## Version 24.06 #### Core - `econf`: Add ability to use additional custom errors when parsing options - `ejabberd_logger`: Reloading configuration will update logger settings - `gen_mod`: Add support to specify a hook global, not vhost-specific - [`mod_configure`](https://docs.ejabberd.im/admin/configuration/modules/#mod_configure): Retract `Get User Password` command to update [XEP-0133](https://xmpp.org/extensions/xep-0133.html) 1.3.0 - [`mod_conversejs`](https://docs.ejabberd.im/admin/configuration/modules/#mod_conversejs): Simplify support for `@HOST@` in `default_domain` option ([#4167](https://github.com/processone/ejabberd/issues/4167)) - [`mod_mam`](https://docs.ejabberd.im/admin/configuration/modules/#mod_mam): Document that [XEP-0441](https://xmpp.org/extensions/xep-0441.html) is implemented as well - [`mod_mam`](https://docs.ejabberd.im/admin/configuration/modules/#mod_mam): Update support for [XEP-0425](https://xmpp.org/extensions/xep-0425.html) version 0.3.0, keep supporting 0.2.1 ([#4193](https://github.com/processone/ejabberd/issues/4193)) - [`mod_matrix_gw`](https://docs.ejabberd.im/admin/configuration/modules/#mod_matrix_gw): Fix support for `@HOST@` in `matrix_domain` option ([#4167](https://github.com/processone/ejabberd/issues/4167)) - [`mod_muc_log`](https://docs.ejabberd.im/admin/configuration/modules/#mod_muc_log): Hide join/leave lines, add method to show them - [`mod_muc_log`](https://docs.ejabberd.im/admin/configuration/modules/#mod_muc_log): Support `allowpm` introduced in 2bd61ab - [`mod_muc_room`](https://docs.ejabberd.im/admin/configuration/modules/#mod_muc_room): Use ejabberd hooks instead of function calls to `mod_muc_log` ([#4191](https://github.com/processone/ejabberd/issues/4191)) - [`mod_private`](https://docs.ejabberd.im/admin/configuration/modules/#mod_private): Cope with bookmark decoding errors - [`mod_vcard_xupdate`](https://docs.ejabberd.im/admin/configuration/modules/#mod_vcard_xupdate): Send hash after avatar get set for first time - `prosody2ejabberd`: Handle the `approved` attribute. As feature isn't implemented, discard it ([#4188](https://github.com/processone/ejabberd/issues/4188)) #### SQL - [`update_sql_schema`](https://docs.ejabberd.im/admin/configuration/toplevel/#update_sql_schema): Enable this option by default - CI: Don't load database schema files for mysql and pgsql - Support Unix Domain Socket with updated p1_pgsql and p1_mysql ([#3716](https://github.com/processone/ejabberd/issues/3716)) - Fix handling of `mqtt_pub` table definition from `mysql.sql` and fix `should_update_schema/1` in `ejabberd_sql_schema.erl` - Don't start sql connection pools for unknown hosts - Add `update_primary_key` command to sql schema updater - Fix crash running [`export2sql`](https://docs.ejabberd.im/developer/ejabberd-api/admin-api/#export2sql) when MAM enabled but MUC disabled - Improve detection of types in odbc #### Commands API - New ban commands use private storage to keep ban information ([#4201](https://github.com/processone/ejabberd/issues/4201)) - [`join_cluster_here`](https://docs.ejabberd.im/developer/ejabberd-api/admin-api/#join_cluster_here): New command to join a remote node into our local cluster - Don't name integer and string results in API examples ([#4198](https://github.com/processone/ejabberd/issues/4198)) - [`get_user_subscriptions`](https://docs.ejabberd.im/developer/ejabberd-api/admin-api/#get_user_subscriptions): Fix validation of user field in that command - [`mod_admin_extra`](https://docs.ejabberd.im/admin/configuration/modules/#mod_admin_extra): Handle case when `mod_private` is not enabled ([#4201](https://github.com/processone/ejabberd/issues/4201)) - [`mod_muc_admin`](https://docs.ejabberd.im/admin/configuration/modules/#mod_muc_admin): Improve validation of arguments in several commands #### Compile - `ejabberdctl`: Comment ERTS_VSN variable when not used ([#4194](https://github.com/processone/ejabberd/issues/4194)) - `ejabberdctl`: Fix iexlive after `make prod` when using Elixir - `ejabberdctl`: If `INET_DIST_INTERFACE` is IPv6, set required option ([#4189](https://github.com/processone/ejabberd/issues/4189)) - `ejabberdctl`: Make native dynamic node names work when using fully qualified domain names - `rebar.config.script`: Support relaxed dependency version ([#4192](https://github.com/processone/ejabberd/issues/4192)) - `rebar.config`: Update deps version to rebar3's relaxed versioning - `rebar.lock`: Track file, now that rebar3 uses loose dependency versioning - `configure.ac`: When using rebar3, unlock dependencies that are disabled ([#4212](https://github.com/processone/ejabberd/issues/4212)) - `configure.ac`: When using rebar3 with old Erlang, unlock some dependencies ([#4213](https://github.com/processone/ejabberd/issues/4213)) - `mix:exs`: Move `xmpp` from `included_applications` to `applications` #### Dependencies - Base64url: Use only when using rebar2 and Erlang lower than 24 - Idna: Bump from 6.0.0 to 6.1.1 - Jiffy: Use Json module when Erlang/OTP 27, jiffy with older ones - Jose: Update to the new 1.11.10 for Erlang/OTP higher than 23 - Luerl: Update to 1.2.0 when OTP same or higher than 20, simplifies commit a09f222 - P1_acme: Update to support Jose 1.11.10 and Ipv6 support ([#4170](https://github.com/processone/ejabberd/issues/4170)) - P1_acme: Update to use Erlang's json library instead of jiffy when OTP 27 - Port_compiler: Update to 1.15.0 that supports Erlang/OTP 27.0 #### Development Help - `.gitignore`: Ignore ctags/etags files - `make dialyzer`: Add support to run Dialyzer with Mix - `make format|indent`: New targets to format and indent source code - `make relive`: Add Sync tool with Rebar3, ExSync with Mix - `hook_deps`: Use precise name: hooks are added and later deleted, not removed - `hook_deps`: Fix to handle FileNo as tuple `{FileNumber, CharacterPosition}` - Add support to test also EUnit suite - Fix `code:lib_dir` call to work with Erlang/OTP 27.0-rc2 - Set process flags when Erlang/OTP 27 to help debugging - Test retractions in mam_tests #### Documentation - Add some XEPs support that was forgotten - Fix documentation links to new URLs generated by MkDocs - Remove `...` in example configuration: it is assumed and reduces verbosity - Support for version note in modules too - Mark toplevel options, commands and modules that changed in latest version - Now modules themselves can have version annotations in `note` #### Installers and Container - make-binaries: Bump Erlang/OTP to 26.2.5 and Elixir 1.16.3 - make-binaries: Bump OpenSSL to 3.3.1 - make-binaries: Bump Linux-PAM to 1.6.1 - make-binaries: Bump Expat to 2.6.2 - make-binaries: Revert temporarily an OTP commit that breaks MSSQL ([#4178](https://github.com/processone/ejabberd/issues/4178)) - CONTAINER.md: Invalid `CTL_ON_CREATE` usage in docker-compose example #### WebAdmin - ejabberd_ctl: Improve parsing of commas in arguments - ejabberd_ctl: Fix output of UTF-8-encoded binaries - WebAdmin: Remove webadmin_view for now, as commands allow more fine-grained permissions - WebAdmin: Unauthorized response: include some text to direct to the logs - WebAdmin: Improve home page - WebAdmin: Sort alphabetically the menu items, except the most used ones - WebAdmin: New login box in the left menu bar - WebAdmin: Add make_command functions to produce HTML command element - Document 'any' argument and result type, useful for internal commands - Commands with 'internal' tag: don't list and block execution by frontends - WebAdmin: Move content to commands; new pages; hook changes; new commands ## Version 