v2.0.0

What's Changed

• fix: log audit entries that fail to save by @artur-rios in #242
• fix: require consent for scope co-ownership by @artur-rios in #240
• docs: finalize the changelog for 2.0.0 by @artur-rios in #244
• release: v2.0.0 by @artur-rios in #245

Full Changelog: v1.7.0...v2.0.0

v1.7.0

What's Changed

• fix: write person columns by target, google tokens once by @artur-rios in #239
• docs: finalize the changelog for 1.7.0 by @artur-rios in #241
• release: v1.7.0 by @artur-rios in #243

Full Changelog: v1.6.0...v1.7.0

v1.6.0

What's Changed

• fix: protect accounts and tokens by @artur-rios in #235
• docs: finalize the changelog for 1.6.0 by @artur-rios in #236
• release: v1.6.0 by @artur-rios in #238

Full Changelog: v1.5.0...v1.6.0

v1.5.0

What's Changed

• fix: move microsoft packages to 10.0.13 by @artur-rios in #180
• feat: list system admins by @artur-rios in #179
• feat: list the audit trail (UC-48) by @artur-rios in #181
• feat: list and discard pending registrations by @artur-rios in #182
• feat: let admins send verification and reset emails by @artur-rios in #183
• feat: application authentication (UC-53 to UC-57) by @artur-rios in #185
• fix: answer 400 for requests that cannot be bound by @artur-rios in #192
• fix: api follow-ups (#187-#191) by @artur-rios in #193
• fix: clear person targets from the audit trail by @artur-rios in #194
• fix: stop command tests timing out on the hash gate by @artur-rios in #197
• fix: clear audit targets of hard-deleted persons by @artur-rios in #198
• fix: make trusted public ids immutable and unique by @artur-rios in #200
• fix: harden sign-in and account changes by @artur-rios in #232
• docs: finalize the changelog for 1.5.0 by @artur-rios in #233
• release: v1.5.0 by @artur-rios in #234

Full Changelog: v1.4.0...v1.5.0

v1.4.0

What's Changed

• chore: adopt the artur rios attribution license by @artur-rios in #168
• feat: self-registration (UC-47) by @artur-rios in #170
• feat: per-scope email links and trusted caller key by @artur-rios in #172
• docs: finalize the changelog for 1.4.0 by @artur-rios in #171
• release: v1.4.0 by @artur-rios in #173

Full Changelog: v1.3.0...v1.4.0

v1.3.0

What's Changed

• fix: publish the docs from the tests run on main by @artur-rios in #160
• build: move the tests to xunit v3 by @artur-rios in #161
• feat: let a restricted subject sign in for their rights by @artur-rios in #162
• fix: let an erasure request lift the restriction by @artur-rios in #163
• build: update arturrios.messaging to 1.4.0 by @artur-rios in #164
• docs: finalize the changelog for 1.3.0 by @artur-rios in #165
• release: v1.3.0 by @artur-rios in #166

Full Changelog: v1.2.0...v1.3.0

v1.2.0

What's Changed

• fix: let a system admin own a scope by @artur-rios in #156
• build: update dependencies to latest stable by @artur-rios in #157
• docs: finalize the changelog for 1.2.0 by @artur-rios in #158
• release: 1.2.0 by @artur-rios in #159

Full Changelog: v1.1.1...v1.2.0

v1.1.1

What's Changed

• fix: serve the health check under /api by @artur-rios in #153
• docs: finalize the changelog for 1.1.1 by @artur-rios in #154
• release: 1.1.1 by @artur-rios in #155

Full Changelog: v1.1.0...v1.1.1

v1.1.0

What's Changed

• feat: adopt util.webapi 5, trust traefik, log ips by @artur-rios in #140
• build: bump swashbuckle.aspnetcore to 10.3.0 by @artur-rios in #142
• build: move to arturrios.data.relational.core 5 by @artur-rios in #143
• docs: add changelog and contributing guide by @artur-rios in #144
• fix: name the real licence in the openapi document by @artur-rios in #148
• fix: close review findings in auth and gdpr flows by @artur-rios in #149
• chore: configure the four deployment environments by @artur-rios in #150
• docs: finalize the changelog for 1.1.0 by @artur-rios in #151
• release: 1.1.0 by @artur-rios in #152

