# Major updates to SolidOS, NSS, and solidcommunity.net

**URL:** <https://forum.solidproject.org/t/major-updates-to-solidos-nss-and-solidcommunity-net/4781>\
**Category:** General Discussion\
**Created:** [October 20, 2021, 9:26pm UTC](https://forum.solidproject.org/t/major-updates-to-solidos-nss-and-solidcommunity-net/4781 "2021-10-20T21:26:16Z")\
**Posts on this page:** 12\
**Page:** 1

<div class="post-metadata">

**Author:** ![jeffz](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.solidproject.org/jeffz/32/600_2.png) [@jeffz](https://forum.solidproject.org/u/jeffz)\
**Post date:** [October 20, 2021, 9:26pm UTC](https://forum.solidproject.org/t/major-updates-to-solidos-nss-and-solidcommunity-net/4781/1 "2021-10-20T21:26:16Z")

</div>

Please note : If you have a Pod on [solidcommunity.net](http://solidcommunity.net), be sure to read the impact on users section below.

After months of work, a new SolidOS is about to be released. SolidOS, the Solid operating system, comes in four flavors :

- [The SolidOS Databrowser Frontend](https://solidcommunity.net/) - a frontend for Solid Servers like [solidcommunity.net](http://solidcommunity.net)
- [The SolidOS Databrowser Webapp](https://solid.github.io/mashlib/dist/browse.html) - a stand-alone web app
- [The SolidOS Data-Kitchen](https://github.com/solid/data-kitchen) - a stand-alone desktop app
- [The SolidOS software stack](https://github.com/solid/solidos/blob/main/README.md) - a set of libraries that may be used independently of the databrowser

SolidOS, in all of its flavors, provides pod navigation and management tools; semantic views of all data; productivity apps like notepads, and task-mangers; and collaboration apps like chat apps and meeting schedulers. All features have the aim of supporting the core Solid vision - user control, freedom from vendor lock-in, and re-usability of data.

This release is focused on security and it makes the code stack [Solid-OIDC specification](https://github.com/solid/solid-oidc) compliant. All code using solid-auth-client was replaced by code using @inrupt/solid-client-authn. The release also includes improvements to handling of Javascript, JSON-LD, and a variety of bug-fixes and UI improvements. See this [list of upgrade issues](https://github.com/solid/solidos/issues/38) for details. For reference : the releases are **SolidOS v1.7.7** and **NSS (Node solid-server) v5.6.12**.

The release impacts users of [solidcommunity.net](http://solidcommunity.net), developers using the SolidOS software stack, and pod providers who use NSS.

## Impact on users

Owners of Pods on [solidcommunity.net](https://solidcommunity.net) with an index.html file located in the root of their Pod (ex: https://some\_user.solidcommunity.net/index.html) : your first page on the Pod will change. Previously the index.html file was provisioned with a login button which will no longer work due to the authentication library upgrade. Upon release, we will be running a server script to rename all existing index.html files in the root of Pods to index\_1.html. If you wish to get your index.html back, you can remove any login code and buttons from the document and then rename it back to index.html. Unfortunately, there is currently no easy way to provide a login button on a pod root index page.

## Impact on developers

Developers who use the SolidOS stack (mashlib, solid-panes, solid-ui, solid-logic, rdflib) should be aware that these libraries have all switched to using [Inrupt’s solid-client-authn](https://github.com/inrupt/solid-client-authn-js) instead of solid-auth-client.

## Impact on Pod providers

As mentioned above under impacts on users, index.html pages with login buttons will no longer work. You should contact us to get a script to rename these files and warn your users before installing the new NSS. There is also a similar issue related to the server-root e.g. [https://solidcommunity.net/index.html](https://solidcommunity.net/index.html). An updated version of it that works with the new auth is available in the repo’s [default-templates folder](https://github.com/solid/node-solid-server/blob/main/default-templates/server/index.html).

## Join our team!

The changes in SolidOS, NSS, and [solidcommunity.net](http://solidcommunity.net) are the work of an active open source team led by Sir Tim Berners-Lee. The open source team actively welcomes collaborators. Please  
visit our [project pod](https://solidos.solidcommunity.net) or our [GitHub repo](https://github.com/solid/solidos/blob/main/README.md) for more information. For any concerns, issues or suggestions chat with the SolidOS team in [the gitter chatroom](https://gitter.im/solid/solidos) or create a [git issue](https://github.com/solid/solidos/issues).

