Changelog#
1.16.0 (2026-01-22)#
Features#
- charts: make Gateway ports configurable and support Gateway in janssen helm chart (#12995) (583b64c)
- charts: support gateway api in janssen-aio (#12907) (f5077ae)
- client certificate authentication casa plugin (#12927) (6d80354)
- cloud-native: add feature to update config-api scopes sync from template (#12909) (17d0462)
- cloud-native: support for additional schema files (#13011) (ac78d8b)
- config-api: feature wise admin scope for endpoints (#12736) (a02118e)
- core: fix deps2 (#12965) (19ad682)
- core: merge logging changes from gluu4 (#12871) (1fabadb)
- correct the jans_assets scopes names (#13025) (02409e4)
- introduce roundTripMaxTime config property (#13009) (e5ab6dc)
- jans-auth-server: Added configurable rate limiting for authentication endpoints to prevent brute-force attacks #12664 (#12868) (7a5f846)
- jans-auth-server: sanitized log in AuthenticationService #12958 (#12959) (ba21b2f)
- jans-auth: remove old jackson2 dependency (#12886) (31e31cf)
- jans-cli-tui: additional config-api parameters (#12914) (819a206)
- jans-cli-tui: remove Admin-UI plugin (#12893) (28a40a0)
- jans-config-api: change in process of accessing config-api endpoints in Admin UI (#12983) (7b984ee)
- jans-core: remove tika-core from jackrabbit-core deps (#12960) (75fa989)
- jans-core: removed FILE script type (48b8080)
- jans-core: removed FILE script type #12997 (#12998) (48b8080)
- jans-linux-setup: flex update requirements (#12985) (a9eb502)
- jans-linux-setup: introduce Mako templating engine (#13054) (1b904a9)
- jans-linux-setup: update the renamed scopes in role-to-scope mapping (#12899) (ec72a0f)
- jans-pycloudlib: add support for user session-level postgres schema selection (#12889) (b8cc3ab)
- jans-tarp: implement Cedar-Policy-Aware AI Agent Scaffolding in jans-tarp (#12806) (6e1646a)
- orm: add method to check data after entry update (#12873) (03a48e7)
- send 403 - Forbidden error code in response if Admin UI requests Config API with expired session. This will indicate to Admin UI to logout. (#13022) (a2701ae)
- update the renamed scopes in role-to-scope mapping (ec72a0f)
Bug Fixes#
- admin-ui: failed logout on tarp (#12882) (6e4be8a)
- AdminUICookieFilter should not be called in Jans installation (#13041) (2f2675f)
- cloud-native: set restrictive file permissions on SQL property files containing credentials (#12901) (280b2f7)
- config-api: client secret getting encrypted (#12930) (7b73e80)
- docker-jans-cloudtools: add type validation for --limit parameter (#12946) (4fdd2dd)
- docs: add PostgreSQL-related commands to Docker install quick start (#13032) (ad0147d)
- docs: broken links in Authorization Endpoint (#12243) (#12745) (42225c6)
- docs: fix linting issues - trailing spaces and EOF newline (#12879) (734f644)
- docs: fix linting issues - trailing spaces and EOF newline (#12859) (05683c2)
- docs: Set CEDARLING_JWT_SIG_VALIDATION to "disabled" (#12917) (c4665b4)
- docs: update contribution guide, jans README, and Docker Compose… (#12990) (4887ac7)
- fix build error (#13040) (97d5cf0)
- fix error in signing firefox extension for self distribution (#13053) (22ec96f)
- jans-auth-server: fix build after dependencies upgrade (tika) #12971 (#12972) (43acf6a)
- jans-cedarling: fix benchmarks to actually work (#12923) (4518da7)
- jans-cedarling: Fix cedarling to handle domains in different cases (upper and lower) (3e61fb1)
- jans-cedarling: Fix cedarling to handle iss in different cases (#12982) (3e61fb1)
