (RBAC): Built-in middleware to restrict endpoints and views based on defined user roles.
- Go Backend: High-performance, lightweight backend architecture handling routing, session validation, and database interactions.
- Responsive Frontend: Integrated authentication handling and seamless state management between public and protected routes.
Deployment
- Fully containerized using Multi-Arch Docker builds (linux/amd64, linux/arm64).
- OpenContainer metadata integrated to link image builds directly with the Gitea repository.
Downloads