The commercial fork is distributed solely under the AppFlowy Self-Hosted Commercial License
- Collaboration & sync — Improved realtime diagnostics, queue performance, replay recovery, and full-state synchronization.
- Data integrity — Strengthened snapshots, database row recovery, private folder repair, and transient-write handling.
- Administration — Added client diagnostic log upload and download, collab snapshot previews, and cloud invite and license management.
- Publishing & templates — Unpublished trashed page trees automatically and fixed legacy, large-ID, and nested template publishing.
- Additional fixes — Improved permissions, authentication rate-limit handling, workspace exports, folder-only chat attachments, and self-hosted Ollama Qwen documentation.
Baseline: 359e02ed78e825908e912376f586b4abebe7b4bb
- SCIM 2.0 directory sync — Provision and deprovision users and Groups from Microsoft Entra ID, Okta, Authentik, and other compatible identity providers. Directory Groups can be mapped to AppFlowy workspace roles.
- LDAP login — Authenticate against configured LDAP directories and, when automatic provisioning is enabled, add users to their workspace on first login.
- Enterprise identity administration — Configure LDAP, SCIM, and custom OIDC connections through AppFlowy Admin.
These enterprise-authentication features require the Seed plan or higher. SCIM handles directory provisioning only; users continue to sign in through LDAP, SAML, or OIDC.
Use these component versions with the v0.17.3 enterprise identity features:
| Component | Version | Purpose |
|---|---|---|
| Admin Frontend | 0.16.5 |
Configure LDAP, SCIM, and custom OIDC connections |
| AppFlowy | 0.17.1 |
Desktop LDAP and custom OIDC sign-in |
| AppFlowy Web | 0.16.5 |
Web LDAP and custom OIDC sign-in |
SCIM is served at /scim/v2/*. The standard self-host deployment bind-mounts the public AppFlowy Cloud nginx/nginx.conf into the Nginx container, so upgrading only the appflowy_cloud image does not update its routes.
In a copied or customized Nginx configuration, add this sibling location alongside the location / frontend catch-all:
location /scim {
# The bundled Nginx terminates TLS itself. Never redirect a bearer request
# after its credential has already crossed plaintext.
if ($scheme != https) {
return 403;
}
# SCIM filters can contain email addresses and external IDs.
access_log off;
error_log /dev/null;
# No trailing slash or rewrite: preserve /scim/v2/* for AppFlowy Cloud.
proxy_pass $appflowy_cloud_backend;
}LDAP also needs a trusted client address for per-IP rate limiting. In the existing location /api, add this directive, replacing any existing X-Forwarded-For directive rather than adding a duplicate:
proxy_set_header X-Forwarded-For $remote_addr;For rollout:
- Upgrade
appflowy_cloudand wait for its migrations and health checks to complete. - Reload or recreate Nginx with the SCIM route.
- In Admin Frontend
0.16.5, create the SCIM connection and copy the bearer token when it is returned. Configure the identity provider to usehttps://<host>/scim/v2. AppFlowy stores only the token hash, and the token must be rotated before its 90-day expiry.
The bundled Nginx listens on 443 ssl, which is why the block above checks $scheme. Replace its development certificate with a valid certificate trusted by the identity provider. If a trusted load balancer terminates TLS before Nginx, enforce HTTPS at that outer edge and configure Nginx's trusted real-client-IP boundary explicitly instead of copying the guard unchanged. Do not redirect SCIM bearer-token requests from HTTP to HTTPS.
No additional Docker Compose service, port, SCIM environment variable, CORS rule, or proprietary header is required. Nginx forwards the standard Authorization header by default. If another edge applies browser login or external authentication, exempt /scim so it does not consume that header; do not cache SCIM responses or automatically retry non-idempotent POST or PATCH requests. New installations using the matching public AppFlowy Cloud release include these directives; existing or customized installations must merge them into their local bind-mounted configuration.
- Hardened workspace imports to improve data integrity.
- Made degraded workspace exports tolerate inactive collabs.
- Upgraded RocksDB to prevent file descriptor leaks.
- Improved sync speed and performance, especially under heavy workloads.
- Fixed retained Folder tail recovery when the frontier is missing.
- Improved the Folder frontier migration so it converges on stalled backlogs.
- Shared active-identity evidence across sessions during the SLO window.
- Workspace export — Fixed failures for large workspaces, stalled tasks, and workspaces with missing or inconsistent data, while preserving all readable content.
- Database blob diff API — Added opt-in paginated responses with bounded page sizes and resumable continuation cursors for
POST /api/workspace/{workspace_id}/database/{database_id}/blob/diff, while preserving compatibility with existing clients. - Search indexing — Made workspace index repair bounded and progressive so one problematic document cannot stall indexing for the rest of the workspace.
- Client compatibility — Added
APPFLOWY_MIN_CLIENT_VERSIONso operators can configure the minimum supported client version.
- More reliable realtime collaboration — Stronger sync and reconnection handling keeps documents in sync, recovers cleanly after interruptions, and monitors for stalls.
- More durable snapshots and version history — Improved snapshot recovery and gating so saved versions and history stay dependable.
- Stronger permissions — Explicit per-page permissions for workspace members, with revocations now taking effect immediately.
- Better database integrity — More consistent row identity and safer handling of concurrent edits.
- Faster, leaner search and AI — Lower CPU and memory usage in search and AI indexing, with better prioritization and grounding.
- Improved WebSocket reconnection and recovery after interruptions.
- More reliable convergence so everyone sees the same, correct document state.
- Fixed syncing of restored versions.
- Improved handling of missing or out-of-order updates, including quarantine of problematic gaps.
- Added explicit page-level permissions for workspace members.
