A bit of everything release. Most notable changes are:
Features and bugfixes
Assets
4
Features and fixes
- Replaced the SURFnet favicon by the openconext one
- Keep the WAYF operable when syncing cookies.
- Add logging to ValidateMfaAuthnContextClassRef command.
- Tweak NL language.
- Correct display of tooltip for group attributes.
- Avoid double encoding logo url for attribute source.
- Ensure images after search are ok in IE11.
- Prevent logo flicker in FF whenever possible.
- Ensure Idps after sync are deletable.
- Prevent Idp-row logo from overlapping with text.
Security
- Replaced the composer dependency for the security checker (no longer working) with a local one.
Assets
4
Features and fixes
- Fixed disabled button being shown in the remaining section for non-disabled accounts on IE11
- Added a check to see if there is a focused element before the check to see if the focus is on an arrow item.
- Cleaned up forgotton debug code.
Assets
4
Features and fixes
- Repaired search in IE
- Fixed a visual regression with the previously selected section where the edit button was on it's own line.
Assets
4
Features and fixes
- Fixed overflow issue in IE11 for disclaimerlist.
- Updated the text for the PEP page.
Assets
4
Security update
- Bumped socket.io version.
Features and fixes
- Ensured hitting the reset button on the WAYF shows the default IDP
- Ensured that if you click the default idp, it prefills it in the search field, hides all other idps and focuses it.
- Remove weird transition in safari.
- Ensured search works in IE11.
- Amended faulty arrow behaviour.
- Ensured selected idp cookie behaviour works as expected.
- Redesigned the spinner page (form page).
- Added a hover style for disabled accounts.
- Added arrow behaviour on hover as in the old WAYF.
- Coupled cypress tests to the same selectors as the JS.
- Adjusted styling & wording of the PEP page.
Assets
4
- 6.4.2
-
7f8873b -
Verified
This commit was signed with the committer’s verified signature.MKodde Michiel Kodde
Security Update
A bug was present when using trusted proxies. When evaluating the whitelist of the SP behind a trusted proxy, the whitelist of the trusted proxy itself was checked instead of the whitelist of the SP.
In addition to this, some of the translations for the new theme have also been updated
Assets
4
- 6.3.7
-
777a229 -
Verified
This commit was signed with the committer’s verified signature.
Security Update
A bug was present when using trusted proxies. When evaluating the whitelist of the SP behind a trusted proxy, the whitelist of the trusted proxy itself was checked instead of the whitelist of the SP.
Assets
4
- 6.4.1
-
d0272b9 -
Verified
This commit was signed with the committer’s verified signature.
Features and fixes
- The index, debug and cookie pages have been styled to prevent the mixed new and old style that happened. They now all look like the previous OpenConext theme used to look.
- Security and compatibility improvements have been applied.
- The new theme is now the default theme