5.1

What's Changed

• feat: store authorization request pre-login and expose to idp by @matteo-s in #568
• Update AACBootstrap.java by @nawaz2013 in #573
• fix #585 add possibility to import Service by string pasting by @gianpaolo-tndigit in #586
• fix #582 add primary key to audit table by @gianpaolo-tndigit in #584
• 5.x spid by @thomaschiozzi-tndigit in #587
• 5.1 by @matteo-s in #589

Full Changelog: 5.0.3...5.1

5.0.3

(2024-03-27)

Features

• database connection pool configurable via props (88f3925)
• indexes on attributes table for mysql #558 (e866296)
• indexes on attributes table for postgresql #558 (0f91f9a)

Bug Fixes

• #541: cleanup orphan accounts when deleting a user (6b619fe), closes #541
• #562: correct sql query for audit store pagination (70fe67e), closes #562
• changed userinfo behaviour 544 (8e1c84f)
• class enforce default script option when missing (5b68345)
• delete orphan user accounts when deleting a realm (ef2d1a7)
• new config to support #547 (334a4c0)
• pagination for audit events (b2ffaea)
• updated config file for params injection via annotation (03d990e)

What's Changed

• fix #542: fix reset query page by @elisanp in #543
• fix: changed userinfo behaviour #544 by @thomaschiozzi-tndigit in #545
• fix: new config to support #547 by @thomaschiozzi-tndigit in #548
• fix #549: pagination and filter for identity and attribute providers by @elisanp in #550
• added timestamp as version to custom idp from app.yml by @thomaschiozzi-tndigit in #553
• fix #554: pagination for audit events by @elisanp in #555
• fix 556: skipped invalid providers in fed when creating login by @thomaschiozzi-tndigit in #557
• feat: indexes on attributes table for postgresql #558 by @thomaschiozzi-tndigit in #559
• fix #538: add button to delete title and description map in idp by @elisanp in #561
• 5.0.3 by @matteo-s in #566

5.0.2

First major release for AAC 5.

✨ What's new

• user console
• support for OpenId Federation
• configurable Terms of service
• support German language
• new supported databases: PostgreSQL, MariaDB, MySQL8
• new audit trail with optional signing
• external repositories for horizontal scaling
• localizable custom templates for views

📚 Notes

• no upgrade path from 4.x: start with an empty database or manually upgrade the schema

🚨 Breaking Changes

• database layout changed
• audit table content is incompatible with 4.x

What's Changed

• ConfigMap by @matteo-s in #234
• Identity services refactor by @matteo-s in #247
• Templates 18n by @matteo-s in #259
• Bootstrap refactor by @matteo-s in #267
• update bootstrapconfig load + add oauth2 client bootstrap by @matteo-s in #274
• introspect application type by @matteo-s in #275
• User console by @matteo-s in #139
• external repositories by @matteo-s in #287
• User console updates by @matteo-s in #307
• add possibility to log on SMTP server without username and password by @gianpaolo-tndigit in #305
• update oidc authority: make sub configurable to support facebook by @matteo-s in #308
• Password reset flow by @matteo-s in #309
• update login controller to avoid bypass if one registration provider … by @matteo-s in #310
• add second level path to security filter for actuator health probes subgroups by @gianpaolo-tndigit in #329
• enhancement: aggiunta traduzione in tedesco by @elisanp in #333
• fix #330: SuperAdmin can now assign roles/authorities to client applications by @elisanp in #338
• fix #335: update client secret basic auth converter to not throw exception when attempting conversion by @elisanp in #337
• Test suite by @matteo-s in #355
• fix #209: audit timestamp visualization has been restored by @elisanp in #354
• #360 enable POST endession URL and rename endsession confirm by @gianpaolo-tndigit in #378
• Checkstyle by @matteo-s in #395
• Update realm.templates.html to fix dev console templates view by @nawaz2013 in #399
• fix #405 username is correctly put in field username by @gianpaolo-tndigit in #407
• fix endsession URL, the previous was not reachable by @gianpaolo-tndigit in #406
• fix #359: fixed language handler interceptor to keep track of query params by @elisanp in #401
• fix #334: added missing UI configuration fields for Webhook OAuth Flow Extensions by @elisanp in #402
• Terms of service by @nawaz2013 in #397
• 4.3 by @matteo-s in #410
• Resources refactor by @matteo-s in #419
• fix #409: add validation for missing redirect uri with openid scope by @elisanp in #426
• fix #427 console now can load and save hookfunctions by @gianpaolo-tndigit in #428
• fix #432: persist Login Service Location value from the dev console by @elisanp in #433
• templates: update email regex to include valid chars by @matteo-s in #439
• fix #436: register time module to object mapper for serialization by @elisanp in #441
• 5.x update to opensaml4 by @thomaschiozzi-tndigit in #445
• test saml identity provider metadata by @elisanp in #434
• Test for Saml IdP Configuration by @thomaschiozzi-tndigit in #430
• 5.x.OIDC fix post endsession and authorize by @gianpaolo-tndigit in #425
• 5.x bufgix tos redirect by @thomaschiozzi-tndigit in #450
• fix #451 console can save and load attribute providers settings by @gianpaolo-tndigit in #452
• fix #455 custom attribute set are now displayed by @gianpaolo-tndigit in #456
• OAuth2 OIDC metadata generators by @matteo-s in #457
• Bugfix SAML new accounts by @thomaschiozzi-tndigit in #453
• Languagefix by @nawaz2013 in #459
• Openid federation by @matteo-s in #465
• 5.x fix saml ctx by @thomaschiozzi-tndigit in #476
• New audit trail by @matteo-s in #477
• Fixes for reserved words mysql8 by @nawaz2013 in #485
• fix #486: register time module to object mapper for serialization by @elisanp in #491
• claims family_name is overwritten only if surname exists by @thomaschiozzi-tndigit in #494
• add email to realm and update mail templates by @matteo-s in #503
• User credentials fixes by @matteo-s in #508
• add index to postgresql schema by @thomaschiozzi-tndigit in #509
• added safestring annotation by @thomaschiozzi-tndigit in #512
• bugfix double code return by @thomaschiozzi-tndigit in #510
• fix reference to refactored schema by @thomaschiozzi-tndigit in #514
• fix #515 by @thomaschiozzi-tndigit in #516
• simplified customization by @thomaschiozzi-tndigit in #518
• added saml acr assertion into auth context by @thomaschiozzi-tndigit in #504
• Proposal for enchancement #505 by @thomaschiozzi-tndigit in #519
• added log to critical prov.s when doAuthenticate fails by @thomaschiozzi-tndigit in #479
• fix: information disclosure #530 by @thomaschiozzi-tndigit in #536
• feat: proposal for #531 by @thomaschiozzi-tndigit in #532
• 5.0.2 by @matteo-s in #537

New Contributors

• @gianpaolo-tndigit made their first contribution in #305
• @thomaschiozzi-tndigit made their first contribution in #445

Full Changelog: 4.1.1...5.0.2

5.0

update user console to logout user after deletion - fix #323

4.1.0

Merge pull request #231 from scc-digitalhub/4.x

4.1.0

4.0

fix databae config for groups package

3.2

Merge pull request #42 from scc-digitalhub/next

Next

3.2-beta3

breaking: relax client name rules, require unique clientName+develope…

3.2-beta1

Updated db model, requires manual upgrade

3.1-beta5

Client claims management