v0.1.48

Features

• raise the ALB idle timeout default to 600 seconds for station data plans [skip ci] (577c06d)
• check the SIM provider settings and refuse the SIM provider mock (7cf26b7)
• check required MFA for drivers and note a passkey RP ID the portal does not share (0a2c453)
• validate the passkey settings and the WebAuthn relying party ID (ac2b34a)
• validate the required MFA app settings (ce94259)
• validate the password policy and session lifetime app settings (4ec33f7)

Bug Fixes

• give the api task the simulator TLS address (bf40642)
• grant the shared rate limit and station credential keys in the Redis rules (7664ef2)
• acknowledge the cdk-nag findings of the OCPP TLS load balancer (3a0b886)
• accept an uppercase WEBAUTHN_RP_ID and cap the required MFA roles (b853648)
• refuse an IP address or a single label as the WebAuthn relying party ID (320e020)
• refuse required MFA without email or TOTP (9d9b8a3)

Documentation

• describe database storage sizing and log retention for large networks (63a3fb6)
• document the three OCPP station entry points and how to turn each on (b4e34fa)

Chores

• let the api user add driver avatar cleanup jobs in the Redis ACL [skip ci] (214368c)
• (dev): turn on every OCPP station entry point in dev (7f88a2a)

Other Changes

• Releasing version 0.1.48 (a6bafd7)
• feat!: refuse service env overrides of the values the stack derives (15b0a0a)
• feat!: refuse data retention keys in appSettings (59196a1)
• fix!: refuse a weakened prod config (ab99138)