- jans-cedarling: fix entities mapping for not required entities (#13024) (f9caf73)
- jans-cedarling: remove nested field parsing in trusted_issuer parser (#13005) (bedac4d)
- jans-cli-tui: check if log exists before iteration (#13003) (293b13e)
- jans-cli-tui: display confirmation message after saving jans-lock server config (#12911) (3884dcd)
- jans-cli-tui: scim configuration param disableExternalLoggerConfiguration (#12918) (84ac4fa)
- jans-cli-tui: support only db location for custom scripts (#12987) (6d88aa1)
- jans-config-api: move AdminUICookieFilter to Admin UI plugin (#13050) (40f41f5)
- jans-config-api: the session check should be excluded for certai… (#13031) (c7f6cda)
- jans-keycloak-integration: bump libraries with cve vulns #12992 (#12993) (4317fdf)
- jans-linux-setup: typo (#13047) (03d4655)
- refactor DN parsing (#12935) (67adb65)
- terraform-jans-provider: missing grant types in terraform oidc client resource (#12999) (610ab26)
- update override_sql_ssl_property in sql.py to prevent SSL proper… (#12878) (ab84ff7)
- vulns and docs bullet points (#12940) (c807bdb)
1.15.0 (2025-12-19)#
Features#
- cloud-native: add ability to run persistence to update entries (#12760) (4fab8b1)
- cloud-native: add support for enabling/disabling Casa admin console (#12771) (376237b)
- config-api: User search by mobile number not functioning and Swagger API schema changes (#12704) (63c9c98)
- demo: mcp server for Janssen config api (#12778) (dd1930b)
- jans-auth-server: allow to run update token scripts universally (even if it's not assigned to client) #12837 (#12844) (1946606)
- jans-auth-server: introduced interception script for tx_tokens #8376 (#12724) (a1d9d23)
- jans-auth-server: introducing interception script for tx_tokens (a1d9d23)
- jans-auth-server: make sessions time check configurable for high latency environments when defaultPromptLogin=true #12802 (#12821) (ebea173)
- jans-auth-server: upgraded status list implementation to latest draft 13 (from 02) #10097 (#12783) (f045fba)
- jans-cedarling: Multi-issuer authorization feature for Cedarling (#12503) (334a235)
- jans-config-api: configuration changes to handle clientSecret in response (#12847) (2738d91)
- jans-fido2: added the final fixes and calls to the metrics-func… (#12800) (aca7ea9)
- jans-fido2: added the metrics aggregations and analytics (#12405) (9d80cda)
- jans-pycloudlib: add support for connecting to cloudsql via cloud auth proxy (#12788) (192c071)
- orm: add mysql-socket dependecy (#12824) (30ece77)
- orm: add postgres-socket-factory (#12827) (f99adc1)
- terraform-provider: add agama and config data sources (#12855) (e9fea40)
Bug Fixes#
- config-api: error message not indicating exact cause that SP name already exists (#12830) (2189ef4)
- config-api: user birthday not displayed when fetched #12799 (#12803) (a1e3b6d)
- docker-jans-persistence-loader: preserve the order of columns when creating the table (#12818) (a8790f4)
- docs: align Cedarling docs file naming and structure with navigation (#12710) (3e76bab)
- docs: fix linting issues - trailing spaces and EOF newline (#12731) (6f84f97)
- docs: fix linting issues - trailing spaces and EOF newline (#12849) (6f1837d)
- docs: fix linting issues - trailing spaces and EOF newline (#12758) (b7b0d02)
- docs: fix linting issues - trailing spaces and EOF newline (#12766) (89bc4dc)
- docs: fix linting issues - trailing spaces and EOF newline (#12835) (37c20f9)
- docs: fix linting issues - trailing spaces and EOF newline (#12840) (917e56f)
- docs: fix linting issues - trailing spaces and EOF newline (#12843) (2377415)
