Directus 10.12 introduces a set of enhancements for public user registration and a set of other enhancements, optimizations, and bug fixes. Check out the full release notes on GitHub.
Custom Verification URLs
You can now provide a custom verification URL when registering new users with email verification enabled in your project. Like with password resets and SSO, this means that your users never have to be exposed to Directus.
Add a verification_url parameter to your registration and ensure the URL is included in your environment variables, and the email that gets sent out will send users to your custom URL.
User Limits
This release also introduces new environment variables to limit the number of users in your project - admins, users with API access, and users who can access the Data Studio.
This gives you more control over how your project runs, especially when enabling public registration.
Fixing Expiring Sessions
In Directus 10.11 we included a small security fix, improving session token validation.
But, as things go in software sometimes, it caused other problems in the form of race conditions, sometimes receiving already invalidated tokens, locking users out of the Data Studio and needing cookies to be cleared.
Oh joy. Well, it’s fixed now. Quite important for end user experience so please do update.
Go Get It!
There have been other small enhancements, bug fixes, and optimizations across the Directus project in this release. You can now download Directus 10.12 on Docker Hub or via npm, and it'll be available on Directus Cloud soon.