← Back to all sparks
C

Casdoor

INFRA · APIS
Velocity5.0

Open-source identity and access management platform with SSO and OAuth.

Casdoor is rebuilding its console on shadcn/ui, porting auth features into web2 release by release.

identityssofrontend-rewriteshadcn-uimfaopen-source
Current state
Casdoor tags multiple releases a day, each carrying a single commit, so the version stream reads as a commit log rather than a milestone list. The visible work splits in two: a frontend rewrite called web2 that is absorbing the old antd console into shadcn/ui and re-acquiring features as it goes, and a steady trickle of repairs on the live auth surface covering signup validation, theme handling, and translations. SAML IdP-initiated SSO in v3.161.0 is the only protocol-level addition anywhere in this window.
Where it's heading
The web2 migration is the spine of this release train, and it is advancing by increments rather than by cutover: code moves across, then the features that code backed get rebuilt on the other side. Everything else in the window is maintenance on the shipping product, sized to single commits. Expect the migration to keep consuming minor versions until web2 reaches parity with the console it replaces.
Prediction
The next releases most likely continue porting console screens into web2 and cleaning up the login theme path that v3.160.0 and v3.163.3 have both touched. The entries give no signal on when web2 becomes the default, so the cutover timing is unclear.

Recent moves

  1. 13d ago

    Syncer add URL gains the missing organization segment

    A missing organization segment is restored to the syncer's add URL, repairing a broken path in the admin console. Filed under Features but functionally a routing correction, and typical of the small repairs filling the gaps between web2 migration steps.

    View source ↗
  2. 13d ago

    Login theme no longer re-initializes from localStorage

    The login page stops re-initializing its theme algorithm from localStorage, removing a source of wrong-theme rendering at sign-in. It pairs with v3.160.0's dark-mode fix as continued cleanup of the theme path the web2 rewrite is inheriting.

    View source ↗
  3. 13d ago

    Duplicate email or phone rejected before the signup code is sent

    Signup now rejects an already-registered email or phone before dispatching a verification code, moving the uniqueness check ahead of the send. That closes a path where the code endpoint could be fired at existing accounts, tightening the signup surface without changing the flow users see.

    View source ↗
  4. 13d ago

    Ukrainian translation corrections

    Ukrainian i18n strings are corrected. Localization upkeep with no behavioral change, the kind of single-commit tag that fills this product's release stream between feature work.

    View source ↗
  5. 15d ago

    More code migrated to the web2 frontend

    Another block of code moves into web2, continuing the frontend migration that dominates this release window. No user-visible change on its own; this is the migration advancing by increments.

    View source ↗
  6. 15d ago

    MFA setup and captcha land in the web2 frontend

    MFA setup and captcha arrive in web2, pulling account-security screens into the new frontend. This is parity work rather than new capability: the rewrite is re-acquiring what the existing console already does, which is what has to finish before web2 can become the default.

    View source ↗