diff --git a/Changelog.md b/Changelog.md
index 89fcd1ca..ded01a5b 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,5 +1,52 @@
 # Changelog
 
+## v0.27.0
+
+*Sep 23, 2021*
+
+- Allow external authentication providers via [OpenID
+  Connect](https://openid.net/connect). Now you can integrate Docspell
+  into your SSO solution. Using keycloak, for example (or other such
+  tools) users can be maintained elsewhere, like in an LDAP directory.
+  (#489)
+- Adds two-factor authentication using TOTPs. If you don't want to
+  setup an external authentication provider (which is another tool to
+  maintain), you can use the builtin TOTP support to have two-factor
+  authentication. (#762)
+- Improvements when querying documents (#1040)
+- Changed the underlying code for storing and loading files. This is a
+  preparation to allow different storage backends for files in the
+  future (maybe the filesystem or s3). (#1080)
+- The license has changed from GPLv3+ to AGPLv3+ (#1078)
+- Fixes a bug in the "check for updates" task that was added in the
+  last release (#1068)
+- Reduces the length of the startup command, which makes tools like
+  `ps` much more readable and allows now to start docspell on Windows
+  (untested, though ;-)) (#1062)
+- Fixes merging items, where sent mails were not copied to the target
+  item. (#1055)
+- Fixes and improves deleting users. Now all their data is also
+  removed and it is shown what that would be. (#1060)
+
+### Rest API Changes
+
+- The `login` routes now won't return a session token when 2FA is
+  enabled for an account. The returned token must be used to provide
+  the TOTP in order to finalize login.
+- Added `open/auth/two-factor` endpoint to provide the TOTP for login
+- Added `open/auth/openid/{providerId}[/resume]` endpoints to initiate
+  authentication via an external provider
+- Added `sec/user/{username}/deleteData` to retrieve a summary of data
+  that would be deleted with that user
+- Added `sec/user/otp/*` endpoints to manage the TOTP for an account
+- Added `admin/user/otp/reserOTP` to reset the 2FA setup for any user
+
+### Configuration Changes
+
+- Restserver: Added a section to configure external authentication
+  provider
+
+
 ## v0.26.0
 
 *Aug 28, 2021*
diff --git a/modules/joexapi/src/main/resources/joex-openapi.yml b/modules/joexapi/src/main/resources/joex-openapi.yml
index 68959e5b..7e46e164 100644
--- a/modules/joexapi/src/main/resources/joex-openapi.yml
+++ b/modules/joexapi/src/main/resources/joex-openapi.yml
@@ -2,7 +2,7 @@ openapi: 3.0.0
 
 info:
   title: Docspell JOEX
-  version: 0.27.0-SNAPSHOT
+  version: 0.28.0-SNAPSHOT
   description: |
     This is the remote API to the job executor component of Docspell.
     Docspell is a free document management system focused on small
diff --git a/modules/restapi/src/main/resources/docspell-openapi.yml b/modules/restapi/src/main/resources/docspell-openapi.yml
index 3ebfaa27..4c6b31ee 100644
--- a/modules/restapi/src/main/resources/docspell-openapi.yml
+++ b/modules/restapi/src/main/resources/docspell-openapi.yml
@@ -2,7 +2,7 @@ openapi: 3.0.0
 
 info:
   title: Docspell
-  version: 0.27.0-SNAPSHOT
+  version: 0.28.0-SNAPSHOT
   description: |
     This is the remote API to Docspell. Docspell is a free document
     management system focused on small groups or families.
diff --git a/modules/webapp/src/main/elm/Comp/Basic.elm b/modules/webapp/src/main/elm/Comp/Basic.elm
index 17f785b2..e3d3ac67 100644
--- a/modules/webapp/src/main/elm/Comp/Basic.elm
+++ b/modules/webapp/src/main/elm/Comp/Basic.elm
@@ -224,6 +224,7 @@ contentDimmer active content =
             [ ( "hidden", not active )
             ]
         , class S.dimmer
+        , class "text-gray-200"
         ]
         [ content
         ]
diff --git a/modules/webapp/src/main/elm/Styles.elm b/modules/webapp/src/main/elm/Styles.elm
index 3357677b..c7686ffa 100644
--- a/modules/webapp/src/main/elm/Styles.elm
+++ b/modules/webapp/src/main/elm/Styles.elm
@@ -154,7 +154,7 @@ secondaryButton =
 
 secondaryButtonMain : String
 secondaryButtonMain =
-    " rounded my-auto whitespace-nowrap bg-gray-300 dark:bg-bluegray-400 text-center px-4 py-2 shadow-md focus:outline-none focus:ring focus:ring-opacity-75 dark:text-gray-800 "
+    " rounded my-auto whitespace-nowrap bg-gray-300 dark:bg-bluegray-400 text-center px-4 py-2 shadow-md focus:outline-none focus:ring focus:ring-opacity-75 dark:text-gray-800 text-gray-800"
 
 
 secondaryButtonHover : String
diff --git a/nix/release.nix b/nix/release.nix
index 3deef0dd..bdd8eb19 100644
--- a/nix/release.nix
+++ b/nix/release.nix
@@ -1,5 +1,16 @@
 rec {
   cfg = {
+    v0_27_0 = rec {
+      version = "0.27.0";
+      server = {
+        url = "https://github.com/eikek/docspell/releases/download/v${version}/docspell-restserver-${version}.zip";
+        sha256 = "0rarzdmrrifncmrr7mdq62n2l6aa1zzwbh45xbbr64xnx86ld415";
+      };
+      joex = {
+        url = "https://github.com/eikek/docspell/releases/download/v${version}/docspell-joex-${version}.zip";
+        sha256 = "0chzjaqb0mdpfr5qg9frm08fx8nkmsc0kjnjxyd00kzjq17i7r07";
+      };
+    };
     v0_26_0 = rec {
       version = "0.26.0";
       server = {
@@ -118,7 +129,7 @@ rec {
     };
   };
   pkg = v: import ./pkg.nix v;
-  currentPkg = pkg cfg.v0_26_0;
+  currentPkg = pkg cfg.v0_27_0;
   module-joex = ./module-joex.nix;
   module-restserver = ./module-server.nix;
   modules = [ module-joex
diff --git a/version.sbt b/version.sbt
index 7968fe47..387ed3e5 100644
--- a/version.sbt
+++ b/version.sbt
@@ -1 +1 @@
-ThisBuild / version := "0.27.0-SNAPSHOT"
+ThisBuild / version := "0.28.0-SNAPSHOT"
diff --git a/website/site/config.toml b/website/site/config.toml
index 770258ef..6efb0447 100644
--- a/website/site/config.toml
+++ b/website/site/config.toml
@@ -26,4 +26,4 @@ skip_anchor_prefixes = [
 
 [extra]
 # Put all your custom variables here
-version = "0.27.0-SNAPSHOT"
+version = "0.28.0-SNAPSHOT"