Skip to content

v0.30.3

Release Date: 2026-11-02

SystemAuth's pages are styled:

  • A plain, modern look. The sign-in, sign-out, consent, sign-up, waitlist, age and email pages were unstyled HTML. They now link one stylesheet: a centered card on a soft background, in light and dark following the browser, with the sign-in options as full-width buttons, clear form fields, and notices in color.
  • Nothing loosened. The stylesheet is embedded in the binary and served at /assets/systemauth.css from the issuer's origin, which the pages' content security policy (default-src 'self') already allows: still no script and no inline style. The link carries the stylesheet's content hash, so browsers cache it until it changes.

It adds no breaking change.

Upgrade notes

  1. Pass /assets/ through any proxy in front of SystemAuth, as it passes the pages themselves.

The pages are not themed per application yet. See Security headers.