- Permission revocations now take effect immediately.
- Fixed cases where stale permissions could linger.
- Editors can now resolve comments.
- Isolated notifications per user so people only see what is meant for them.
- Improved snapshot recovery and worker reliability.
- Version history now relies on durable snapshots.
- More consistent database row identity for reliable parent/child relationships.
- Safer database migrations.
- Support for concurrent workspace updates.
- Improved row-permission performance.
- Reduced memory usage when comparing large database entries.
- Lower CPU usage and better backpressure handling in search.
- Smarter query prioritization.
- Provider-aware AI indexing with support for dynamic embedding dimensions.
- Improved mention notifications.
- Isolated the recent-pages cache to prevent cross-contamination.
- This release includes database identity migrations.
- Deploy AppFlowy Cloud and AppFlowy Worker together.
- Deploy AppFlowy Cloud before AppFlowy AI and Admin Frontend.
- Changing embedding models or dimensions requires re-embedding existing content.
- Signup whitelist — Admins can control who is allowed to register by managing domain and email allowlists from the admin dashboard. Signup whitelisting can be toggled on or off at any time without redeployment.
- System-wide AI toggle — A single admin setting now disables all AI functionality across the platform. When turned off, all AI features become unavailable instantly across every service.
- Guest-invite admin approval — Workspace owners can now queue guest invitations that require admin approval before the invite email is sent. Admins receive email notifications for new pending requests and can review, approve, or reject invites from the admin dashboard. Clients can distinguish between invites waiting on admin approval and those waiting on the invitee to accept.
Admins can restrict new user registrations by enabling the signup whitelist in the admin dashboard. When enabled, only users whose email matches the configured allowlist (by domain or individual address) can sign up.
By default, the signup whitelist is disabled, so anyone can register.
To enable it:
- Set the environment variable
GOTRUE_DISABLE_SIGNUP=false. The signup whitelist only takes effect when signups are enabled at the GoTrue level — ifGOTRUE_DISABLE_SIGNUP=true, all signups are blocked regardless of the whitelist. - In the admin dashboard, toggle on Enable Signup Whitelist.
- Add allowed email domains (e.g.,
@yourcompany.com) or specific email addresses.
From the admin frontend, navigate to Users → Guest Invite to view pending guest invitations. You can approve or reject each request; approved invites trigger the invitation email automatically.
To require admin approval for all guest invites, toggle on Require admin approval for guest invites. This setting is off by default.
Example — admin approval disabled:
A workspace owner invites user_a@appflowy.io. The guest receives the invitation email immediately and can accept it without admin intervention.
Example — admin approval enabled:
A workspace owner invites user_b@appflowy.io. The invitation is marked Pending Admin Approval. Once an admin approves it, the guest receives the invitation email and can accept it to access the workspace.
This release requires upgrading the following services to 0.15.0:
appflowy-cloudgotrueadmin-frontend
- Added server-side database row duplication, including row document cloning
- Improved published database pages so sibling database views are surfaced more consistently in published outlines and page metadata
- Fixed unpublished collabs to return
RecordNotFoundinstead of stale publish metadata - Fixed PDF export title and spacing issues
- Fixed relation rendering in PDF export to use relation titles instead of raw UUIDs
- Fixed hidden database fields appearing in PDF exports
- Fixed duplicate-row metadata so failed row-document duplication does not leave dangling document references
Platform Compatibility
- Replaced
aws-lc-rswithringto preventSIGILLcrashes on ARM64 Raspberry Pi deployments
- Fix Notion import issues: handle inaccessible databases/documents, restore missing database row pages, and abort import gracefully when the zip file is corrupted
- Fix miscellaneous application logic bugs
- Optimize Redis connection handling for different usage scenarios
- Optimize Redis connection
- Fix missing access to pages after importing a Notion zip file
AppFlowy Search
- Support cancellable search requests
- Pipeline search requests with automatic cancellation of in-flight previous requests
AppFlowy Worker
- Fix Notion import bug: corrected embedded database view links and mention database links
- Fix additional Notion import bugs
AppFlowy Search
A new dedicated search service (appflowy_search) is now available, enabling both keyword and semantic (vector) search across your documents. It runs as a standalone service on port 4002.
Setup:
- Pull the latest
docker-compose.ymlfrom the AppFlowy Cloud repo, as it has been updated to include this service APPFLOWY_SEARCH_SERVICE_URLdefaults tohttp://appflowy_search:4002and works out of the box. You only need to set it if you have a custom deployment configuration
AppFlowy AI
AI chat now leverages the search service for context retrieval, delivering more relevant and accurate responses by drawing from your workspace content.
Admin Frontend
A new AI tab has been added to the admin panel, allowing you to configure AI models and switch providers on the fly — no redeployment required.
If you are using a custom Nginx configuration, you need to add the following location block:
location /ai/ {
proxy_pass $appflowy_cloud_backend;
proxy_set_header X-Request-Id $request_id;
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}Note: If you are using the default Nginx configuration provided by AppFlowy Cloud, this change is already included — no action needed.
- Added AI Meeting feature for intelligent meeting assistance
- Requires: Set the
ASSEMBLYAI_API_KEYenvironment variable. Get your API key here
- Requires: Set the
- Enhanced Web API with improved database creation capabilities
- Improved performance by caching user and member profiles in Redis
- Optimized the Publish Page for faster loading and smoother performance
- Made file and image URLs private across the app, with access allowed only on the Publish Page
- Fixed an issue in the join-by-invite-code flow where an already-seated Member/Owner was incorrectly counted again. The system now properly avoids consuming an extra seat
- Deprecated the ws v1 API endpoint in preparation for future cleanup and migration