0.1.0
First stable release.
This version supports MFA authentication via the DeviceAuthorizationGrant flow.
Himmelblau uses hardware TPM for offline password hash caching.
Communication to Entra ID is performed using Microsoft's stable Python MSAL library. All other code is written in Rust.
Himmelblau utilizes systemd DynamicUser, so the himmelblaud daemon is sandboxed without root access.
The pam_allow_groups config entry restricts authentication strictly to authorized users or groups.