- docs: Set CEDARLING_JWT_SIG_VALIDATION to "disabled" (#12854) (7873d25)
- docs: update PostgreSQL installation command (#12709) (502d0db)
- docs: updated Cedarling Intro Diagram (#12738) (d6b9f40)
- failed authentication is not handled in jans-tarp (#12721) (4bdfb0e)
- git package is not installed during execution of startjanssenmonolithdemo script (#12725) (c29cbab)
- jans-auth-server: ExternalTokenExchangeService.externalValidate returns null instead of result (#12809) (470badd)
- jans-auth-server: ExternalTokenExchangeService.externalValidate() returns null instead of result #12804 (470badd)
- jans-auth-server: put in access_token and id_token jwt only explicitly requested and allowed claims (#12848) (a19d82d)
- jans-cedarling: Add LSP support for Cedarling python errors bindings (#12807) (033e792)
- jans-cedarling: Improve caching JWT tokens to make it more deterministic (#12797) (c9dc41a)
- jans-cedarling: Update cedarling initialization to run with no trusted issuer (#12455) (4cf1bf2)
- jans-cli-tui: hide passwords in log files (#12795) (a881a6f)
- jans-cli-tui: sort user claims (#12755) (ac255bd)
- jans-cli-tui: update claims after making attribute active/inactive (#12757) (abb7d97)
- jans-cli-tui: we should not allow editing acrMappings in properties screen (#12815) (e9e5450)
- jans-cli-tui: window too small error for multivalued user claim (#12752) (796c2fe)
- jans-fido2: remove unused conflicting reference to jans-auth (#12779) (7400575)
- need to map missing permissions to the admin role (#12773) (20dda1e)
- orm: force to use latest java-protobug to conform mysql 9.5 version (#12828) (09506a1)
- remove wrong nginx.org annotation (#12846) (611af91)
- replace bitnami's commercial images and helm chart with kubernetes manifests using free official mysql and pgsql images (#12737) (cb42d71)
1.14.0 (2025-11-18)#
Features#
- changes in endpoints used in Admin UI for cedarling integration (#12652) (458abbb)
- cloud-native: add policy store file for admin-ui and cedarling integration (#12659) (621e303)
- core: allow to reuse cluster node services (#12506) (a1f56c9)
- core: update jython to v2.7.4 (#12394) (2776762)
- implement token cache (#12687) (88d8e89)
- jans-auth-server: adding interception script for PAR #10556 (#12334) (7027c1c)
- jans-config-api: rest endpoint specifications for Cedarling integration in Admin UI (#12388) (7d4f3f2)
- jans-linux-setup: Admin UI and Cedarling integration (#12572) (a3f75eb)
- jans-linux-setup: jans-lock-cedarling custom lib (#12590) (4ffb47a)
- jans-lock: audit server actions (#12588) (dcb2fbd)
- jans-lock: log audit status (#12600) (e726a9e)
Bug Fixes#
- cloud-native: add missing jans-lock policy (#12402) (7c3f0b6)
- cloud-native: escape special characters used in database credentials (#12565) (1501723)
- cloud-native: unable to decode cedar policy schema base64 (#12631) (2fb4c26)
- config-api: agama deployment metadata type fix for deployment (#12374) (6dd0db3)
- docs: add contact email address for CLA contributions (#12684) (108356e)
- docs: autogenerate docs (#12656) (ada29b2)
- docs: broken link in the Run integration tests #12233 (#12274) (8076bf1)
- docs: correct broken link in prompt create page (#12399) (b485d89)
- docs: correct broken links in External Libraries documentation (#12540) (a812b53)
- docs: fix broken link in client-registration.md (#12545) (e67dcae)
- docs: fix broken link with revision and testing (#12539) (257597d)
- docs: fix link of cedarling in a javascript app (#12593) (d72c853)