Full Changelog: v1.0.0...v1.1.0

v1.0.0

What's Changed

• feat: complete the data infrastructure by @artur-rios in #1
• UC-03: Update Scope by @artur-rios in #33
• test: UC-01 Create Scope coverage by @artur-rios in #34
• test: UC-02 View Scope coverage by @artur-rios in #35
• UC-04: Logical Delete Scope by @artur-rios in #36
• UC-05: Hard Delete Scope by @artur-rios in #37
• UC-06: Create Person by @artur-rios in #38
• UC-30: Detailed health check endpoint by @artur-rios in #39
• feat: view person (UC-07) by @artur-rios in #40
• docs: add use case status tracker to README by @artur-rios in #41
• feat: update person (UC-08) by @artur-rios in #42
• feat: logical delete person (UC-09) by @artur-rios in #43
• UC-10: Hard Delete Person by @artur-rios in #44
• UC-11: Login (Authenticate) by @artur-rios in #45
• feat: finish UC-02 (View Scope) — per-actor read rule and AF-02b by @artur-rios in #46
• fix: align UC-01…UC-11 with the specification documents by @artur-rios in #47
• UC-12: Request Password Recovery by @artur-rios in #48
• UC-13: Reset Password by @artur-rios in #49
• UC-14: Verify Email by @artur-rios in #50
• UC-15: Resend Verification Email by @artur-rios in #51
• UC-16: Create Application by @artur-rios in #52
• UC-17: View Application by @artur-rios in #53
• feat: update an application's name and owner (UC-18) by @artur-rios in #54
• UC-19: Logical Delete Application by @artur-rios in #55
• UC-20: Hard Delete Application by @artur-rios in #56
• feat: UC-21 add scope owner by @artur-rios in #57
• feat: UC-23 promote user to scope owner by @artur-rios in #58
• feat: UC-24 enable/disable google sign-in by @artur-rios in #59
• UC-22: Remove Scope Owner by @artur-rios in #60
• Implement UC-25: Sign Up / Sign In via Google by @artur-rios in #61
• docs: permit agent merges in authorized batch runs by @artur-rios in #62
• feat: sign out via google (UC-26) by @artur-rios in #63
• feat: view google user (UC-27) by @artur-rios in #64
• feat: logical delete google user (UC-28) by @artur-rios in #65
• feat: hard delete google user (UC-29) by @artur-rios in #66
• docs: describe the google user endpoints in the readme by @artur-rios in #67
• UC-36: Enable Two-Factor Authentication by @artur-rios in #73
• UC-37: Confirm Two-Factor Authentication Setup by @artur-rios in #74
• UC-38: Verify Second Factor (amends UC-11 Login) by @artur-rios in #75
• UC-39: Disable Two-Factor Authentication by @artur-rios in #76
• UC-40: Regenerate Recovery Codes by @artur-rios in #77
• feat: audit logging for write operations (NFR-09) by @artur-rios in #79
• feat: add api client collections and openapi page by @artur-rios in #80
• fix: drop authorize button from api explorer by @artur-rios in #81
• fix: remove black boxes from the api explorer by @artur-rios in #82
• fix: keep server-populated fields out of the public contract by @artur-rios in #83
• build(deps): bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #84
• build(deps): bump actions/checkout from 4 to 7 by @dependabot[bot] in #85
• build(deps): bump actions/setup-node from 4 to 7 by @dependabot[bot] in #86
• build(deps): bump actions/setup-dotnet from 4 to 6 by @dependabot[bot] in #88
• build(deps): bump docker/build-push-action from 6 to 7 by @dependabot[bot] in #87
• feat: add display name to auth tokens by @artur-rios in #89
• Publish a data retention schedule (NFR-19) by @artur-rios in #107
• Purge expired single-use tokens on a schedule by @artur-rios in #108
• Set the application log retention period and add backups to the schedule by @artur-rios in #109
• Set the identity and audit trail retention periods by @artur-rios in #110
• Anonymise logically deleted identities past their retention window by @artur-rios in #111
• Let a data subject request their own erasure (UC-42, UC-43) by @artur-rios in #112
• Record the controller, transfers, privacy notice and DPA by @artur-rios in #113
• Clear audit attributions once they are due (NFR-21) by @artur-rios in #114
• Bound log retention and keep addresses out of the logs (NFR-22) by @artur-rios in #115
• State a purpose for every personal-data column (data minimisation review) by @artur-rios in #116
• Record the lawful basis and notice version for every identity (NFR-23) by @artur-rios in #117
• Let a data subject export their own data (UC-41) by @artur-rios in #118
• Restriction of processing, separate from deletion (UC-44, UC-45) by @artur-rios in #119
• Encryption at rest, backup policy, and reconciling a restore against erasure (NFR-25) by @artur-rios in #120
• Read the security signals nobody was reading (NFR-26) by @artur-rios in #121
• Assess the risks this system creates for people (DPIA / RIPD) by @artur-rios in #122
• Track every issue and milestone in the readme by @artur-rios in #126
• Correct the transfer record and establish its ground without contracts by @artur-rios in #127
• Pass the data protection settings into the container by @artur-rios in #128
• Record the GDPR determination and encryption at rest by @artur-rios in #129
• Collect the security signals, and establish where the backups are by @artur-rios in #130
• Bump dotnet-ef from 10.0.11 to 10.0.12 by @dependabot[bot] in #131
• fix: the challenge token no longer dies before the email code it was issued with by @artur-rios in #134
• feat: UC-46 — resend the emailed code for an outstanding two-factor challenge by @artur-rios in #135
• ci: enforce branching model, deploy via jenkins by @artur-rios in #136
• feat: expose prometheus metrics on a private port by @artur-rios in #137
• docs: point to the yggdrasil catalog and console by @artur-rios in #138
• release: 1.0.0 by @artur-rios in #139

New Contributors

• @artur-rios made their first contribution in #1
• @dependabot[bot] made their first contribution in #84

Full Changelog: https://github.com/artur-rios/heimdall-api/commits/v1.0.0