24.02 #### Core: - Added Matrix gateway in `mod_matrix_gw` - Support SASL2 and Bind2 - Support tls-server-end-point channel binding and sasl2 codec - Support tls-exporter channel binding - Support XEP-0474: SASL SCRAM Downgrade Protection - Fix presenting features and returning results of inline bind2 elements - [`disable_sasl_scram_downgrade_protection`](https://docs.ejabberd.im/admin/configuration/toplevel/#disable-sasl-scram-downgrade-protection): New option to disable XEP-0474 - [`negotiation_timeout`](https://docs.ejabberd.im/admin/configuration/toplevel/#negotiation-timeout): Increase default value from 30s to 2m - mod_carboncopy: Teach how to interact with bind2 inline requests #### Other: - ejabberdctl: Fix startup problem when having set `EJABBERD_OPTS` and logger options - ejabberdctl: Set EJABBERD_OPTS back to `""`, and use previous flags as example - eldap: Change logic for `eldap tls_verify=soft` and `false` - eldap: Don't set `fail_if_no_peer_cert` for eldap ssl client connections - Ignore hints when checking for chat states - mod_mam: Support XEP-0424 Message Retraction - mod_mam: Fix XEP-0425: Message Moderation with SQL storage - mod_ping: Support XEP-0198 pings when stream management is enabled - mod_pubsub: Normalize pubsub `max_items` node options on read - mod_pubsub: PEP nodetree: Fix reversed logic in node fixup function - mod_pubsub: Only care about PEP bookmarks options when creating node from scratch #### SQL: - MySQL: Support `sha256_password` auth plugin - ejabberd_sql_schema: Use the first unique index as a primary key - Update SQL schema files for MAM's XEP-0424 - New option [`sql_flags`](https://docs.ejabberd.im/admin/configuration/toplevel/#sql-flags): right now only useful to enable `mysql_alternative_upsert` #### Installers and Container: - Container: Add ability to ignore failures in execution of `CTL_ON_*` commands - Container: Update to Erlang/OTP 26.2, Elixir 1.16.1 and Alpine 3.19 - Container: Update this custom ejabberdctl to match the main one - make-binaries: Bump OpenSSL 3.2.1, Erlang/OTP 26.2.2, Elixir 1.16.1 - make-binaries: Bump many dependency versions #### Commands API: - `print_sql_schema`: New command available in ejabberdctl command-line script - ejabberdctl: Rework temporary node name generation - ejabberdctl: Print argument description, examples and note in help - ejabberdctl: Document exclusive ejabberdctl commands like all the others - Commands: Add a new [`muc_sub`](https://docs.ejabberd.im/developer/ejabberd-api/admin-tags/#muc-sub) tag to all the relevant commands - Commands: Improve syntax of many commands documentation - Commands: Use list arguments in many commands that used separators - Commands: [`set_presence`](https://docs.ejabberd.im/developer/ejabberd-api/admin-api/#set-presence): switch priority argument from string to integer - ejabberd_commands: Add the command API version as [a tag `vX`](https://docs.ejabberd.im/developer/ejabberd-api/admin-tags/#v1) - ejabberd_ctl: Add support for list and tuple arguments - ejabberd_xmlrpc: Fix support for restuple error response - mod_http_api: When no specific API version is requested, use the latest #### Compilation with Rebar3/Elixir/Mix: - Fix compilation with Erlang/OTP 27: don't use the reserved word 'maybe' - configure: Fix explanation of `--enable-group` option ([#4135](https://github.com/processone/ejabberd/issues/4135)) - Add observer and runtime_tools in releases when `--enable-tools` - Update "make translations" to reduce build requirements - Use Luerl 1.0 for Erlang 20, 1.1.1 for 21-26, and temporary fork for 27 - Makefile: Add `install-rel` and `uninstall-rel` - Makefile: Rename `make rel` to `make prod` - Makefile: Update `make edoc` to use ExDoc, requires mix - Makefile: No need to use `escript` to run rebar|rebar3|mix - configure: If `--with-rebar=rebar3` but rebar3 not system-installed, use local one - configure: Use Mix or Rebar3 by default instead of Rebar2 to compile ejabberd - ejabberdctl: Detect problem running iex or etop and show explanation - Rebar3: Include Elixir files when making a release - Rebar3: Workaround to fix protocol consolidation - Rebar3: Add support to compile Elixir dependencies - Rebar3: Compile explicitly our Elixir files when `--enable-elixir` - Rebar3: Provide proper path to `iex` - Rebar/Rebar3: Update binaries to work with Erlang/OTP 24-27 - Rebar/Rebar3: Remove Elixir as a rebar dependency - Rebar3/Mix: If `dev` profile/environment, enable tools automatically - Elixir: Fix compiling ejabberd as a dependency ([#4128](https://github.com/processone/ejabberd/issues/4128)) - Elixir: Fix ejabberdctl start/live when installed - Elixir: Fix: `FORMATTER ERROR: bad return value` ([#4087](https://github.com/processone/ejabberd/issues/4087)) - Elixir: Fix: Couldn't find file `Elixir Hex API` - Mix: Enable stun by default when `vars.config` not found - Mix: New option `vars_config_path` to set path to `vars.config` ([#4128](https://github.com/processone/ejabberd/issues/4128)) - Mix: Fix ejabberdctl iexlive problem locating iex in an OTP release ## Version 23.10 #### Compilation: - Erlang/OTP: Raise the requirement to Erlang/OTP 20.0 as a minimum - CI: Update tests to Erlang/OTP 26 and recent Elixir - Move Xref and Dialyzer options from workflows to `rebar.config` - Add sections to `rebar.config` to organize its content - Dialyzer dirty workarounds because `re:mp()` is not an exported type - When installing module already configured, keep config as example - Elixir 1.15 removed support for `--app` - Elixir: Improve support to stop external modules written in Elixir - Elixir: Update syntax of function calls as recommended by Elixir compiler - Elixir: When building OTP release with mix, keep `ERLANG_NODE=ejabberd@localhost` - `ejabberdctl`: Pass `ERLANG_OPTS` when calling `erl` to parse the `INET_DIST_INTERFACE` ([#4066](https://github.com/processone/ejabberd/issues/#4066) #### Commands: - `create_room_with_opts`: Fix typo and move examples to `args_example` ([#4080](https://github.com/processone/ejabberd/issues/#4080)) - `etop`: Let `ejabberdctl etop` work in a release (if `observer` application is available) - `get_roster`: Command now returns groups in a list instead of newlines ([#4088](https://github.com/processone/ejabberd/issues/#4088)) - `halt`: New command to halt ejabberd abruptly with an error status code - `ejabberdctl`: Fix calling ejabberdctl command with wrong number of arguments with Erlang 26 - `ejabberdctl`: Improve printing lists in results - `ejabberdctl`: Support `policy=user` in the help and return proper arguments - `ejabberdctl`: Document how to stop a debug shell: control+g #### Container: - Dockerfile: Add missing dependency for mssql databases - Dockerfile: Reorder stages and steps for consistency - Dockerfile: Use Alpine as base for `METHOD=package` - Dockerfile: Rename packages to improve compatibility - Dockerfile: Provide specific OTP and elixir vsn for direct compilation - Halt ejabberd if a command in `CTL_ON_` fails during ejabberd startup #### Core: - `auth_external_user_exists_check`: New option ([#3377](https://github.com/processone/ejabberd/issues/#3377)) - `gen_mod`: Extend `gen_mod` API to simplify hooks and IQ handlers registration - `gen_mod`: Add shorter forms for `gen_mod` hook/`iq_handler` API - `gen_mod`: Update modules to the new `gen_mod` API - `install_contrib_modules`: New option to define contrib modules to install automatically - `unix_socket`: New listener option, useful when setting unix socket files ([#4059](https://github.com/processone/ejabberd/issues/#4059)) - `ejabberd_systemd`: Add a few debug messages - `ejabberd_systemd`: Avoid using `gen_server` timeout ([#4054](https://github.com/processone/ejabberd/issues/#4054))([#4058](https://github.com/processone/ejabberd/issues/#4058)) - `ejabberd_listener`: Increase default listen queue backlog value to 128, which is the default value on both Linux and FreeBSD ([#4025](https://github.com/processone/ejabberd/issues/#4025)) - OAuth: Handle `badpass` error message - When sending message on behalf of user, trigger `user_send_packet` ([#3990](https://github.com/processone/ejabberd/issues/#3990)) - Web Admin: In roster page move the `AddJID` textbox to top ([#4067](https://github.com/processone/ejabberd/issues/#4067)) - Web Admin: Show a warning when visiting webadmin with non-privileged account ([#4089](https://github.com/processone/ejabberd/issues/#4089)) #### Docs: - Example configuration: clarify 5223 tls options; specify s2s shaper - Make sure that `policy=user` commands have `host` instead of `server` arg in docs - Improve syntax of many command descriptions for the Docs site - Move example Perl extauth script from ejabberd git to Docs site - Remove obsolete example files, and add link in Docs to the archived copies #### Installers (`make-binaries`): - Bump Erlang/OTP version to 26.1.1, and other dependencies - Remove outdated workaround - Don't build Linux-PAM examples - Fix check for current Expat version - Apply minor simplifications - Don't duplicate config entries - Don't hard-code musl version - Omit unnecessary glibc setting - Set kernel version for all builds - Let curl fail on HTTP errors #### Modules: - `mod_muc_log`: Add trailing backslash to URLs shown in disco info - `mod_muc_occupantid`: New module with support for XEP-0421 Occupant Id ([#3397](https://github.com/processone/ejabberd/issues/#3397)) - `mod_muc_rtbl`: Better error handling in ([#4050](https://github.com/processone/ejabberd/issues/#4050)) - `mod_private`: Add support for XEP-0402 PEP Native Bookmarks - `mod_privilege`: Don't fail to edit roster ([#3942](https://github.com/processone/ejabberd/issues/#3942)) - `mod_pubsub`: Fix usage of `plugins` option, which produced `default_node_config` ignore ([#4070](https://github.com/processone/ejabberd/issues/#4070)) - `mod_pubsub`: Add `pubsub_delete_item` hook - `mod_pubsub`: Report support of `config-node-max` in pep - `mod_pubsub`: Relay pubsub iq queries to muc members without using bare jid ([#4093](https://github.com/processone/ejabberd/issues/#4093)) - `mod_pubsub`: Allow pubsub node owner to overwrite items published by other persons - `mod_push_keepalive`: Delay `wake_on_start` - `mod_push_keepalive`: Don't let hook crash - `mod_push`: Add `notify_on` option - `mod_push`: Set `last-message-sender` to bare JID - `mod_register_web`: Make redirect to page that end with `/` ([#3177](https://github.com/processone/ejabberd/issues/#3177)) - `mod_shared_roster_ldap`: Don't crash in `get_member_jid` on empty output ([#3614](https://github.com/processone/ejabberd/issues/#3614)) #### MUC: - Add support to register nick in a room ([#3455](https://github.com/processone/ejabberd/issues/#3455)) - Convert `allow_private_message` MUC room option to `allowpm` ([#3736](https://github.com/processone/ejabberd/issues/#3736)) - Update xmpp version to send `roomconfig_changesubject` in disco#info ([#4085](https://github.com/processone/ejabberd/issues/#4085)) - Fix crash when loading room from DB older than ffa07c6, 23.04 - Fix support to retract a MUC room message - Don't always store messages passed through `muc_filter_message` ([#4083](https://github.com/processone/ejabberd/issues/#4083)) - Pass also MUC room retract messages over the `muc_filter_message` ([#3397](https://github.com/processone/ejabberd/issues/#3397)) - Pass MUC room private messages over the `muc_filter_message` too ([#3397](https://github.com/processone/ejabberd/issues/#3397)) - Store the subject author JID, and run `muc_filter_message` when sending subject ([#3397](https://github.com/processone/ejabberd/issues/#3397)) - Remove existing role information for users that are kicked from room ([#4035](https://github.com/processone/ejabberd/issues/#4035)) - Expand rule "mucsub subscribers are members in members only rooms" to more places #### SQL: - Add ability to force alternative upsert implementation in mysql - Properly parse mysql version even if it doesn't have type tag - Use prepared statement with mysql - Add alternate version of mysql upsert - `ejabberd_auth_sql`: Reset scram fields when setting plain password - `mod_privacy_sql`: Fix return values from `calculate_diff` - `mod_privacy_sql`: Optimize `set_list` - `mod_privacy_sql`: Use more efficient way to calculate changes in `set_privacy_list` ## Version 23.04 #### General: - New `s2s_out_bounce_packet` hook - Re-allow anonymous connection for connection without client certificates ([#3985](https://github.com/processone/ejabberd/issues/3985)) - Stop `ejabberd_system_monitor` before stopping node - `captcha_url` option now accepts `auto` value, and it's the default - `mod_mam`: Add support for XEP-0425: Message Moderation - `mod_mam_sql`: Fix problem with results of mam queries using rsm with max and before - `mod_muc_rtbl`: New module for Real-Time Block List for MUC rooms ([#4017](https://github.com/processone/ejabberd/issues/4017)) - `mod_roster`: Set roster name from XEP-0172, or the stored one ([#1611](https://github.com/processone/ejabberd/issues/1611)) - `mod_roster`: Preliminary support to store extra elements in subscription request ([#840](https://github.com/processone/ejabberd/issues/840)) - `mod_pubsub`: Pubsub xdata fields `max_item/item_expira/children_max` use `max` not `infinity` - `mod_vcard_xupdate`: Invalidate `vcard_xupdate` cache on all nodes when vcard is updated #### Admin: - `ext_mod`: Improve support for loading `*.so` files from `ext_mod` dependencies - Improve output in `gen_html_doc_for_commands` command - Fix ejabberdctl output formatting ([#3979](https://github.com/processone/ejabberd/issues/3979)) - Log HTTP handler exceptions #### MUC: - New command `get_room_history` - Persist `none` role for outcasts - Try to populate room history from mam when unhibernating - Make `mod_muc_room:set_opts` process persistent flag first - Allow passing affiliations and subscribers to `create_room_with_opts` command - Store state in db in `mod_muc:create_room()` - Make subscribers members by default #### SQL schemas: - Fix a long standing bug in new schema migration - `update_sql` command: Many improvements in new schema migration - `update_sql` command: Add support to migrate MySQL too - Change PostgreSQL SERIAL to BIGSERIAL columns - Fix minor SQL schema inconsistencies - Remove unnecessary indexes - New SQL schema migrate fix #### MS SQL: - MS SQL schema fixes - Add `new` schema for MS SQL - Add MS SQL support for new schema migration - Minor MS SQL improvements - Fix MS SQL error caused by `ORDER BY` in subquery #### SQL Tests: - Add support for running tests on MS SQL - Add ability to run tests on upgraded DB - Un-deprecate `ejabberd_config:set_option/2` - Use python3 to run `extauth.py` for tests - Correct README for creating test docker MS SQL DB - Fix TSQLlint warnings in MSSQL test script #### Testing: - Fix Shellcheck warnings in shell scripts - Fix Remark-lint warnings - Fix Prospector and Pylint warnings in test `extauth.py` - Stop testing ejabberd with Erlang/OTP 19.3, as Github Actions no longer supports ubuntu-18.04 - Test only with oldest OTP supported (20.0), newest stable (25.3) and bleeding