- docs: fix link of Cedarling Rust Developer Guide (#12592) (2250afb)
- docs: fix link of Client Registration scripts link (#12591) (dae2ca5)
- docs: fix link of Token Endpoint (#12685) (cdd657a)
- docs: fix link to Cedarling TBAC quickstart in Python docs (#12558) (cad0a0e)
- docs: fix link to ConfigApiInterception script (#12528) (adb84ae)
- docs: Fix link to dynamic scope script in userinfo.md (#12519) (fd54f1e)
- docs: fix link to end session interception script (#12520) (79f2174)
- docs: fix link to Persistence Extension documentation (#12452) (7cab7b0)
- docs: fix typo in trusted issuers section of documentation (#12569) (1462da7)
- docs: update broken link in Access Evaluation Endpoint (#12527) (f789e0a)
- docs: update jans
UbuntuandUsing CLI/TUIdocs (#12466) (38983c3) - jans-auth-server: swagger yaml has bad identation #12422 (#12423) (45815a0)
- jans-casa: resolve multiple device registration and passkey imag… (#12501) (e2782c2)
- jans-casa: resolve multiple device registration and passkey image styling issues (e2782c2)
- jans-cedarling: Add namesapce support for default entities and parse Cedar JSON format (#12462) (92a0034)
- jans-cedarling: disable hash checking in sidecar (#12481) (81b0ea0)
- jans-cedarling: FIx boostrap properties documentation (#12420) (00dddae)
- jans-cedarling: Fix retrieving resource entity from default entities (#12544) (b9379e0)
- jans-cedarling: Update rust toolchain because dependency lib was updated (#12457) (a8a6d3c)
- jans-cli-tui: role is admin not api-admin (#12688) (f5fa229)
- jans-config-api: inum of duplicate scopes (#12411) (25b3b6a)
- jans-linux-setup: path of cedarling_core.json (#12477) (02f2269)
- jans-linux-setup: remove argument --enable-scim-test-mode (#12479) (074ae1d)
- jans-pycloudlib: column type mismatch on DATETIME (#12653) (04d297c)
- jans-pycloudlib: upgrade urllib3 version to v2.5.0 (#12425) (a871019)
- setup: fix jython repository (#12410) (02f1860)
Miscellaneous Chores#
1.12.0 (2025-09-22)#
Features#
- cloud-native: add support for SSL connection to persistence (#12198) (65819db)
- config-api: scope update for ssa endpoint (#12191) (8969c61)
- expose API to manage user tokens (#12144) (f01c35b)
- jans-linux-setup: add add password grant type to scim client for testing (#12142) (2353341)
- jans-linux-setup: PostgreSQL SSL support (#12195) (5d9ff98)
- jans-pycloudlib: add low-level support for SSL persistence connection (#12194) (a9bbd27)
Bug Fixes#
- config-api: ssa delete endpoint and fix to admin-ui-permission delete endpoint fix (#12174) (d354881)
- jans-cli-tui: Admin UI Roles (#12162) (324c07f)
- jans-cli-tui: error saving auth logging (#12172) (fd7e117)
Miscellaneous Chores#
1.11.0 (2025-09-11)#
Features#
- config-api: audit for config-api endpoint (#11895) (5088857)
- config-api: endpoint to return table info (#11866) (bd94675)
- config-api: lock and fido2 config and scim audit changes (#12107) (cb004f8)
- increase the validity period of tokens in tarp to one day (#11900) (8b0195e)
- jans-auth-server: added cookie interception script #366 (#11975) (aa47c7f)
- jans-auth-server: created interception script for Logout Status JWT #11250 (#11930) (19728e0)
- jans-auth-server: provided configuration for changing case-sensitivity of FAPI response #11394 (#12018) (e388493)
- jans-auth-server: updates to Audience Values for OAuth 2.0 Authorization Servers #11842 (#11851) (e71c35b)
- jans-auth: add type prefixes to each keys which application stores in cache #11565 (#11871) (0a4fe05)
