Docker Image Tag: 26.05.26

May 26th, 2026

Added: 

• User Registration Control
  • Administrators can now enable or disable new user registration with a single toggle.
  • When registration is disabled, no new users can sign up, which is ideal for access control in private deployment environments.
  • The setting is persistent and remains effective after service restarts.
• Two‑Factor Authentication (MFA) For Supernote Private Cloud Web Portal Only
  • Added support for TOTP‑based two‑factor authentication (compatible with mainstream authenticator apps such as Microsoft Authenticator).
  • When MFA is enabled, users must enter a 6‑digit dynamic verification code during login. No login credentials are issued without successful verification, preventing authentication bypass.
  • Recovery codes are supported for login when the authenticator is unavailable; recovery codes are stored encrypted for enhanced security.
  • Admin management options include: enable/disable MFA and regenerate recovery codes.

Optimized:

• Runtime Log Level Management
  • Log levels (ERROR / WARN / INFO) can now be adjusted online without restarting the service.
  • Changes take effect immediately for the current running instance.
  • Log levels revert to the default configuration after a service restart — ideal for temporary troubleshooting.
  • Business logs and framework logs (Spring, MyBatis, etc.) can be controlled separately to reduce noise during debugging.

Docker Image Tag: 26.02.23

March 6, 2026

Fixed:

• Fixed important security issues.

To ensure the security of your account and data, it's highly recommended that all users of our private cloud service upgrade to this version as soon as possible.

Docker Image Tag: 25.12.17

Dec 30, 2025

Added:

• Added support for auto sync over HTTPS in reverse proxy environments. For configuration instructions, please refer to the FAQ section in our private cloud setup manual. 

Optimized:

• Optimized the file path processing logic to ensure that notes are correctly saved into the directories specified in the system design specifications, even when email addresses contain special characters (such as "+").

Fixed: 

• Fixed the issue where note preview failed on the web client in certain deployment environments.