LoginSign Up
← Back to all sparks
S

Shiori

COLLAB
Velocity0.0

Self-hosted bookmark manager and read-later service

github.com/go-shiori/shiori ↗

A Go bookmark manager rebuilding itself around an API — and only ever shipping release candidates.

bookmarksself-hostedapi-firstgolangrelease-candidatesproxy-auth
◆Current state
Shiori is a self-hosted read-later and bookmark tool whose recent history is entirely release candidates: v1.7.0-rc.2, rc.3, v1.7.2-rc.1, v1.8.0-rc.1. The visible work has moved off the web UI and into an API v1 surface — tag endpoints, bookmark-tag association, filtering and counts — plus infrastructure like proxy-header authentication and SQLite performance. The last tagged release in this window is from July 2025.
◆Where it's heading
The project is converting from a web app with an API bolted on into an API-first service with a client, and the login component, PWA and theme work are being rewritten around that split. Proxy forward-header authentication in particular is a deployment-shape decision: it assumes Shiori sits behind an authenticating reverse proxy rather than owning identity itself. The RC-only tagging pattern makes it hard to tell what the maintainers consider stable.
◆Prediction
The next step is presumably a final v1.8.0 consolidating the API v1 tag work, though nothing in these entries indicates the RC-to-stable promotion is scheduled. If the pattern holds, the following RC continues on API endpoints rather than the UI.

◆Recent moves

  1. 1y ago

    API v1 gains tag endpoints, filtering and counts; proxy header auth

    The clearest statement of the API-first turn: the tags API is refactored, bookmark-tag endpoints are added, and tag filtering and counts become retrievable over API v1. Proxy forward-header authentication and PWA share support round out a release aimed at Shiori running as a component rather than a destination.

    View source ↗
  2. 1y ago

    Swagger UI disabled by default; session auth and Postgres fixes

    Housekeeping ahead of the API push — Swagger UI becomes opt-in, session validation moves to token-only, and a Postgres migration bug affecting non-English locales is fixed. Nothing users see beyond a login flow that no longer misbehaves on refresh.

    View source ↗
  3. 2y ago

    Light, dark and system theme selection in the web UI

    A small user-facing addition — theme selection with a follow-system option — alongside fixes to the archive page's original link and Swagger response types. One of the last releases where the visible change was in the UI rather than the API.

    View source ↗
  4. 2y ago

    Home button clears the active search query

    A two-commit release candidate: the home button now clears the search query, plus a build-time AVX2 processor check for bun. Marginal even by RC standards.

    View source ↗