---

<div class="post-metadata">

**Author:** ![crspybits](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.solidproject.org/crspybits/32/2857_2.png) [@crspybits](https://forum.solidproject.org/u/crspybits)\
**Post date:** [October 23, 2021, 1:28am UTC](https://forum.solidproject.org/t/major-updates-to-solidos-nss-and-solidcommunity-net/4781/2 "2021-10-23T01:28:17Z")

</div>

It’s great to hear about the progress! Are these changes live on [solidcommunity.net](http://solidcommunity.net) now?

---

<div class="post-metadata">

**Author:** ![jeffz](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.solidproject.org/jeffz/32/600_2.png) [@jeffz](https://forum.solidproject.org/u/jeffz)\
**Post date:** [October 23, 2021, 1:32am UTC](https://forum.solidproject.org/t/major-updates-to-solidos-nss-and-solidcommunity-net/4781/3 "2021-10-23T01:32:21Z")

</div>

Yes they are!

---

<div class="post-metadata">

**Author:** ![josephguillaume](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.solidproject.org/josephguillaume/32/1072_2.png) [@josephguillaume](https://forum.solidproject.org/u/josephguillaume)\
**Post date:** [October 24, 2021, 12:53am UTC](https://forum.solidproject.org/t/major-updates-to-solidos-nss-and-solidcommunity-net/4781/4 "2021-10-24T00:53:40Z")

</div>

I’m getting strange behaviour where it thinks I’m not logged in but is showing (presumably cached) private data, and even one case where it was showing login buttons but I could actually do private edits without problem.

Is there any specific place I should look where the intended (post-popup) login/logout experience and workflow is documented/discussed?

In terms of user experience, I’m finding the more frequent background redirects annoying but mostly ok, but unpredictability of when I’ll be logged in or out is a bit frustrating.

---

<div class="post-metadata">

**Author:** ![jeffz](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.solidproject.org/jeffz/32/600_2.png) [@jeffz](https://forum.solidproject.org/u/jeffz)\
**Post date:** [October 24, 2021, 1:01am UTC](https://forum.solidproject.org/t/major-updates-to-solidos-nss-and-solidcommunity-net/4781/5 "2021-10-24T01:01:26Z")

</div>

We experienced some of those “looks like I’m logged out but I can do certain private things” during testing but thought we had eliminated them all.

Please specify if you’re using a server frontend, the webapp or data kitchen and what page you logged in on and what IdP you used and what you clicked to get that mixed-state you described. Sorry for all the questions, but there are lots of contexts to cover.

---

<div class="post-metadata">

**Author:** ![josephguillaume](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.solidproject.org/josephguillaume/32/1072_2.png) [@josephguillaume](https://forum.solidproject.org/u/josephguillaume)\
**Post date:** [October 24, 2021, 1:58am UTC](https://forum.solidproject.org/t/major-updates-to-solidos-nss-and-solidcommunity-net/4781/6 "2021-10-24T01:58:47Z")

</div>

Happy to try to debug myself if you have some guidance on when it should think I should be logged out, i.e. is the login button wrong or the tool wrong; should it be asking me at every refresh, after a token expiry time, for a new browser session…?

I’m on [solidcommunity.net](http://solidcommunity.net) (IDP and pod) with the Brave browser looking at issue-pane and the generic resource browser (not sure which component that is). Not sure when/where I logged in - happened a couple of times now.

Edit: it’s definitely happened on mobile, and I think also on desktop, if that makes a difference (both still with the Brave browser)

---

<div class="post-metadata">

**Author:** ![jeffz](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.solidproject.org/jeffz/32/600_2.png) [@jeffz](https://forum.solidproject.org/u/jeffz)\
**Post date:** [October 24, 2021, 2:04am UTC](https://forum.solidproject.org/t/major-updates-to-solidos-nss-and-solidcommunity-net/4781/7 "2021-10-24T02:04:12Z")

</div>

Okay, thanks, if you could try the same thing with a different browser, that would tell us something. And if you notice it happening anywhere other than issue pane, that would be good to know also. In terms of feedback - comments in [solid/solidos - Gitter](https://gitter.im/solid/solidos) are always welcome and if it isn’t about any given library you can identify, file an issue at [Issues · solid/solidos · GitHub](https://github.com/solid/solidos/issues). The one that is open that is most similar to yours is [Handling goto links · Issue #70 · solid/solidos · GitHub](https://github.com/solid/solidos/issues/70).

