Skip to content

Release 2.7.1

Compare
Choose a tag to compare
@babelouest babelouest released this 05 Jun 12:55
· 214 commits to master since this release
415e5c3
  • Allow to disable static files server
  • Allow to send an e-mail on password change or scheme registration
  • Add additional CORS related header configuration
  • Add config values cookie_same_site and max_post_size
  • Add additional-parameters to access tokens for client authorization
  • Improve resource parameter in OIDC plugin, remove resource change allowed option
  • If enc algorithms is restricted, show only allowed algorithms in discovery endpoint, and forbid to use these algorithms in client registration
  • Security: Fix deprecated glewlwyd_resource.c bug with token verification