github
/
OpenID-Connect-Java-Spring-Server
mirror of https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
OpenID-Connect-Java-Spring-.../CHANGELOG.md

24 KiB
Raw Blame History

10.0.1 (2022-07-13)

Bug Fixes

  • ๐Ÿ› Fix script loading for LS footer (bd90a76)

10.0.0 (2022-07-09)

Bug Fixes

  • ๐Ÿ› Fix displaying for consent for EMBL (ef47df1)

BREAKING CHANGES

  • ๐Ÿงจ DB changes (see v10.0.0.sql files)

9.4.0 (2022-07-08)

Features

  • IsEligible authproc filter and claim source (2e0aaa7)

9.3.2 (2022-07-04)

Bug Fixes

  • deps: update dependency org.mariadb.jdbc:mariadb-java-client to v3.0.6 (fc02c8f)

9.3.1 (2022-06-15)

Bug Fixes

  • deps: update dependency org.postgresql:postgresql to v42.4.0 (9f56413)

9.3.0 (2022-06-03)

Features

  • ๐ŸŽธClaim sources for extracting AuthenticationContextClassRef and AuthnInstant (d9d3034)

9.2.2 (2022-06-03)

Bug Fixes

  • ๐Ÿ› Fix SAML Claim source when singleValue to use joiner (d16c3c6)
  • ๐Ÿ› Fixed displaying consent screens for LS template (9884eb1)

9.2.1 (2022-06-01)

Bug Fixes

  • deps: update dependency com.nimbusds:nimbus-jose-jwt to v9.23 (0c465ca)

9.2.0 (2022-05-30)

Bug Fixes

  • deps: update dependency org.mariadb.jdbc:mariadb-java-client to v3.0.5 (e6a8342)
  • deps: update dependency org.postgresql:postgresql to v42.3.6 (c1d62ca)

Features

  • Added new claims sources (15cf3a9)

9.1.6 (2022-05-23)

Bug Fixes

  • deps: update dependency com.fasterxml.jackson.dataformat:jackson-dataformat-yaml to v2.13.3 (e5f3a62)

9.1.5 (2022-05-09)

Bug Fixes

  • deps: update dependency org.postgresql:postgresql to v42.3.5 (319d0c7)

9.1.4 (2022-04-25)

Bug Fixes

  • deps: update dependency com.nimbusds:nimbus-jose-jwt to v9.22 (1a087e4)

9.1.3 (2022-04-25)

Bug Fixes

  • deps: update dependency org.springframework.security.oauth:spring-security-oauth2 to v2.5.2.release (5eafd46)

9.1.2 (2022-04-25)

Bug Fixes

  • deps: update dependency mysql:mysql-connector-java to v8.0.29 (9ff89f7)

9.1.1 (2022-04-22)

Bug Fixes

  • ๐Ÿ› Fixed wrong mail in LS consent (c84912c)

9.1.0 (2022-04-22)

Features

  • ๐ŸŽธ Filter for logging authentication details (585dbd8)

9.0.3 (2022-04-22)

Bug Fixes

  • deps: update dependency org.projectlombok:lombok to v1.18.24 (6736cf4)
  • improve MUNI header (3f0f910)

9.0.2 (2022-04-20)

Bug Fixes

9.0.1 (2022-04-19)

Bug Fixes

  • deps: update dependency org.postgresql:postgresql to v42.3.4 (cae6002)

9.0.0 (2022-04-13)

Features

BREAKING CHANGES

  • requires database update (see migraiton script), dropped ELIXIR theme

8.2.5 (2022-04-11)

Bug Fixes

  • show unapproved message (0d6e2c7)

8.2.4 (2022-04-11)

Bug Fixes

  • ๐Ÿ› Added missing return values when RPC disabled (733597a)

8.2.3 (2022-04-11)

Bug Fixes

  • ๐Ÿ› Fix nullPointer in SamlAuthenticationDetailsStringCon (3c034f4)

8.2.2 (2022-04-06)

Bug Fixes

  • ๐Ÿ› Fix storing SavedUserAuth (c83ecc2)

8.2.1 (2022-04-04)

Bug Fixes

  • ๐Ÿ› Remove RelayState from SAML details in SavedUserAuth (0f73d88)

8.2.0 (2022-04-04)

