Release 4.2.0

[lissy93]

Happy Friday everyone!

Here's the discussion thread for the latest release (4.2.0 🌿), feel free to drop any questions you have about it below :)

Here's what's new:

• 🔐 Significant security improvements for OIDC and KC auth
• 🐛 Some small fixes/features
  • Optimized search performance for 200+ item boards
  • Fixed Safari large items display
  • Increased touch target for section collapse
  • Adds support newwindow for nav items
• 🎨 Widget refreshes
  • New ntfy stream widget - thanks @alayham!
  • Revived healthcheck widget
  • Adds refresh support to image widget
• 🌐 Translation updates
  • German - thanks @CrazyWolf13
  • French - thanks @bgillet
• ⬆️ Plus all the normal dependency bumps

Full Changelog: 4.1.0...4.2.0

---

And a really big shout out to all my amazing sponsors here on GitHub.
It's 100% down to them that updates are possible, and I can't put into words how grateful I am for each of them💖

---

This discussion was created from the release Release 4.2.0.

[OmegaRa]

Not sure this is specific to 4.2, but having issues with icons for links and such. I have the png/jpg files in the public folder, but I keep getting broken link icons when I try to apply. Is there a way to just upload a ping in edit mode? Also, is there a way to edit the Dashy splash screen?

[lissy93]

Put them in the user-data directory, rather than public :)

[OmegaRa]

it half worked. The main Icon up top works, but when I try to do the same with a section or an app it still shows broken link. I have the apps as favicon, and only 2 work

[OmegaRa]

Got it, had to type http://[IP]:[port]/img.png to get it to work in those sections.

[lissy93]

I just took a look at the code and the docs, and I noticed that it's actually setup in a kinda weird way:

• Icons go in /user-data/item-icons/ and can then be referenced with just their filename
  • e.g. /user-data/item-icons/adguard.png would be used with icon: adguard.png
• BUT the same rule isn't followed for other icons (like pageInfo.logo or sections[n].icon)

So this seems really badly designed on my part 🫤

I'll look into finding a neater and more consistent way to reference icons, with shorter paths and the same logic for each place.

[Amethysta0013]

I'm so happy with the switch to Vue...but this last release seems to have slowed down OIDC authentication significantly. It used to load quickly, but now I see a "Sign Out" button and other UI before the rest of the UI comes up.

Is this typical? 💜

[lissy93]

Hey @Amethysta0013
Ooh, that's not good. There has been a lot of updates to OIDC in recent versions, but I'm not sure which specifically could have slowed things down. Which version were you updating from?

Does this happen on every page load, or just the initial login stage?

[Amethysta0013]

Not every page load, no. It seems it might be when the access token expires. I'm running my own Authentik server, so I increased the access token expiration, but I haven't noticed a difference.

If you want, I can make a quick video to show you what it's doing. What would help? 💜

[lissy93]

I've been looking into this, and I think I understand the problem.
I've just made PR #2204, which I've released into 4.3.4 :)

It adds a new config option, enableSilentRenew (under appConfig.auth.oidc) which if set (to true), will then automatically refresh your token in the background (providing your OIDC provider supports the offline_access scope, which Authentik does). I've updated the docs too, so there's more explanation of this in https://dashy.to/docs/authentication#silent-token-renewal as well as the OIDC-specific guides.

[Amethysta0013]

Thank you so much! I just updated the Docker image and config. If I see anything in the next few days, I'll let you know.

So far, so good! 💜