edge (26.0-rc2) - Upload Common Test logs as artifact in case of failure #### `ecs` container image: - Update Alpine to 3.17 to get Erlang/OTP 25 and Elixir 1.14 - Add `tini` as runtime init - Set `ERLANG_NODE` fixed to `ejabberd@localhost` - Upload images as artifacts to Github Actions - Publish tag images automatically to ghcr.io #### `ejabberd` container image: - Update Alpine to 3.17 to get Erlang/OTP 25 and Elixir 1.14 - Add `METHOD` to build container using packages ([#3983](https://github.com/processone/ejabberd/issues/3983)) - Add `tini` as runtime init - Detect runtime dependencies automatically - Remove unused Mix stuff: ejabberd script and static COOKIE - Copy captcha scripts to `/opt/ejabberd-*/lib` like the installers - Expose only `HOME` volume, it contains all the required subdirs - ejabberdctl: Don't use `.../releases/COOKIE`, it's no longer included #### Installers: - make-binaries: Bump versions, e.g. erlang/otp to 25.3 - make-binaries: Fix building with erlang/otp v25.x - make-packages: Fix for installers workflow, which didn't find lynx ## Version 23.01 #### General: - Add `misc:uri_parse/2` to allow declaring default ports for protocols - CAPTCHA: Add support to define module instead of path to script - Clustering: Handle `mnesia_system_event mnesia_up` when other node joins this ([#3842](https://github.com/processone/ejabberd/issues/3842)) - ConverseJS: Don't set i18n option because Converse enforces it instead of browser lang ([#3951](https://github.com/processone/ejabberd/issues/3951)) - ConverseJS: Try to redirect access to files `mod_conversejs` to CDN when there is no local copies - ext_mod: compile C files and install them in ejabberd's `priv` - ext_mod: Support to get module status from Elixir modules - make-binaries: reduce log output - make-binaries: Bump zlib version to 1.2.13 - MUC: Don't store mucsub presence events in offline storage - MUC: `hibernation_time` is not an option worth storing in room state ([#3946](https://github.com/processone/ejabberd/issues/3946)) - Multicast: Jid format when `multicastc` was cached ([#3950](https://github.com/processone/ejabberd/issues/3950)) - mysql: Pass `ssl` options to mysql driver - pgsql: Do not set `standard_conforming_strings` to `off` ([#3944](https://github.com/processone/ejabberd/issues/3944)) - OAuth: Accept `jid` as a HTTP URL query argument - OAuth: Handle when client is not identified - PubSub: Expose the `pubsub#type` field in `disco#info` query to the node ([#3914](https://github.com/processone/ejabberd/issues/3914)) - Translations: Update German translation #### Admin: - `api_permissions`: Fix option crash when doesn't have `who:` section - `log_modules_fully`: New option to list modules that will log everything - `outgoing_s2s_families`: Changed option's default to IPv6, and fall back to IPv4 - Fix bash completion when using Relive or other install methods - Fix portability issue with some shells ([#3970](https://github.com/processone/ejabberd/issues/3970)) - Allow admin command to subscribe new users to `members_only` rooms - Use alternative `split/2` function that works with Erlang/OTP as old as 19.3 - Silent warning in OTP24 about not specified `cacerts` in SQL connections - Fix compilation warnings with Elixir 1.14 #### DOAP: - Support extended `-protocol` erlang attribute - Add extended RFCs and XEP details to some protocol attributes - `tools/generate-doap.sh`: New script to generate DOAP file, add `make doap` ([#3915](https://github.com/processone/ejabberd/issues/3915)) - `ejabberd.doap`: New DOAP file describing ejabberd supported protocols #### MQTT: - Add MQTT bridge module - Add support for certificate authentication in MQTT bridge - Implement reload in MQTT bridge - Add support for websockets to MQTT bridge - Recognize ws5/wss5 urls in MQTT bridge - `mqtt_publish`: New hook for MQTT publish event - `mqtt_(un)subscribe`: New hooks for MQTT subscribe & unsubscribe events #### VSCode: - Improve `.devcontainer` to use use devcontainer image and `.vscode` - Add `.vscode` files to instruct VSCode how to run ejabberd - Add Erlang LS default configuration - Add Elvis default configuration ## Version 22.10 #### Core: - Add `log_burst_limit_*` options ([#3865](https://github.com/processone/ejabberd/issues/3865)) - Support `ERL_DIST_PORT` option to work without epmd - Auth JWT: Catch all errors from `jose_jwt:verify` and log debugging details ([#3890](https://github.com/processone/ejabberd/issues/3890)) - CAPTCHA: Support `@VERSION@` and `@SEMVER@` in `captcha_cmd` option ([#3835](https://github.com/processone/ejabberd/issues/3835)) - HTTP: Fix unix socket support ([#3894](https://github.com/processone/ejabberd/issues/3894)) - HTTP: Handle invalid values in `X-Forwarded-For` header more gracefuly - Listeners: Let module take over socket - Listeners: Don't register listeners that failed to start in config reload - `mod_admin_extra`: Handle empty roster group names - `mod_conversejs`: Fix crash when mod_register not enabled ([#3824](https://github.com/processone/ejabberd/issues/3824)) - `mod_host_meta`: Complain at start if listener is not encrypted - `mod_ping`: Fix regression on `stop_ping` in clustering context ([#3817](https://github.com/processone/ejabberd/issues/3817)) - `mod_pubsub`: Don't crash on command failures - `mod_shared_roster`: Fix cache invalidation - `mod_shared_roster_ldap`: Update roster_get hook to use `#roster_item{}` - `prosody2ejabberd`: Fix parsing of scram password from prosody #### MIX: - Fix MIX's filter_nodes - Return user jid on join - `mod_mix_pam`: Add new MIX namespaces to disco features - `mod_mix_pam`: Add handling of IQs with newer MIX namespaces - `mod_mix_pam`: Do roster pushes on join/leave - `mod_mix_pam`: Parse sub elements of the mix join remote result - `mod_mix_pam`: Provide MIX channels as roster entries via hook - `mod_mix_pam`: Display joined channels on webadmin page - `mod_mix_pam`: Adapt to renaming of `participant-id` from mix_roster_channel record - `mod_roster`: Change hook type from `#roster{}` to `#roster_item{}` - `mod_roster`: Respect MIX `` setting - `mod_roster`: Adapt to change of mix_annotate type to boolean in roster_query - `mod_shared_roster`: Fix wrong hook type `#roster{}` (now `#roster_item{}`) #### MUC: - Store role, and use it when joining a moderated room ([#3330](https://github.com/processone/ejabberd/issues/3330)) - Don't persist `none` role ([#3330](https://github.com/processone/ejabberd/issues/3330)) - Allow MUC service admins to bypass max_user_conferences limitation - Show allow_query_users room option in disco info ([#3830](https://github.com/processone/ejabberd/issues/3830)) - mod_muc_room: Don't set affiliation to `none` if it's already `none` in `process_item_change/3` - Fix mucsub unsubscribe notification payload to have muc_unsubcribe in it - Allow muc_{un}subscribe hooks to modify sent packets - Pass room state to muc_{un}subscribed hook - The archive_msg export fun requires MUC Service for room archives - Export `mod_muc_admin:get_room_pid/2` - Export function for getting room diagnostics #### SQL: - Handle errors reported from begin/commit inside transaction - Make connection close errors bubble up from inside sql transaction - Make first sql reconnect wait shorter time - React to sql driver process exit earlier - Skip connection exit message when we triggered reconnection - Add syntax_tools to applications, required when using ejabberd_sql_pt ([#3869](https://github.com/processone/ejabberd/issues/3869)) - Fix mam delete_old_messages_batch for sql backend - Use `INSERT ... ON