v2.2.0-alpha1

Warning

This is an early alpha release, not meant for production use. Use it to test brand-new functionalities.

About this release

Configure exactly how users authenticate with multi-step MFA, including FIDO2 security keys. Administrators have full control over MFA flows for each location, with stronger authentication options for high-security environments.

The mobile client has also been redesigned, joining the rest of the refreshed Defguard family.

✨ What's new

• Multi-step configurable MFA methods
• Use FIDO2 hardware key as MFA factor - add it as a passkey in your profile, configure an MFA Flow with FIDO2 Security Key factor, assign it to your location and connect using the latest Desktop Client.
• Bulk actions for Firewall module
• Handling multiple locations with DNS configuration connected simultaneously
• Completely redesigned Mobile Client - try it out by joining our beta channels or by installing packages from the release assets (more details in the mobile release).

🧪 How to test

🚀 Quickly run the latest server components using one-line-script in pre-release mode.

🔄 Worried that your users have to upgrade the client applications? Here you can check the client vs server feature compatibility matrix.

🙋 Feedback

We want to get as much feedback as possible, so we encourage you to:
💬 open a GitHub discussion
🪲 report any missing features or bugs as issues

Full changelog

• add multi-step MFA flow management API by @wojcik91 in #3535
• update proto submodule by @wojcik91 in #3538
• Update model_derive by @moubctez in #3548
• implement client version gate for multi-step MFA locations by @wojcik91 in #3554
• Mfa flow editor by @j-chmielewski in #3551
• implement MFA session DB store by @wojcik91 in #3577
• Mfa flow fixes by @j-chmielewski in #3584
• multi-step MFA engine MVP by @wojcik91 in #3591
• Atomic postures and mfa-flows assignments by @j-chmielewski in #3590
• fix mfa editor spacing issue by @j-chmielewski in #3602
• Stable to dev by @moubctez in #3642
• Assign MFA flows to locations by @t-aleksander in #3609
• ACL bulk actions by @t-aleksander in #3644
• Show in the location settings when a configured MFA flow becomes unusuable by @t-aleksander in #3647
• Fido2 by @moubctez in #3593
• utoipa is an option by @moubctez in #3650
• Optimise by @moubctez in #3652
• handle remote-auth methods in multi-step MFA flows by @wojcik91 in #3657
• Fix ghost rows being left behind in MFA flow assignment by @t-aleksander in #3659
• Attempt at fixing e2e tests by @t-aleksander in #3667
• Settings details in activity log by @moubctez in #3653
• Configure MFA methods on demand via client by @t-aleksander in #3656
• Switch to PNPM 12 and fix LogDetailDrawer by @moubctez in #3675
• Re-order activity log columns by @moubctez in #3679
• Update sqlx to 0.9 by @moubctez in #3681
• fix: don't emit failure event for each OIDC finish poll by @wojcik91 in #3684
• Client MTU by @moubctez in #3686
• Clean before alpha release by @moubctez in #3690
• chore: port LDAP firewall update fix from stable by @wojcik91 in #3692

Full Changelog: v2.1.0...v2.2.0-alpha1