Release 7.0

Prepared to operate securely, at scale and with full control

We are pleased to announce the release of Thinger.io 7.0, a major version focused on security and authentication, advanced alarms, file management, plugin and marketplace improvements, and a more modern platform ready for demanding deployments.

In real-world IoT environments, the question is no longer whether a platform works, but whether it is prepared to operate securely, at scale, and with full control over time.

Thinger.io 7.0 is designed to address exactly that scenario. It strengthens the platform for deployments where security and traceability are non-negotiable.

Rather than adding isolated features, Thinger.io 7.0 consolidates a technical foundation built to grow without compromising control.

Thinger.io 7.0 at a glance

Version
7.0
Announced
Focus
Security and authenticationAdvanced alarmsFile managementPlugins and Marketplace
Node.js runtime
24 LTS
Toolchain
Ubuntu 24.04
Full changelog
Version 7.0 in the documentation

Every change of the release, area by area, is in the full changelog for version 7.0.

Security and authentication

How can security be strengthened on IoT deployments?

By minimizing the number of credentials, centralizing identity management, and enforcing strong authentication policies across users and systems.

This approach reduces attack surfaces while keeping access simple for operators, engineers, and external collaborators. Thinger.io 7.0 adds federated authentication, full multi-factor authentication and passwordless access through passkeys, delivering stronger security without increasing login complexity.

Federated authentication with OpenID Connect (OIDC)

Thinger.io now supports federated authentication through OpenID Connect (OIDC), allowing organizations to delegate authentication to external identity providers and integrate with their existing corporate identity infrastructure. This enables:

  • Single Sign-On (SSO) across corporate platforms, so users access Thinger.io with their existing organizational credentials.
  • Centralized identity management, reducing the need to maintain separate user accounts and simplifying onboarding and offboarding.
  • Integration with enterprise identity providers such as Azure AD, Keycloak, Auth0, Okta, and other OIDC-compliant services.
  • Improved security compliance: organizations enforce their corporate authentication policies, including password policies, conditional access, and identity governance.
  • Reduced credential exposure, as user authentication is handled by trusted external identity providers.
  • Scalability for large deployments, simplifying user management in environments with multiple teams, departments, or external collaborators.

Federated authentication is configured from the Identity Providers section and works with the existing role and permission management of Thinger.io. How corporate sign-in fits the rest of the platform is on the Security page.

Multi-factor authentication and passwordless access

For environments requiring an additional security layer, the platform now provides full MFA support:

TOTP

One-time codes from authenticator apps, with backup codes.

WebAuthn security keys

A hardware security key as the second factor.

Passkeys

Passwordless sign-in with biometrics, with cross-platform support.

Alarms

How do you detect failures across your IoT device fleet?

In IoT environments, failures don't always appear as explicit errors. Devices may behave unexpectedly, report incorrect values, or simply stop sending data.

Reliable alarm management is essential to detect these situations early and maintain operational stability. Thinger.io 7.0 makes significant improvements to the alarm system: validation of complex rules before they reach production, detection of silent device failures, and enhanced traceability of alarm events.

Alarms designed for operational reality

Rule testing with real data

Test a rule against real source data before it goes live.

Dry-run mode

Evaluate conditions without triggering notifications.

Present and absent comparators

New comparators that detect devices that stop reporting.

GROUP BY data sources

GROUP BY support for alarm data sources in MongoDB and InfluxDB.

Origin fields

Improved traceability through new origin fields in alarm instances.

These improvements make alarm behavior easier to understand, test, and trust.

Files and storage

How do you manage firmware, logs, and files across your IoT devices?

It takes a platform capable of reliable file storage, secure file transfer, and remote filesystem access for both cloud and device environments.

Thinger.io 7.0 introduces major improvements in file and storage management: a new File Explorer for visual file management, and dedicated filesystem APIs for both cloud storages and devices. File management becomes a first-class platform capability.

The File Explorer

  • Visual browsing and management of files
  • A custom terminal in storages, to manage files directly from the terminal too

The filesystem APIs

  • Filesystem API for devices, designed for ThinRemote and IOTMP use cases
  • Filesystem API v2 for storages, with streaming uploads and enhanced path validation

The File Explorer and both APIs are documented in File System / Storages.

Across the platform

Other notable improvements

Thinger.io 7.0 also enhances plugins and the Marketplace, monitoring, devices and connectivity, products and flows, and the UI and dashboards.

What else changes in 7.0, by area
AreaWhat 7.0 brings
Plugins and Marketplace
  • Modernized interface and improved navigation
  • README rendering with GitHub-style markdown, syntax highlighting and better image resolution
Monitoring and metrics
  • Initial native system and Docker monitoring components
  • New APIs for container and runtime statistics
Devices and connectivity
  • Dynamically created subdevices from MQTT flows
  • Improved device lifecycle management: sleep, wake, disconnect
Products, APIs and flows
  • More granular API endpoints and endpoint call responses
  • Array matching in event filters
  • Full product and device context in resource stream events
UI and dashboards
  • Continued migration from AngularJS to Angular
  • A new text widget supporting colors, icons and value-based rules

More on each area: the Marketplace, device connectivity, and dashboards and their widgets.

Under the hood

Enhancements, bug fixes and internal changes

Enhancements

  • Node.js runtime updated to 24 LTS.
  • Improved HTTP and streaming support.
  • Enhanced schema validation with structured JSON error responses.
  • Reduced unnecessary dashboard refreshes and improved bucket data consistency.

Bug fixes and internal

  • Fixed edge cases in alarm rule evaluation.
  • Fixes for mixed and federated authentication flows.
  • Corrections to tag parameter handling in APIs and dashboards.
  • Fixes to CSV import issues related to timestamp parsing.
  • Removal of legacy dependencies, toolchain updated to Ubuntu 24.04, and internal performance improvements.

Your feedback

Happy building with Thinger.io

As always, your feedback is welcome via our community Discord.

Tell us how 7.0 works for you

Questions, feedback and ideas for the next release: the team and other users answer on Discord.

Join the community DiscordRead the full changelog