Welcome to OA4MP 6.3.0
This release includes fixes for the following issues:
- #100 - Client management error must always be JSON
- #107 - Using proxy mode for authentication allows for showing local consent
- #236 - allow prompt=none in initial request, but only for specific clients
- #282 - Enforce JWK expiration timestamp
- #283 - (QDL support) Refactor store accessors to allow for stems
- #284 - (QDL support) expose if the client has had its debug enabled. Mostly this is so QDL programmers can turn up local debugging in QDL to match if needed.
- #285 - (QDL support) Create OA2State object for the system to certain OA4MP specific modules can run in scripts, not just in the server runtime.
- #286 - (QDL support) Give understandable ACL errors, rather than a dump
- #290 - Fix relative path issue in scopes that are URIs.
- #292 - Critical bug in old JSON library. Update Library to a new, supported version
- #295 - (CLI support) changing the ID of a client was not changing any associated ersatz client IDs, leaving hard to track down orphans.
- #297 - Allow clients to have their own custom scope lists, independent of the server.
- #299 - Update Client management to allow for custom scope lists
- #301 - Inconsistent internal handling of cancel button on forms needed to be rectified.
- #304 - (QDL support) Add support for key store
- #305 - Create default VI when migrating keys
- #306 - (CLI)_ Formatting issues
- #308 - (QDL support) allow sets in claims utilities.
- https://jira.ncsa.illinois.edu/browse/CIL-1637 -- issuer key rotation support
See also
- NCSA Security Library updates https://github.com/ncsa/security-lib/releases/tag/v6.3.1
- the QDL release page for updates there: https://github.com/ncsa/qdl/releases/tag/v1.6.3.1