Features

  • ๐ŸŽธ More user lookup methods (3ea2b82)

8.1.9 (2022-04-04)

Bug Fixes

  • deps: update dependency org.aspectj:aspectjweaver to v1.9.9.1 (fb56956)

8.1.8 (2022-03-31)

Bug Fixes

  • deps: update dependency org.aspectj:aspectjweaver to v1.9.9 (4ef0063)
  • deps: update dependency org.mariadb.jdbc:mariadb-java-client to v3.0.4 (96358d9)

8.1.7 (2022-03-23)

Bug Fixes

  • deps: update eclipse-persistence.version to v2.7.10 (2f864fc)

8.1.6 (2022-03-23)

Bug Fixes

  • ๐Ÿ› Allow Group description to be empty string (76899b4)
  • deps: update dependency com.fasterxml.jackson.dataformat:jackson-dataformat-yaml to v2.13.2 (1db9d51)

8.1.5 (2022-03-09)

Bug Fixes

  • deps: update dependency com.nimbusds:nimbus-jose-jwt to v9.21 (b1810d8)

8.1.4 (2022-03-09)

Bug Fixes

  • deps: update logback.version to v1.2.11 (8601f9c)

8.1.3 (2022-03-09)

Bug Fixes

  • deps: update dependency com.google.guava:guava to v31.1-jre (1032ed0)

8.1.2 (2022-02-17)

Bug Fixes

  • ๐Ÿ› Fix missing execute statement in statistics filter (93b8081)

8.1.1 (2022-02-17)

Bug Fixes

  • deps: update dependency com.google.code.gson:gson to v2.9.0 (0ec65b6)

8.1.0 (2022-02-17)

Bug Fixes

  • deps: update dependency com.nimbusds:nimbus-jose-jwt to v9.19 (bb1443f)
  • deps: update dependency org.aspectj:aspectjweaver to v1.9.8 (78087dc)
  • deps: update dependency org.postgresql:postgresql to v42.3.3 (9810e84)

Features

  • ๐ŸŽธ Display noAuthnContext message on login_failure (8872469)

8.0.6 (2022-02-01)

Bug Fixes

  • deps: update dependency com.nimbusds:nimbus-jose-jwt to v9.18 (6653cdb)

8.0.5 (2022-02-01)

Bug Fixes

  • deps: update dependency org.mariadb.jdbc:mariadb-java-client to v3 (b3ddb12)

8.0.4 (2022-02-01)

Bug Fixes

  • deps: update dependency org.glassfish.jaxb:jaxb-runtime to v2.3.6 (64f8997)

8.0.3 (2022-01-26)

Bug Fixes

  • ๐Ÿ› Consider empty referer as external (d4bc19e)

8.0.2 (2022-01-13)

Bug Fixes

  • ๐Ÿ› Set email verified to true (93fc557)

8.0.1 (2022-01-12)

Bug Fixes

  • ๐Ÿ› Fix missing sub in ClaimSourceProduceContext (5eace9f)

8.0.0 (2022-01-12)

Features

  • ๐ŸŽธ Refactored userinfo serv., new SAML-based claim sources (2c413d9)

BREAKING CHANGES

  • ๐Ÿงจ requires database update

7.5.2 (2022-01-10)

Bug Fixes

  • ๐Ÿ› Do not display remember me when prompt=consnet (1bf72b8)

7.5.1 (2021-12-23)

Bug Fixes

  • incorrect label on stay logged in button (75a626f)

7.5.0 (2021-12-10)

Features

  • ๐ŸŽธ Configurable favicons (bf227df)

7.4.1 (2021-12-09)

Bug Fixes

  • ๐Ÿ› Fix inserting and reading properties in the stats filter (31710bf)

7.4.0 (2021-12-09)

Features

  • ๐ŸŽธ Configurable name of user col in stats filter (4a5be5d)

7.3.0 (2021-12-09)

Features

  • ๐ŸŽธ Configurable max pool size for JDBC data sources (e5b406e)

7.2.0 (2021-12-08)

Features

  • ๐ŸŽธ Added automated bundling of .war file into release (cd1118f)

7.1.1 (2021-12-08)

Bug Fixes

  • ๐Ÿ› Fix possible SQL exceptions (b3bd9e9)

7.1.0 (2021-12-07)

