Misago 0.18 has been released!
This release adds much requested support for login with social site account, small interface improvements and bug fixes. It also lays groundwork for better support of real names in future, and reduces amount of personal data to make compliance with GDPR easier, at expense of making it little harder to detect spam in user profiles.
Updating instructions
To update Misago from 0.17 to 0.18 use PIP to uninstall old Misago and install new one:
pip uninstall misago
pip install misago
Now, open your forum's settings.py and find INSTALLED_APPS in it. Next, find this code:
# 3rd party apps used by Misago
'debug_toolbar',
'crispy_forms',
'mptt',
'rest_framework',
And add social_django below rest_framework, like this:
# 3rd party apps used by Misago
'debug_toolbar',
'crispy_forms',
'mptt',
'rest_framework',
'social_django',
Also add following code at the end of your settings.py:
SOCIAL_AUTH_PIPELINE = (
# Steps required by social pipeline to work - don't delete those!
'social_core.pipeline.social_auth.social_details',
'social_core.pipeline.social_auth.social_uid',
'social_core.pipeline.social_auth.social_user',
# Uncomment next line to let your users to associate their old forum account with social one.
# 'misago.users.social.pipeline.associate_by_email',
# Those steps make sure banned users may not join your site or use banned name or email.
'misago.users.social.pipeline.validate_ip_not_banned',
'misago.users.social.pipeline.validate_user_not_banned',
# Reads user data received from social site and tries to create valid and available username
# Required if you want automatic account creation to work. Otherwhise optional.
'misago.users.social.pipeline.get_username',
# Uncomment next line to enable automatic account creation if data from social site is valid
# and get_username found valid name for new user account:
# 'misago.users.social.pipeline.create_user',
# This step asks user to complete simple, pre filled registration form containing username,
# email, legal note if you remove it without adding custom one, users will have no fallback
# for joining your site using their social account.
'misago.users.social.pipeline.create_user_with_form',
# Steps finalizing social authentication flow - don't delete those!
'social_core.pipeline.social_auth.associate_user',
'misago.users.social.pipeline.require_activation',
)
SOCIAL_AUTH_POSTGRES_JSONFIELD = True
Misago 0.18 also renamed the "Full name" field to "Real name", if your settings.py contains following line:
'misago.users.profilefields.default.FullNameField',
You will have to change it to following to keep your forum working:
'misago.users.profilefields.default.RealNameField',
Next, open your urls.py and find following lines in it:
urlpatterns = [
url(r'^', include('misago.urls', namespace='misago')),
Now add url(r'^', include('social_django.urls', namespace='social')), below that code, so it looks like this:
urlpatterns = [
url(r'^', include('misago.urls', namespace='misago')),
url(r'^', include('social_django.urls', namespace='social')),
Run following commands to make sure your forum's database and static files are up to date with latest changes:
python manage.py migrate
python manage.py collectstatic
python manage.py deleteprofilefield fullname
You will also need to run regularly clear the database tables used to hold temporary data returned from social sites. To do this, add following task to your cron:
25 0 * * * python manage.py clearsocial
To learn how to enable social login for selected site on your Misago, see the guide in documentation.
New features
- Sign in or join using social authentication.
Theme changes
- Don't require user to vote/view votes to access poll edit/delete buttons.
Bugs fixed
- Posting action doesn't recognize and display attachments errors to the user.
- Don't prompt user for label if they didn't enter URL in previous prompt.
- Private Threads icon in header erroneously claims that user has unread messages.
Implementation and API changes
- Function signature for registration validators has changed to
request, cleaned_data={}, add_error=None, withadd_errorkwarg being an add_error bound method belonging to form or serializer requesting registration validation. - Make registration-only bans option behavior more intuitive. Previously bans with "registration only" option disabled were ignored during registration, username or email changes.
- Delete marked users management task will delete already-marked user accounts even if administrator disabled option for users to request account deletion with
MISAGO_ENABLE_DELETE_OWN_ACCOUNT = False.
Documentation changes
- Added guide for setting up social auth using GitHub as provider.
Localization changes
none