OpenID-Connect-Java-Spring-Server/CHANGELOG.md

8.0.1 (2022-01-12)

Bug Fixes

• 🐛 Fix missing sub in ClaimSourceProduceContext (5eace9f)

8.0.0 (2022-01-12)

Features

• 🎸 Refactored userinfo serv., new SAML-based claim sources (2c413d9)

BREAKING CHANGES

• 🧨 requires database update

7.5.2 (2022-01-10)

Bug Fixes

• 🐛 Do not display remember me when prompt=consnet (1bf72b8)

7.5.1 (2021-12-23)

Bug Fixes

• incorrect label on stay logged in button (75a626f)

7.5.0 (2021-12-10)

Features

• 🎸 Configurable favicons (bf227df)

7.4.1 (2021-12-09)

Bug Fixes

• 🐛 Fix inserting and reading properties in the stats filter (31710bf)

7.4.0 (2021-12-09)

Features

• 🎸 Configurable name of user col in stats filter (4a5be5d)

7.3.0 (2021-12-09)

Features

• 🎸 Configurable max pool size for JDBC data sources (e5b406e)

7.2.0 (2021-12-08)

Features

• 🎸 Added automated bundling of .war file into release (cd1118f)

7.1.1 (2021-12-08)

Bug Fixes

• 🐛 Fix possible SQL exceptions (b3bd9e9)

7.1.0 (2021-12-07)

Bug Fixes

• DB inserts in statistics work with PostgreSQL (b72eb8f)

Features

• Added configurable ipdIdColumnName and spIdColumnName in statistics (515f99b)

7.0.0 (2021-12-06)

Code Refactoring

• 💡 Refactored GA4GH Passports and visas (a94fd99)

Features

• 🎸 Implemented BBMRI-ERIC Ga4gh Passports and Visas (141e6c8)

BREAKING CHANGES

• 🧨 Ga4gh Claim source class for ELIXIR has been changed. Also, the ElixirAccessTokenModifier class has been moved and renamed.

6.0.0 (2021-12-06)

Code Refactoring

• 💡 Drop support for java 8 (4a0b63e)

BREAKING CHANGES

• 🧨 Dropped support for java 8

5.0.1 (2021-12-02)

Bug Fixes

• 🐛 Fix fallbacking of locale to the code to prevent errors (ceb01c7)

5.0.0 (2021-11-30)

Code Refactoring

• 💡 Refactored how translations are loaded and used (665b45f)

BREAKING CHANGES

• Property web.langs.customfiles.path must point to the RersourceBundle.

4.0.1 (2021-11-19)

Bug Fixes

• 🐛 Fixed missing ACRs code and device_code flows (4d3b072)

4.0.0 (2021-11-19)

Bug Fixes

• 🐛 Fix ACR for implicit and authorization_code flows (39bc00a)

BREAKING CHANGES

• 🧨 Database needs to be updated: ALTER TABLE saved_user_auth DROP source_class; ALTER TABLE saved_user_auth ADD COLUMN acr VARCHAR(1024);

3.5.0 (2021-11-16)

Features

• 🎸 AARC_IDP_HINTING implemented (ebd1459)

3.4.1 (2021-11-15)

Bug Fixes

• 🐛 Added missing PostgreSQL dependency (e12c164)

3.4.0 (2021-11-12)

Features

• 🎸 Forward client_id in AuthenticationContextClass (6a6d1e3)

3.3.0 (2021-11-11)

Features

• 🎸 Extended list of internal referrers for sess. invalider (9aa16ff)
• 🎸 Make SAML identifier attribute configurable (3949857)

3.2.0 (2021-11-09)

Features

• 🎸 Adderd e-INFRA CZ template (5eb50f6)

3.1.0 (2021-11-08)

Features

• 🎸 Sign refresh tokens (23a6354)

3.0.1 (2021-11-05)

Bug Fixes

• 🐛 fix loading JWKS (371adc1)

Unreleased:

1.3.3:

• Authorization codes are now longer
• Client/RS can parse the "sub" and "user_id" claims in introspection response
• Database-direct queries for fetching tokens by user (optimization)
• Device flow supports verification_uri_complete (must be turned on)
• Long scopes display properly and are still checkable
• Language system remebers when it can't find a file and stops throwing so many errors
• Index added for refresh tokens
• Updated to Spring Security 4.2.11
• Updated Spring to 4.3.22
• Change approve pages to use issuer instead of page context
• Updated oracle database scripts

1.3.2:

• Added changelog
• Set default redirect URI resolver strict matching to true
• Fixed XSS vulnerability on redirect URI display on approval page
• Removed MITRE from copyright
• Disallow unsigned JWTs on client authentication
• Upgraded Nimbus revision
• Added French translation
• Added hooks for custom JWT claims
• Removed "Not Yet Implemented" tag from post-logout redirect URI

1.3.1:

• Added End Session endpoint
• Fixed discovery endpoint
• Downgrade MySQL connector dependency version from developer preview to GA release

1.3.0:

• Added device flow support
• Added PKCE support
• Modularized UI to allow better overlay and extensions
• Modularized data import/export API
• Added software statements to dynamic client registration
• Added assertion processing framework
• Removed ID tokens from storage
• Removed structured scopes

1.2.6:

• Added strict HEART compliance mode