Bug Fixes

  • DB inserts in statistics work with PostgreSQL (b72eb8f)

Features

  • Added configurable ipdIdColumnName and spIdColumnName in statistics (515f99b)

7.0.0 (2021-12-06)

Code Refactoring

  • ๐Ÿ’ก Refactored GA4GH Passports and visas (a94fd99)

Features

  • ๐ŸŽธ Implemented BBMRI-ERIC Ga4gh Passports and Visas (141e6c8)

BREAKING CHANGES

  • ๐Ÿงจ Ga4gh Claim source class for ELIXIR has been changed. Also, the ElixirAccessTokenModifier class has been moved and renamed.

6.0.0 (2021-12-06)

Code Refactoring

  • ๐Ÿ’ก Drop support for java 8 (4a0b63e)

BREAKING CHANGES

  • ๐Ÿงจ Dropped support for java 8

5.0.1 (2021-12-02)

Bug Fixes

  • ๐Ÿ› Fix fallbacking of locale to the code to prevent errors (ceb01c7)

5.0.0 (2021-11-30)

Code Refactoring

  • ๐Ÿ’ก Refactored how translations are loaded and used (665b45f)

BREAKING CHANGES

  • Property web.langs.customfiles.path must point to the RersourceBundle.

4.0.1 (2021-11-19)

Bug Fixes

  • ๐Ÿ› Fixed missing ACRs code and device_code flows (4d3b072)

4.0.0 (2021-11-19)

Bug Fixes

  • ๐Ÿ› Fix ACR for implicit and authorization_code flows (39bc00a)

BREAKING CHANGES

  • ๐Ÿงจ Database needs to be updated: ALTER TABLE saved_user_auth DROP source_class; ALTER TABLE saved_user_auth ADD COLUMN acr VARCHAR(1024);

3.5.0 (2021-11-16)

Features

  • ๐ŸŽธ AARC_IDP_HINTING implemented (ebd1459)

3.4.1 (2021-11-15)

Bug Fixes

  • ๐Ÿ› Added missing PostgreSQL dependency (e12c164)

3.4.0 (2021-11-12)

Features

  • ๐ŸŽธ Forward client_id in AuthenticationContextClass (6a6d1e3)

3.3.0 (2021-11-11)

Features

  • ๐ŸŽธ Extended list of internal referrers for sess. invalider (9aa16ff)
  • ๐ŸŽธ Make SAML identifier attribute configurable (3949857)

3.2.0 (2021-11-09)

Features

  • ๐ŸŽธ Adderd e-INFRA CZ template (5eb50f6)

3.1.0 (2021-11-08)

Features

  • ๐ŸŽธ Sign refresh tokens (23a6354)

3.0.1 (2021-11-05)

Bug Fixes

  • ๐Ÿ› fix loading JWKS (371adc1)

Unreleased:

1.3.3:

  • Authorization codes are now longer
  • Client/RS can parse the "sub" and "user_id" claims in introspection response
  • Database-direct queries for fetching tokens by user (optimization)
  • Device flow supports verification_uri_complete (must be turned on)
  • Long scopes display properly and are still checkable
  • Language system remebers when it can't find a file and stops throwing so many errors
  • Index added for refresh tokens
  • Updated to Spring Security 4.2.11
  • Updated Spring to 4.3.22
  • Change approve pages to use issuer instead of page context
  • Updated oracle database scripts

1.3.2:

  • Added changelog
  • Set default redirect URI resolver strict matching to true
  • Fixed XSS vulnerability on redirect URI display on approval page
  • Removed MITRE from copyright
  • Disallow unsigned JWTs on client authentication
  • Upgraded Nimbus revision
  • Added French translation
  • Added hooks for custom JWT claims
  • Removed "Not Yet Implemented" tag from post-logout redirect URI

1.3.1:

  • Added End Session endpoint
  • Fixed discovery endpoint
  • Downgrade MySQL connector dependency version from developer preview to GA release

1.3.0:

  • Added device flow support
  • Added PKCE support
  • Modularized UI to allow better overlay and extensions
  • Modularized data import/export API
  • Added software statements to dynamic client registration
  • Added assertion processing framework
  • Removed ID tokens from storage
  • Removed structured scopes

1.2.6:

  • Added strict HEART compliance mode