2.3.1

• CIL-1968 Don't send remote_user to dbService

2.3.0

• CIL-1963 Use DynamoDB for PHP sessions
• CIL-1967 Fix issues found during WCAG 2.2 accessibility assessment

2.2.1

• CIL-1917 Update CADRE skin with new images
• CIL-1949 Update BioCommons skin to use latest AAF logo
• CIL-1950 Update LDaCA skin to use latest AAF logo

2.2.0

• CIL-1812 Allow session variables NOT to be output in logs
• CIL-1884 Add logo for RENCI skin

2.1.1

CIL-1812 - Prevent open redirects when just redirect_uri is passed to the /authorize/ endpoint.

2.1.0

CIL-1806 - If requesting the org.cilogon.userinfo scope, assert the uidNumber claim when the SAML-based IdP has asserted the attribute urn:oid:1.3.6.1.1.1.1.0 (commit).
Note: The Shibboleth SP attribute-map.xml must be configured to map urn:oid:1.3.6.1.1.1.1.0 to uidNumber.

2.0.1

CIL-1800 - Fix broken Microsoft OAuth2 logins by forcing version 6.5.0 of the firebase/php-jwt library. v6.6.0 and above changed the parameters for JWT::decode() which causes the oauth2-azure to fail.

2.0.0

Create a "real" release so a Docker image can be built against a specific version number.

Improvements and Bug Fixes:

• CIL-1738 - Assert eduPersonAssurance claim (commit)
• CIL-1751 - Allow multiple IdP metadata sources (commit) (to be used by AAF)
• CIL-1769 - Enable use of database read-only endpoint if available (commit)