---

<div class="post-metadata">

**Author:** ![josephguillaume](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.solidproject.org/josephguillaume/32/1072_2.png) [@josephguillaume](https://forum.solidproject.org/u/josephguillaume)\
**Post date:** [October 26, 2021, 1:15pm UTC](https://forum.solidproject.org/t/major-updates-to-solidos-nss-and-solidcommunity-net/4781/8 "2021-10-26T13:15:09Z")

</div>

I’ve added an issue: [Login button visible with private resource using nss · Issue #78 · solid/solidos · GitHub](https://github.com/solid/solidos/issues/78)

But it looks it is indeed just because the NSS cookie allows access to private resources without a solid-oidc login in that browser session, so I’m guessing there’s no point in fixing this.  
If/when the NSS cookies go away, the problem will too. If cookies don’t go away, then we can’t reliably tell whether the pod thinks a user is logged in unless the use of cookies is also in the spec, and I understand that’s unlikely…

---

<div class="post-metadata">

**Author:** ![davidboweninrupt](https://avatars.discourse-cdn.com/v4/letter/d/94ad74/32.png) [@davidboweninrupt](https://forum.solidproject.org/u/davidboweninrupt)\
**Post date:** [October 28, 2021, 7:06pm UTC](https://forum.solidproject.org/t/major-updates-to-solidos-nss-and-solidcommunity-net/4781/9 "2021-10-28T19:06:41Z")

</div>

Thanks folks, 5.6.12 is up and running on [inrupt.net](http://inrupt.net)

> [@Inrupt.net has been upgraded to NSS 5.6.12](https://forum.solidproject.org/t/inrupt-net-has-been-upgraded-to-nss-5-6-12/4818):
>
> Thanks to all the hard work of the NSS and SolidOS teams as @jeffz mentions here: we’ve been able to upgrade [inrupt.net](http://inrupt.net) so that you can all have the new SolidOS features. We did rename your index.html to index\_1.html as described in the article. We hope you enjoy the changes. Please let us know if you have any questions. Best wishes from your [inrupt.net](http://inrupt.net) sysadmin team

---

<div class="post-metadata">

**Author:** ![josephguillaume](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.solidproject.org/josephguillaume/32/1072_2.png) [@josephguillaume](https://forum.solidproject.org/u/josephguillaume)\
**Post date:** [November 7, 2021, 9:38am UTC](https://forum.solidproject.org/t/major-updates-to-solidos-nss-and-solidcommunity-net/4781/10 "2021-11-07T09:38:50Z")

</div>

Just installed community solid server with the mashlib recipe ([GitHub - solid/community-server-recipes: Solid Community Server with the Mashlib Data Browser](https://github.com/solid/community-server-recipes)) and other than some fighting with an existing Apache installation ([Using Apache as a Reverse Proxy mentions settings for the wrong server · Issue #633 · solid/solidproject.org · GitHub](https://github.com/solid/solidproject.org/issues/633)) it was on the whole a very nice experience. Thanks everyone!

---

<div class="post-metadata">

**Author:** ![Jaleel](https://avatars.discourse-cdn.com/v4/letter/j/3be4f8/32.png) [@Jaleel](https://forum.solidproject.org/u/Jaleel)\
**Post date:** [December 22, 2021, 6:15pm UTC](https://forum.solidproject.org/t/major-updates-to-solidos-nss-and-solidcommunity-net/4781/11 "2021-12-22T18:15:38Z")

</div>

What’s the best way to test this all? My guess - pull latest solidos, pull your newest mashlib, solid-ui, solid-logic into their respective workspaces under solidos, then build mashlib. If there’s an easier or way, please let me know.

[MyCCPay Login](https://www.myccpay.tech/)

---

<div class="post-metadata">

**Author:** ![jeffz](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.solidproject.org/jeffz/32/600_2.png) [@jeffz](https://forum.solidproject.org/u/jeffz)\
**Post date:** [December 22, 2021, 6:21pm UTC](https://forum.solidproject.org/t/major-updates-to-solidos-nss-and-solidcommunity-net/4781/12 "2021-12-22T18:21:55Z")

</div>

The easiest way is to get an account on [solidcommunity.net](http://solidcommunity.net) - SolidOS provides the frontend so you are automatically using it when you visit the site. You can also use [the SolidOS webapp](https://solid.github.io/mashlib/dist/browse.html) to visit any Pod.

If you want to experiment with the software stack, yes you have to build things in the right order. There are some specific instructions on building the stack in [the SolidOS README](https://github.com/solid/solidos/blob/main/README.md). If you run into problems, pop into the [SolidOS Chatroom](https://giter.im/solid/solidos)
