Merge pull request #4978 from manics/url-tokens-5.0.0-changelog

Missing breaking change in 5.0.0 changelog: URL tokens
jupyterhub · Jan 9, 2025 · 8391d1d · 8391d1d
2 parents 4d57412 + 7a76cfd
commit 8391d1d
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/docs/source/reference/changelog.md b/docs/source/reference/changelog.md
@@ -168,6 +168,7 @@ Changes that are likely to require effort to upgrade:
 - update bootstrap to v5 [#4774](https://github.com/jupyterhub/jupyterhub/pull/4774) ([@minrk](https://github.com/minrk), [@consideRatio](https://github.com/consideRatio), [@manics](https://github.com/manics))
 - explicitly require groups in auth model when Authenticator.manage_groups is enabled [#4645](https://github.com/jupyterhub/jupyterhub/pull/4645) ([@minrk](https://github.com/minrk), [@consideRatio](https://github.com/consideRatio))
 - add JupyterHub.subdomain_hook [#4471](https://github.com/jupyterhub/jupyterhub/pull/4471) ([@minrk](https://github.com/minrk), [@consideRatio](https://github.com/consideRatio), [@akhmerov](https://github.com/akhmerov))
+- Using a token as a query parameter to start a user session is disabled by default, set `JUPYTERHUB_ALLOW_TOKEN_IN_URL=true` to enable it
 
 #### New features added