v0.7.0

Release Notes

Reworked the OIDC implementation.

• Logging in with an existing local account no longer silently connects
  • When both PASSWORD_AUTH_ENABLED and OIDC_ENABLED are both set to true users explicitly connect through the user settings page
  • When only OIDC_ENABLED is enabled, users will be automatically linked if their emails match, with a confirmation pop-up shown
• Connecting to an identity provider removes the account's password
• "Log out from everywhere" now also revokes OIDC sessions
• Support for custom scopes using OIDC_SCOPES (openid always selected)
• Support for PKCE can be enabled or disabled using OIDC_PKCE_ENABLED
• Some other edge cases cleaned up and tested

---

Docker image pushed to Docker Hub:
docker pull zodac/diurnal:0.7.0

Changes since 0.6.2:

[Authentication]

• [4bae5ce] OIDC rework

[CI]

• [5db0cd2] Checking if SonarQube it accessible before adding the profile for the mvn build
• [6ca6680] Prepare next version: 0.6.3

[DB]

• [29f03a0] Removing Object[]

[Documentation]

• [07327cb] Moving .env.example to docs folder

[Testing]

• [6ac7f62] Updating test scripts to work on both Windows and Linux

v0.6.2

Docker image pushed to Docker Hub:
docker pull zodac/diurnal:0.6.2

Changes since 0.6.1:

[API]

• [34c402b] Adding ETag header to endpoints

[CI]

• [0579485] Adding a docker volume to cache the grype DB in the publish workflow
• [7dc5d24] Generating preview screenshots during build
• [07f1572] Prepare next version: 0.6.2

[Documentation]

• [1d78f29] Fixing out-of-date env vars for auth throttling

v0.6.1

Docker image pushed to Docker Hub:
docker pull zodac/diurnal:0.6.1

Changes since 0.6.0:

[AI]

• [15e7556] Enabling remote control for all sandbox executions
• [979c42a] Using lint_and_test.sh instead of mvn for validation

[API]

• [6dee057] Moving /health to /api/v1/status and providing more info

[CI]

• [898c5da] Fixing SonarQube token secret name
• [e95c2de] Adding a fast-fail option for validation and enabling for publish
• [ed55a4a] Adding execution time to lint_and_test.sh
• [4d150b8] Changing from pre-push githook to pre-commit
• [baaa74e] Adding SonarQube analysis to publish workflow
• [3b0bfd7] Updating commit message hook to ignore comment lines
• [fe78fd4] Prepare next version: 0.6.1

[Testing]

• [98d9c12] Tuning performance test suite for CI runs
• [90123b5] Added performance test suite
• [d12c8fa] Splitting e2e/smoke tests out of pom.xml and putting it into lint_and_test.sh

[UI]

• [1293d27] Styling the scrollbar to match the theme

v0.6.0

Minor Update

Reworking the REST endpoints and public/internal APIs for the application.

---

Docker image pushed to Docker Hub:
docker pull zodac/diurnal:0.6.0

Changes since 0.5.4:

[API]

• [8f9d63a] Consistently exposing APIs for the UI also through REST

[Authentication]

• [5a6973e] Blocking the creation of a user through API/OIDC unti the initial admin is created

[CI]

• [4794da3] Making the local .grype.yaml file optional
• [8f52db6] Prepare next version: 0.5.5

[Dashboard]

• [c6e70a9] Cache evication should never target current month +/-1, since those are used by 'jump to today' functionality

[Documentation]

• [7490d86] Adding screenshots for other pages to the README

[Testing]

• [dd1f708] Adding test case to ensure OIDC accounts don't confict with non-OIDC accounts
• [ff99680] Made flaky test more robust

[UI]

• [b17fea5] Versioning the preview images so they are not cached too aggressively

v0.5.4

Docker image pushed to Docker Hub:
docker pull zodac/diurnal:0.5.4

Changes since 0.5.3:

[CI]

• [e780339] Prepare next version: 0.5.4

[UI]

• [58a302f] Added OpenDyslexic font option, reworked some of the user settings into enums

v0.5.3

Docker image pushed to Docker Hub:
docker pull zodac/diurnal:0.5.3

Changes since 0.5.2:

[CI]

• [7c3ad31] Prepare next version: 0.5.3

[Project]

• [3bf3f2c] Restructured project directories

[UI]

• [109523b] Large rework of UI partials, removing comments, improving gzip compression

v0.5.2

Docker image pushed to Docker Hub:
docker pull zodac/diurnal:0.5.2

Changes since 0.5.1:

[CI]

• [dba20ef] Updating the Checkstyle config for strict indents, and applied some other styling rules to CODE_STYLE.md
• [319574c] Prepare next version: 0.5.2

[Dashboard]

• [f97653f] Fixing potential race condition for concurrent sessions logging the same action

v0.5.1

Docker image pushed to Docker Hub:
docker pull zodac/diurnal:0.5.1

Changes since 0.5.0:

[API]

• [04a3618] Updating the /api/users/me endpoint to return all user preferences

[Actions]

• [22dd922] Performing a hard delete for deleted actions, instead of archiving

[CI]

• [e18569f] Prepare next version: 0.5.1

[Logging]

• [eb10fe8] Logging user details when all sessions are revoked
• [1782a8a] Added DEBUG and TRACE logging for application requests

[Project]

• [a8bca9f] Using the Role enum consistently throughout the project instead of hardcoding

[Settings]

• [e34fb61] Value pickers will not send a request to the backend uness the value changes
• [1bac5d5] Blocking the change password flow from progressing until each field is correctly populated

[UI]

• [dff4468] Only send request to backend on user/action edit if there has been a change
• [1cd84a2] Several UI fixes and updates

v0.5.0

Minor Update

Implemented a CSP for the application, and clarified that TLS-termination should be handled by a reverse-proxy.

---

Docker image pushed to Docker Hub:
docker pull zodac/diurnal:0.5.0

Changes since 0.4.0:

[CI]

• [5dbfa4b] Prepare next version: 0.4.1

[Documentation]

• [25f118f] Removing CONTRIBUTING.md

[Security]

• [fadb418] Implementing CSP for application

v0.4.0

Docker image pushed to Docker Hub:
docker pull zodac/diurnal:0.4.0

Changes since 0.3.1:

[API]

• [6571dcd] Setting project version in Swagger UI

[Admin]

• [fdf8303] Showing user creation/login times in current user's configured timezone

[Authentication]

• [02733d1] Using an IP-based login/registration lockout for rate-limiting instead of account-based
• [0a23166] Disabling registration/login button until all fields are filled
• [3941c79] Logging user in immediately on registration
• [ae226fe] Setting psw4j properties file

[CI]

• [bfc4ac9] Prepare next version: 0.3.2

[Dashboard]

• [e980dbb] Updating the entries for stacked view to be consistent for mobile and desktop

[Settings]

• [10883ae] Scaling down number picker (for pagination/decimal places) to be similar in size to preset values
• [731c3fb] Updating decimal place option to be a similar style to pagination option

[UI]

• [bf1b658] Centring logo on login page