DUPLICATE KEY UPDATE` for upsert on mysql - Update mysql library - Catch mysql connection being close earlier #### Build: - `make all`: Generate start scripts here, not in `make install` ([#3821](https://github.com/processone/ejabberd/issues/3821)) - `make clean`: Improve this and "distclean" - `make deps`: Ensure deps configuration is ran when getting deps ([#3823](https://github.com/processone/ejabberd/issues/3823)) - `make help`: Update with recent changes - `make install`: Don't leak DESTDIR in files copied by 'make install' - `make options`: Fix error reporting on OTP24+ - `make update`: configure also in this case, similarly to `make deps` - Add definition to detect OTP older than 25, used by ejabberd_auth_http - Configure eimp with mix to detect image convert properly ([#3823](https://github.com/processone/ejabberd/issues/3823)) - Remove unused macro definitions detected by rebar3_hank - Remove unused header files which content is already in xmpp library #### Container: - Get ejabberd-contrib sources to include them - Copy `.ejabberd-modules` directory if available - Do not clone repo inside container build - Use `make deps`, which performs additional steps ([#3823](https://github.com/processone/ejabberd/issues/3823)) - Support `ERL_DIST_PORT` option to work without epmd - Copy `ejabberd-docker-install.bat` from docker-ejabberd git and rename it - Set a less frequent healthcheck to reduce CPU usage ([#3826](https://github.com/processone/ejabberd/issues/3826)) - Fix build instructions, add more podman examples #### Installers: - make-binaries: Include CAPTCHA script with release - make-binaries: Edit rebar.config more carefully - make-binaries: Fix linking of EIMP dependencies - make-binaries: Fix GitHub release version checks - make-binaries: Adjust Mnesia spool directory path - make-binaries: Bump Erlang/OTP version to 24.3.4.5 - make-binaries: Bump Expat and libpng versions - make-packages: Include systemd unit with RPM - make-packages: Fix permissions on RPM systems - make-installers: Support non-root installation - make-installers: Override code on upgrade - make-installers: Apply cosmetic changes #### External modules: - ext_mod: Support managing remote nodes in the cluster - ext_mod: Handle correctly when COMMIT.json not found - Don't bother with COMMIT.json user-friendly feature in automated user case - Handle not found COMMIT.json, for example in GH Actions - Add WebAdmin page for managing external modules #### Workflows Actions: - Update workflows to Erlang 25 - Update workflows: Ubuntu 18 is deprecated and 22 is added - CI: Remove syntax_tools from applications, as fast_xml fails Dialyzer - Runtime: Add Xref options to be as strict as CI ## Version 22.05 #### Core - C2S: Don't expect that socket will be available in `c2s_terminated` hook - Event handling process hook tracing - Guard against `erlang:system_info(logical_processors)` not always returning a number - `domain_balancing`: Allow for specifying `type` only, without specifying `component_number` #### MQTT - Add TLS certificate authentication for MQTT connections - Fix login when generating client id, keep connection record (#3593) - Pass property name as expected in mqtt_codec (fixes login using MQTT 5) - Support MQTT subscriptions spread over the cluster (#3750) #### MUC - Attach meta field with real jid to mucsub subscription events - Handle user removal - Stop empty MUC rooms 30 seconds after creation - `default_room_options`: Update options configurable - `subscribe_room_many_max_users`: New option in `mod_muc_admin` #### mod_conversejs - Improved options to support `@HOST@` and `auto` values - Set `auth` and `register` options based on ejabberd configuration - `conversejs_options`: New option - `conversejs_resources`: New option #### PubSub - `mod_pubsub`: Allow for limiting `item_expire` value - `mod_pubsub`: Unsubscribe JID on whitelist removal - `node_pep`: Add config-node and multi-items features (#3714) #### SQL - Improve compatibility with various db engine versions - Sync old-to-new schema script with reality (#3790) - Slight improvement in MSSQL testing support, but not yet complete #### Other Modules - `auth_jwt`: Checking if an user is active in SM for a JWT authenticated user (#3795) - `mod_configure`: Implement Get List of Registered/Online Users from XEP-0133 - `mod_host_meta`: New module to serve host-meta files, see XEP-0156 - `mod_mam`: Store all mucsub notifications not only message notifications - `mod_ping`: Delete ping timer if resource is gone after the ping has been sent - `mod_ping`: Don't send ping if resource is gone - `mod_push`: Fix notifications for pending sessions (XEP-0198) - `mod_push`: Keep push session ID on session resume - `mod_shared_roster`: Adjust special group cache size - `mod_shared_roster`: Normalize JID on unset_presence (#3752) - `mod_stun_disco`: Fix parsing of IPv6 listeners #### Dependencies - autoconf: Supported from 2.59 to the new 2.71 - fast_tls: Update to 1.1.14 to support OpenSSL 3 - jiffy: Update to 1.1.1 to support Erlang/OTP 25.0-rc1 - luerl: Update to 1.0.0, now available in hex.pm - lager: This dependency is used only when Erlang is older than 22 - rebar2: Updated binary to work from Erlang/OTP 22 to 25 - rebar3: Updated binary to work from Erlang/OTP 22 to 25 - `make update`: Fix when used with rebar 3.18 #### Compile - `mix release`: Copy `include/` files for ejabberd, deps and otp, in `mix.exs` - `rebar3 release`: Fix ERTS path in `ejabberdctl` - `configure.ac`: Set default ejabberd version number when not using git - `mix.exs`: Move some dependencies as optional - `mix.exs`: No need to use Distillery, Elixir has built-in support for OTP releases (#3788) - `tools/make-binaries`: New script for building Linux binaries - `tools/make-installers`: New script for building command line installers #### Start - New `make relive` similar to `ejabberdctl live` without installing - `ejabberdctl`: Fix some warnings detected by ShellCheck - `ejabberdctl`: Mention in the help: `etop`, `ping` and `started`/`stopped` - `make rel`: Switch to paths: `conf/`, `database/`, `logs/` - `mix.exs`: Add `-boot` and `-boot_var` in `ejabberdctl` instead of adding `vm.args` - `tools/captcha.sh`: Fix some warnings detected by ShellCheck #### Commands - Accept more types of ejabberdctl commands arguments as JSON-encoded - `delete_old_mam_messages_batch`: New command with rate limit - `delete_old_messages_batch`: New command with rate limit - `get_room_occupants_number`: Don't request the whole MUC room state (#3684, #1964) - `get_vcard`: Add support for MUC room vCard - `oauth_revoke_token`: Add support to work with all backends - `room_unused_*`: Optimize commands in SQL by reusing `created_at` - `rooms_unused_...