JumpServer Files

What’s new

• Upgraded Django to 5.2
• Upgraded Python to 3.14
• Upgraded Vue to 3.5
• Added support for custom Single Sign-On (SSO) authentication
• Added support for configuring how the real client IP address is obtained
• Added support for UKey authentication (JumpServer EE)
• Added support for custom favorite asset node trees
• Added support for preventing the export of sensitive information by setting "SECURITY_DISABLE_VIEW_SECRET=true"

Improvements

• Optimized Ansible task execution by running each task in an isolated container, with up to 10 concurrent tasks
• Integrated session recording playback and transcoding into the client
• Added rate limiting for file uploads and downloads, with a default limit of 50 requests per hour
• Encrypted user email addresses at rest
• Added support for configuring a separate password expiration policy for administrators
• Optimized the retrieval of attribute filter rule instances in ACL rule details to avoid excessively long request parameters
• Optimized historical command cleanup by deleting data in daily batches
• Added popup notifications for in-site messages
• Added support for customizing the available display languages
• Added support for querying assets by excluding specific asset types and categories
• Optimized the user login ACL matching logic by excluding ACL rules where the current user is assigned as an approval reviewer
• Optimized the API documentation by hiding view class comments
• Added support for uploading certificates for LDAP authentication services
• Added support for enabling RDP signing when connecting to RDP sessions through the client by setting "RDP_SIGN_ENABLED=1" (JumpServer EE)

Bug fixes

• Fixed an issue where multiple login logs were generated for a single user login
• Fixed an issue where default parameter values were not applied when executing user jobs
• Fixed an issue where integration application secrets were regenerated on every update
• Fixed an issue where Playbook permissions were not validated when cloning a Playbook
• Fixed security issues in domain-related automation tasks
• Fixed a security issue in the DBeaver remote application connection method
• Fixed security issues in account-related automation tasks
• Fixed an issue where certain Ansible Lookup plugins, such as "file", "pipe", and "env", were not properly disabled
• Fixed an issue where the “Remember Password” option was displayed incorrectly on the Luna page