v1.22.1

1.22.1 (2024-12-12)

Bug Fixes

• addressing CVE-2024-45337 (a53fc20), closes #505

v1.22.0

1.22.0 (2024-12-04)

Features

• actual link authentication users to authorization model + tests (8063b73)
• add /auth/me endpoint handler to return json with principal info (9fa92a3)
• add github.com/wneessen/go-mail v0.4.4 dependency (5182270)
• add HTTPClientFromContext + improved OtelHTTPClientFromContext func (fa1b3e8)
• add payload_validation_enabled config key (419b042)
• add 2 implementations of token verifier + tests (1d1c5f9)
• add AuthCookieManager implementation (ed18cf5)
• add authn middleware for disabled authentication (c232cfe)
• add built verification email (5a43aef)
• add constructor for validator + use json tags for validation errors (44d7223)
• add context path spec to correctly handle redirect (71aef28)
• add custom axios instance (722a331)
• add encrypt implementation (1a88aad)
• add entitlements service by Rebac (64b8326)
• add env vars for mail client (3ab1acb)
• add externalized Kube config file env var (9a63fe3)
• add full validation implementation for schemas (45993ed)
• add granular checks method to interface + expose BatchCheck from client (645a9fd)
• add hydra admin url to config + add comment for env var expectation (b36e498)
• add hydra clients to OAuth2Context struct (0072078)
• add interfaces + implement emailservice (b2f0ae9)
• add interfaces for oauth2 integration (684abac)
• add log tailing to skaffold run (a9725da)
• add login screen (1befe87)
• add Logout function and HTTPClientInterface (98e4ec3)
• add logout handler (5ea5742)
• add logout implementation (3c435d4)
• add NextTo cookie handling to cookie manager and interface (5a5cc30)
• add OAuth2 and OIDC related env vars to the Spec struct (b900cc4)
• add OAuth2 authentication middleware + tests (e054552)
• add oauth2 context to manage oauth2/oidc operations + tests (62bff44)
• add OAuth2 login handler + tests (88c29e6)
• add OAuth2Helper implementation (00c5bc1)
• add pagination to clients, schemas and identity lists in ui. Add identity creation form WD-10253 (5f55463)
• add ResourcesService (f5a2008)
• add SendUserCreationEmail method (0cc1d3f)
• add template loading + test + TEMPORARY mail template (6c95a25)
• add the cli command for compensating user invitation email failure (55f557e)
• add the create-identity CLI (464c697)
• add URL param validation for groups handlers (24c8d99)
• add user invite email template (64743cf)
• add user session cookies ttl external config (b4da23d)
• add validation implementation for clients (549d985)
• add validation implementation for groups (700cf04)
• add validation middlewareonly if payload validation is enabled + reorder middleware and endpoints registration (32814e8)
• add validation setup for groups endpoint (06fb9f4)
• add validation setup for identities endpoint (b4178c9)
• add validation setup for schemas endpoint (8c5e173)
• adjust identity api to accept page token (beb0d42), closes #256
• adjust pagination for schemas endpoints (e2a2df3), closes #44
• adopt new oauth2 integration (912029c)
• cookie + refresh token support for middleware (cab3f84)
• create-group: allow creator user to view group (efcaeec)
• delete-group: delete all relation for group to delete (883b513)
• dependencies: add coreos/go-oidc v3 dependency (fe20b2f)
• display login on 401 responses (5031b32)
• drop LOG_FILE support (1618b13)
• enable authorization by default (6f61651)
• enhance ValidationRegistry with PayloadValidator and adjust in handlers + enhance Middleware + add func for ApiKey retrieval from endpoint ([313617a](https://github.com/canonical/ident...

v1.21.0

1.21.0 (2024-10-18)

Features

• add authn middleware for disabled authentication (c232cfe)
• add granular checks method to interface + expose BatchCheck from client (645a9fd)
• groups: add CanAssignRoles and CanAssignIdentities implementation (b5e551a)
• groups: add granular CanAssign{Identities,Roles} checks in handlers (d25b430)

Bug Fixes

• adopt disabledAuthnMiddleware to not break app when authentication disabled (963f07a)
• api base path (d83e0ab)
• avoid escaping when passing URL to template (0702053)

v1.19.0

1.19.0 (2024-09-20)

Features

• introduce hierarchy for can_relations (596b448)
• wire up all the rebac handlers (f23cc1f)

Bug Fixes

• add uri permissions converters for v1 (9e59915)
• drop ctx param from NewV1Service creation (972bef4)

v1.20.0

1.20.0 (2024-10-09)

Features

• add built verification email (5a43aef)
• add the cli command for compensating user invitation email failure (55f557e)
• add user invite email template (64743cf)
• switch to html/template for rendering context path dynamically for index.html (81f8a9c)

Bug Fixes

• local dev env for OIDC provider discovery (03f5499)
• update email template to fix issues in email clients (3f9726b)

v1.18.0

1.18.0 (2024-09-16)

Features

• add github.com/wneessen/go-mail v0.4.4 dependency (5182270)
• add entitlements service by Rebac (64b8326)
• add env vars for mail client (3ab1acb)
• add interfaces + implement emailservice (b2f0ae9)
• add ResourcesService (f5a2008)
• add SendUserCreationEmail method (0cc1d3f)
• add template loading + test + TEMPORARY mail template (6c95a25)
• add the create-identity CLI (464c697)

Bug Fixes

• add filters to listPermissions store method (84b531a)
• fix the kratos admin url (4846fad)

v1.17.0

1.17.0 (2024-09-06)

Features

• implement GroupService based on the rebac lib (709906b)
• introduce IdentityProviders v1 api (7a2719d)

Bug Fixes

• offload idp types to constant (d15ecf2)
• use correct method to invoke backend (64f68a6)
• use idp ID if passed in (023c8e3)

v1.16.2

1.16.2 (2024-08-30)

Bug Fixes

• address empty schema id but enforce passing of the field (fa915f2)
• enforce id on idp creation, moving validation to validator object (9633937), closes #391
• initialize idps configmap.Data field if empty (fba4479), closes #392

v1.16.1

1.16.1 (2024-08-29)

Bug Fixes

• return empty slice when no idps found (429591a), closes #388

v1.16.0

1.16.0 (2024-08-28)

Features

• display login on 401 responses (5031b32)
• identities service implementation (b840cf4)
• log out with OIDC (4b268aa)
• return to URL that initiated login (99da50a)

Bug Fixes

• create openfga store to enhance basic client and offload core application logic (3f0465b)
• fix wrong title displayed once logged in (5ef6371)
• update tracing signature (d22fad9)