`: Let `get_all_rooms` handle `global` argument (#3726) - `stop|restart`: Terminate ejabberd_sm before everything else to ensure sessions closing (#3641) - `subscribe_room_many`: New command #### Translations - Updated Catalan - Updated French - Updated German - Updated Portuguese - Updated Portuguese (Brazil) - Updated Spanish #### Workflows - CI: Publish CT logs and Cover on failure to an external GH Pages repo - CI: Test shell scripts using ShellCheck (#3738) - Container: New workflow to build and publish containers - Installers: Add job to create draft release - Installers: New workflow to build binary packages - Runtime: New workflow to test compilation, rel, starting and ejabberdctl ## Version 21.12 #### Commands - `create_room_with_opts`: Fixed when using SQL storage - `change_room_option`: Add missing fields from config inside `mod_muc_admin:change_options` - piefxis: Fixed arguments of all commands #### Modules - mod_caps: Don't forget caps on XEP-0198 resumption - mod_conversejs: New module to serve a simple page for Converse.js - mod_http_upload_quota: Avoid `max_days` race - mod_muc: Support MUC hats (XEP-0317, conversejs/prosody compatible) - mod_muc: Optimize MucSub processing - mod_muc: Fix exception in mucsub {un}subscription events multicast handler - mod_multicast: Improve and optimize multicast routing code - mod_offline: Allow storing non-composing x:events in offline - mod_ping: Send ping from server, not bare user JID - mod_push: Fix handling of MUC/Sub messages - mod_register: New allow_modules option to restrict registration modules - mod_register_web: Handle unknown host gracefully - mod_register_web: Use mod_register configured restrictions #### PubSub - Add `delete_expired_pubsub_items` command - Add `delete_old_pubsub_items` command - Optimize publishing on large nodes (SQL) - Support unlimited number of items - Support `max_items=max` node configuration - Bump default value for `max_items` limit from 10 to 1000 - Use configured `max_items` by default - node_flat: Avoid catch-all clauses for RSM - node_flat_sql: Avoid catch-all clauses for RSM #### SQL - Use `INSERT ... ON CONFLICT` in SQL_UPSERT for PostgreSQL >= 9.5 - mod_mam export: assign MUC entries to the MUC service - MySQL: Fix typo when creating index - PgSQL: Add SASL auth support, PostgreSQL 14 - PgSQL: Add missing SQL migration for table `push_session` - PgSQL: Fix `vcard_search` definition in pgsql new schema #### Other - `captcha-ng.sh`: "sort -R" command not POSIX, added "shuf" and "cat" as fallback - Make s2s connection table cleanup more robust - Update export/import of scram password to XEP-0227 1.1 - Update Jose to 1.11.1 (the last in hex.pm correctly versioned) ## Version 21.07 #### Compilation - Add rebar3 3.15.2 binary - Add support for mix to: `./configure --enable-rebar=mix` - Improved `make rel` to work with rebar3 and mix - Add `make dev` to build a development release with rebar3 or mix - Hex: Add `sql/` and `vars.config` to Hex package files - Hex: Update mix applications list to fix error `p1_utils is listed as both...` - There are so many targets in Makefile... add `make help` - Fix extauth.py failure in test suite with Python 3 - Added experimental support for GitHub Codespaces - Switch test service from TravisCI to GitHub Actions #### Commands: - Display extended error message in ejabberdctl - Remove SMP option from ejabberdctl.cfg, `-smp` was removed in OTP 21 - `create_room`: After creating room, store in DB if it's persistent - `help`: Major changes in its usage and output - `srg_create`: Update to use `label` parameter instead of `name` #### Modules: - ejabberd_listener: New `send_timeout` option - mod_mix: Improvements to update to 0.14.1 - mod_muc_room: Don't leak owner JIDs - mod_multicast: Routing for more MUC packets - mod_multicast: Correctly strip only other bcc addresses - mod_mqtt: Allow shared roster group placeholder in mqtt topic - mod_pubsub: Several fixes when using PubSub with RSM - mod_push: Handle MUC/Sub events correctly - mod_shared_roster: Delete cache after performing change to be sure that in cache will be up to date data - mod_shared_roster: Improve database and caching - mod_shared_roster: Reconfigure cache when options change - mod_vcard: Fix invalid_encoding error when using extended plane characters in vcard - mod_vcard: Update econf:vcard() to generate correct vcard_temp record - WebAdmin: New simple pages to view mnesia tables information and content - WebSocket: Fix typos #### SQL: - MySQL Backend Patch for scram-sha512 - SQLite: When exporting for SQLite, use its specific escape options - SQLite: Minor fixes for new_sql_schema support - mod_privacy: Cast as boolean when exporting privacy_list_data to PostgreSQL - mod_mqtt: Add mqtt_pub table definition for MSSQL - mod_shared_roster: Add missing indexes to `sr_group` tables in all SQL databases ## Version 21.04 #### API Commands: - `add_rosteritem/...`: Add argument guards to roster commands - `get_user_subscriptions`: New command for MUC/Sub - `remove_mam_for_user_with_peer`: Fix when removing room archive - `send_message`: Fix bug introduced in ejabberd 21.01 - `set_vcard`: Return modules errors #### Build and setup: - Allow ejabberd to be compatible as a dependency for an Erlang project using rebar3 - CAPTCHA: New question/answer-based CAPTCHA script - `--enable-lua`: new configure option for luerl instead of --enable-tools - Remove support for HiPE, it was experimental and Erlang/OTP 24 removes it - Update `sql_query` record to handle the Erlang/OTP 24 compiler reports - Updated dependencies to fix Dialyzer warnings #### Miscellaneous: - CAPTCHA: Update `FORM_TYPE` from captcha to register - LDAP: fix eldap certificate verification - MySQL: Fix for "specified key was too long" - Translations: updated the Esperanto, Greek, and Japanese translations - Websocket: Fix PONG responses #### Modules: - `mod_block_strangers`: If stanza is type error, allow it passing - `mod_caps`: Don't request roster when not needed - `mod_caps`: Skip reading roster in one more case - `mod_mam`: Remove `queryid` from MAM fin element - `mod_mqtt`: When deregistering XMPP account, close its MQTT sessions - `mod_muc`: Take in account subscriber's affiliation when checking access to moderated room - `mod_muc`: Use monitors to track online and hard-killed rooms - `mod_muc`: When occupant is banned, remove his subscriptions too - `mod_privacy`: Make fetching roster lazy - `mod_pubsub`: Don't fail on PEP unsubscribe - `mod_pubsub`: Fix `gen_pubsub_node:get_state` return value - `mod_vcard`: Obtain and provide photo type in vCard LDAP ## Version 21.01 #### Miscellaneous changes: - `log_rotate_size` option: Fix handling of ‘infinity’ value - `mod_time`: Fix invalid timezone - Auth JWT: New `check_decoded_jwt` hook runs the default JWT verifier - MUC: Allow non-occupant non-subscribed service admin send private MUC message - MUC: New `max_password` and `max_captcha_whitelist` options - OAuth: New `oauth_cache_rest_failure_life_time` option - PEP: Skip reading pep nodes that we know won’t be requested due to caps - SQL: Add sql script to migrate mysql from old schema to new - SQL: Don’t use REPLACE for upsert when there are “-” fields. - Shared Rosters LDAP: Add multi-domain support (and flexibility) - Sqlite3: Fix dependency version - Stun: Block loopback addresses by default - Several documentation fixes and clarifications #### Commands: - `decide_room`: Use better fallback value for room activity time when skipping room - `delete_old_message`: Fix when using sqlite spool table - `module_install`: Make ext_mod compile module with debug_info flags - `room_unused_*`: Don’t fetch subscribers list - `send_message`: Don’t include empty in messages - `set_room_affiliation`: Validate affiliations #### Running: - Docker: New `Dockerfile` and `devcontainer.json` - New `ejabberdctl foreground-quiet` - Systemd: Allow for listening on privileged ports - Systemd: Integrate nicely with systemd #### Translations: - Moved gettext PO files to a new `ejabberd-po` repository - Improved several translations: Catalan, Chinese, German, Greek, Indonesian, Norwegian, Portuguese (Brazil), Spanish. ## Version 20.12 - Add support for `SCRAM-SHA-{256,512}-{PLUS}` authentication - Don't use same value in cache for user don't exist and wrong password - `outgoing_s2s_ipv*_address`: New options to set ipv4/ipv6 outbound s2s out interface - s2s_send_packet: this hook now filters outgoing s2s stanzas - start_room: new hook runs when a room process is started - check_decoded_jwt: new hook to check decoded JWT after success authentication #### Admin - Docker: Fix DB initialization - New sql_odbc_driver option: choose the mssql ODBC driver - Rebar3: Fully supported. Enable with `./configure --with-rebar=/path/to/rebar3` - systemd: start ejabberd in foreground #### Modules: - MAM: Make sure that jid used as base in mam xml_compress is bare - MAM: Support for MAM Flipped Pages - MUC: Always show MucSub subscribers nicks - MUC: Don't forget not-persistent rooms in load_permanent_rooms - MUC Admin: Better error reporting - MUC Admin: Fix commands with hibernated rooms - MUC Admin: Many improvements in rooms_unused_list/destroy - MUC Admin: create_room_with_opts Store options only if room starts - Pubsub: Remove 'dag' node plugin documentation - Push: Fix API call return type on error - Push: Support cache config changes on reload - Register: Allow for account-removal-only setup again - Roster: Make roster subscriptions work better with invalid roster state in db - Vcard: Fix vCard search by User when using Mnesia - WebAdmin: Allow vhost admins to view WebAdmin menus - WebAdmin: Don't do double utf-8 conversion on translated strings - WebAdmin: Mark dangerous buttons with CSS - WebSocket: Make websocket send put back pressure on c2s process ## Version 20.07 #### Changes in this version - Add support for using unix sockets in listeners. - Make this version compatible with erlang R23 - Make room permissions checks more strict for subscribers - Fix problem with muc rooms crashing when using muc logger with some locales - Limit stat calls that logger module issues - Don't throw errors when using user_regexp acl rule and having non-matching host - Fix problem with leaving old data when updating shared rosters - Fix edge case that caused failure of resuming old sessions with stream management. - Fix crash when room that was started with logging enabled was later changed to logging disabled - Increase default shaper limits (this should help with delays for clients that are using jingle) - Fix couple compatibility problems which prevented working on erlang R19 - Fix sending presence unavailable when session terminates for clients that only send directed presences (helps with sometimes not leaving muc rooms on disconnect). - Prevent supervisor errors for sockets that were closed before they were passed to handler modules - Make stun module work better with ipv6 addresses ## Version 20.03 #### Changes in this version - Add support of ssl connection when connection to mysql database (configured with `sql_ssl: true` option) - Experimental support for cockroachdb when configured with postgres connector - Add cache and optimize queries issued by `mod_shared_roster`, this should greatly improve performance of this module when used with `sql` backend - Fix problem with accessing webadmin - Make webadmin work even when url is missing trailing slash - When compiling external modules with ext_mod, use flags that were detected during compilation of ejabberd - Make config changed to ldap options be updated when issued `reload_config` command - Fix `room_empty_destory` command - Fix reporting errors in `send_stanza` command when xml passed to it couldn't be passed correctly ## Version 20.02 #### Changes in this version - Fix problems when trying to use string format with unicode values directly in xmpp nodes - Add missing oauth_client table declaration in lite.new.sql - Improve compatibility with CocroachDB - Fix importing of piefxis files that did use scram passwords - Fix importing of piefxis files that had multiple includes in them - Update jiffy dependency - Allow storage of emojis when using mssql database (Thanks to Christoph Scholz) - Make ejabberd_auth_http be able to use auth_opts - Make custom_headers options in http modules correctly override built-in values - Fix return value of reload_config and dump_config commands ## Version 20.01 #### New features - Implement OAUTH authentication in mqtt - Make logging infrastructure use new logger introduced in Erlang (requires OTP22) - New configuration parser/validator - Initial work on being able to use CockroachDB as database backend - Add gc command - Add option to disable using prepared statements on Postgresql - Implement routine for converting password to SCRAM format for all backends not only SQL - Add infrastructure for having module documentation directly in individual module source code - Generate man page automatically - Implement copy feature in mod_carboncopy #### Fixes - Make webadmin work with configurable paths - Fix handling of result in xmlrpc module - Make webadmin work even when accessed through not declared domain - Better error reporting in xmlrpc - Limit amount of results returned by disco queries to pubsub nodes - Improve validation of configured JWT keys - Fix race condition in Redis/SQL startup - Fix loading order of third party modules - Fix reloading of ACL rules - Make account removal requests properly route response - Improve handling of malformed inputs in send_message command - Omit push notification if storing message in offline storage failed - Fix crash in stream management when timeout was not set ## Version 19.09 #### Admin - The minimum required Erlang/OTP version is now 19.3 - Fix API call using OAuth (#2982) - Rename MUC command arguments from Host to Service (#2976) #### Webadmin - Don't treat 'Host' header as a virtual XMPP host (#2989) - Fix some links to Guide in WebAdmin and add new ones (#3003) - Use select fields to input host in WebAdmin Backup (#3000) - Check account auth provided in WebAdmin is a local host (#3000) #### ACME - Improve ACME implementation - Fix IDA support in ACME requests - Fix unicode formatting in ACME module - Log an error message on IDNA failure - Support IDN hostnames in ACME requests - Don't attempt to create ACME directory on ejabberd startup - Don't allow requesting certificates for localhost or IP-like domains - Don't auto request certificate for localhost and IP-like domains - Add listener for ACME challenge in example config #### Authentication - JWT-only authentication for some users (#3012) #### MUC - Apply default role after revoking admin affiliation (#3023) - Custom exit message is not broadcast (#3004) - Revert "Affiliations other than admin and owner cannot invite to members_only rooms" (#2987) - When join new room with password, set pass and password_protected (#2668) - Improve rooms_* commands to accept 'global' as MUC service argument (#2976) - Rename MUC command arguments from Host to Service (#2976) #### SQL - Fix transactions for Microsoft SQL Server (#2978) - Spawn SQL connections on demand only #### Misc - Add support for XEP-0328: JID Prep - Added gsfonts for captcha - Log Mnesia table type on creation - Replicate Mnesia 'bosh' table when nodes are joined - Fix certificate selection for s2s (#3015) - Provide meaningful error when adding non-local users to shared roster (#3000) - Websocket: don't treat 'Host' header as a virtual XMPP host (#2989) - Fix sm ack related c2s error (#2984) - Don't hide the reason why c2s connection has failed - Unicode support - Correctly handle unicode in log messages - Fix unicode processing in ejabberd.yml ## Version 19.08 #### Administration - Improve ejabberd halting procedure - Process unexpected erlang messages uniformly: logging a warning - mod_configure: Remove modules management #### Configuration - Use new configuration