v0.7.0

Release Notes

Reworked the OIDC implementation.

• Logging in with an existing local account no longer silently connects
  • When both PASSWORD_AUTH_ENABLED and OIDC_ENABLED are both set to true users explicitly connect through the user settings page
  • When only OIDC_ENABLED is enabled, users will be automatically linked if their emails match, with a confirmation pop-up shown
• Connecting to an identity provider removes the account's password
• "Log out from everywhere" now also revokes OIDC sessions
• Support for custom scopes using OIDC_SCOPES (openid always selected)
• Support for PKCE can be enabled or disabled using OIDC_PKCE_ENABLED
• Some other edge cases cleaned up and tested

---

Docker image pushed to Docker Hub:
docker pull zodac/diurnal:0.7.0

Changes since 0.6.2:

[Authentication]

• [4bae5ce] OIDC rework

[CI]

• [5db0cd2] Checking if SonarQube it accessible before adding the profile for the mvn build
• [6ca6680] Prepare next version: 0.6.3

[DB]

• [29f03a0] Removing Object[]

[Documentation]

• [07327cb] Moving .env.example to docs folder

[Testing]

• [6ac7f62] Updating test scripts to work on both Windows and Linux