validator - ejabberd_http: Use correct virtual host when consulting trusted_proxies - Fix Elixir modules detection in the configuration file - Make option 'validate_stream' global - Allow multiple definitions of host_config and append_host_config - Introduce option 'captcha_url' - mod_stream_mgmt: Allow flexible timeout format - mod_mqtt: Allow flexible timeout format in session_expiry option #### Misc - Fix SQL connections leakage - New authentication method using JWT tokens - extauth: Add 'certauth' command - Improve SQL pool logic - Add and improve type specs - Improve extraction of translated strings - Improve error handling/reporting when loading language translations - Improve hooks validator and fix bugs related to hooks registration - Gracefully close inbound s2s connections - mod_mqtt: Fix usage of TLS - mod_offline: Make count_offline_messages cache work when using mam for storage - mod_privacy: Don't attempt to query 'undefined' active list - mod_privacy: Fix race condition #### MUC - Add code for hibernating inactive muc_room processes - Improve handling of unexpected iq in mod_muc_room - Attach mod_muc_room processes to a supervisor - Restore room when receiving message or generic iq for not started room - Distribute routing of MUC messages across all CPU cores #### PubSub - Fix pending nodes retrieval for SQL backend - Check access_model when publishing PEP - Remove deprecated pubsub plugins - Expose access_model and publish_model in pubsub#metadata ## Version 19.05 #### Admin - The minimum required Erlang/OTP version is now 19.1 - Provide a suggestion when unknown command, module, option or request handler is detected - Deprecate some listening options: captcha, register, web_admin, http_bind and xmlrpc - Add commands to get Mnesia info: mnesia_info and mnesia_table_info - Fix Register command to respect mod_register's Access option - Fixes in Prosody import: privacy and rooms - Remove TLS options from the example config - Improve request_handlers validator - Fix syntax in example Elixir config file #### Auth - Correctly support cache tags in ejabberd_auth - Don't process failed EXTERNAL authentication by mod_fail2ban - Don't call to mod_register when it's not loaded - Make anonymous auth don't {de}register user when there are other resources #### Developer - Rename listening callback from start/2 to start/3 - New hook called when room gets destroyed: room_destroyed - New hooks for tracking mucsub subscriptions changes: muc_subscribed, muc_unsubscribed - Make static hooks analyzer working again #### MUC - Service admins are allowed to recreate room even if archive is nonempty - New option user_mucsub_from_muc_archive - Avoid late arrival of get_disco_item response - Handle get_subscribed_rooms call from mod_muc_room pid - Fix room state cleanup from db on change of persistent option change - Make get_subscribed_rooms work even for non-persistant rooms - Allow non-moderator subscribers to get list of room subscribers #### Offline - New option bounce_groupchat: make it not bounce mucsub/groupchat messages - New option use_mam_for_storage: fetch data from mam instead of spool table - When applying limit of max msgs in spool check only spool size - Do not store mucsub wrapped messages with no-store hint in offline storage - Always store ActivityMarker messages - Don't issue count/message fetch queries for offline from mam when not needed - Properly handle infinity as max number of message in mam offline storage - Sort messages by stanza_id when using mam storage in mod_offline - Return correct value from count_offline_messages with mam storage option - Make mod_offline put msg ignored by mam in spool when mam storage is on #### SQL: - Add SQL schemas for MQTT tables - Report better errors on SQL terms decode failure - Fix PostgreSQL compatibility in mod_offline_sql:remove_old_messages - Fix handling of list arguments on pgsql - Preliminary support for SQL in process_rosteritems command #### Tests - Add tests for user mucsub mam from muc mam - Add tests for offline with mam storage - Add tests for offline use_mam_for_storage - Initial Docker environment to run ejabberd test suite - Test offline:use_mam_for_storage, mam:user_mucsub_from_muc_archive used together #### Websocket - Add WebSockets support to mod_mqtt - Return "Bad request" error when origin in websocket connection doesn't match - Fix RFC6454 violation on websocket connection when validating Origin header - Origin header validation on websocket connection #### Other modules - mod_adhoc: Use xml:lang from stanza when it's missing in element - mod_announce: Add 'sessionid' attribute when required - mod_bosh: Don't put duplicate polling attribute in bosh payload - mod_http_api: Improve argument error messages and log messages - mod_http_upload: Feed whole image to eimp:identify/1 - mod_http_upload: Log nicer warning on unknown host - mod_http_upload: Case-insensitive host comparison - mod_mqtt: Support other socket modules - mod_push: Check for payload in encrypted messages ## Version 19.02 #### Admin - Fix in configure.ac the Erlang/OTP version: from 17.5 to 19.0 - reload_config command: Fix crash when sql_pool_size option is used - reload_config command: Fix crash when SQL is not configured - rooms_empty_destroy command: Several fixes to behave more conservative - Fix serverhost->host parameter name for muc_(un)register_nick API #### Configuration - Allow specifying tag for listener for api_permission purposes - Change default ciphers to intermediate - Define default ciphers/protocol_option in example config - Don't crash on malformed 'modules' section - mod_mam: New option clear_archive_on_room_destroy to prevent archive removal on room destroy - mod_mam: New option access_preferences to restrict who can modify the MAM preferences - mod_muc: New option access_mam to restrict who can modify that room option - mod_offline: New option store_groupchat to allow storing group chat messages #### Core - Add MQTT protocol support - Fix (un)setting of priority - Use OTP application startup infrastructure for starting dependencies - Improve starting order of several dependencies #### MAM - mod_mam_mnesia/sql: Improve check for empty archive - disallow room creation if archive not empty and clear_archive_on_room_destroy is false - allow check if archive is empty for or user or room - Additional checks for database failures #### MUC - Make sure that room_destroyed is called even when some code throws in terminate - Update muc room state after adding extra access field to it - MUC/Sub: Send mucsub subscriber notification events with from set to room jid #### Shared Roster - Don't perform roster push for non-local contacts - Handle versioning result when shared roster group has remote account - Fix SQL queries #### Miscelanea - CAPTCHA: Add no-store hint to CAPTCHA challenge stanzas - HTTP: Reject http_api request with malformed Authentication header - mod_carboncopy: Don't lose carbons on presence change or session resumption - mod_mix: Fix submission-id and channel resource - mod_ping: Fix ping IQ reply/timeout processing (17.x regression) - mod_private: Hardcode item ID for PEP bookmarks - mod_push: Improve notification error handling - PIEFXIS: Fix user export when password is scrammed - Prosody: Improve import of roster items, rooms and attributes - Translations: fixed "make translations" - WebAdmin: Fix support to restart module with new options ## Version 18.12 - MAM data store compression - Proxy protocol support - MUC Self-Ping optimization (XEP-0410) - Bookmarks conversion (XEP-0411)