- jans-auth: handle gzip compressed token responses (#12052) (cbde4d6)
- jans-cedarling: Support
default_entitiesinpolicy_stores(#11936) (0ea7511) - jans-cedarling: use hashes for ID in fields (#10853) (5c9423a)
- jans-cli-tui: audit log tab for Config Api (#11931) (992a9cc)
- jans-config-api: restore jans-config-api plugins jans-link-plugin (#11912) (2941a9f)
- jans-config-api: ssa revoke endpoint should be created in config-api (#12134) (e0cbefc)
- jans-core: update jetty to 12.0.25 (#12075) (9781cdb)
- jans-linux-setup: add scim user tokens scope (#12136) (e6c0dc9)
- jans-linux-setup: redirecting errors on stderr for the scheduler (#12013) (b00469b)
- offer a way to easily copy the tokens to clipboard (#11949) (053d95e)
Bug Fixes#
- add no gorn mode (#12011) (46fc7c4)
- cloud-native: error running kc-jans-scheduler (#12053) (86c2fed)
- cloud-native: invalid pathType when nginx ingress controller uses strict-validate-path-type config (#11911) (ba6f74b)
- config-api: asset endpoint fix for uplaod and fetch (27f800a)
- config-api: asset endpoint fix for upload and fetch (#12039) (27f800a)
- css style for paragraph rendering (#12014) (e3fd6ee)
- docs: fix broken links issue (#11902) (7b94ab4)
- docs: fix formatting in Jans README (#11938) (4766343)
- docs: fix person authentication docs url issue (#12103) (600bbce)
- docs: fix person authentication url issue (600bbce)
- docs: Fix script link issue (7b94ab4)
- docs: include benchmark doc link (#11987) (2b3663a)
- docs: Lock Server Docs Update (#12032) (c666eb9)
- docs: merge the Cedarling quick start guides (#11872) (1686099)
- docs: remove doc readme (df7184e)
- docs: remove duplicate
interception-scriptsfile (83ac957) - docs: remove duplicate
interception-scriptsreadme file (#11963) (83ac957) - docs: remove unused README (#12104) (df7184e)
- docs: update `application-session (79e71b5)
- docs: update `readmeformat (4766343)
- docs: update doc
SMTP configurationin TUI section (#12105) (0229a6d) - docs: update endpoint file title (#11962) (34356f4)
- docs: update java Cedarling docs (#12102) (66c9d3e)
- docs: update java doc (66c9d3e)
- docs: update link to the script location (#11940) (79e71b5)
- docs: update TARP installation instructions (#11856) (41d08d9)
- ignore trailing slash of issuer (5fc0ed5)
- jans-auth-server: acr mappings (alias) does not work if acr comes from request object's "claims/id_token" (#12060) (93df359)
- jans-auth-server: client registration script jwks is not used during validation #12036 (#12037) (8522af5)
- jans-casa: resolve session validator exception (#12061) (9dfba6b)
- jans-cedarling: Cedarling JWT validation with array aud claim handling (#11993) (990c0c4)
- jans-cedarling: Fix auth0 trailing slash issue in issuer validation (#11998) (5fc0ed5)
- jans-cedarling: fix krakend plugin to reflect resource changes (#11898) (5c2fdb9)
- jans-cli-tui: avoid logging plain texts (#11903) (3592837)
- jans-cli-tui: hide logging plain text password when changing user password (#12129) (1d5594f)
- jans-cli-tui: move fido2 hints to dynamic conf (#11861) (1e02fcc)
- jans-cli-tui: pagination AIP change for repositories endpoints (#11906) (cb25fa7)
- jans-keycloak-integration: added exclusions for dependencies already provided by quarkus #12001 (#12003) (a2434a0)
- jans-keycloak-integration: keycloak versioning issues #12019 (#12021) (dada481)
- jans-linux-setup: anssen and Gluu SQL field size snyc (8895a92)
- jans-linux-setup: chown jetty:jetty /opt/idp (#12108) (7d40caf)
- jans-linux-setup: fido2 test setup fixes (#11929) (d99a5f2)
- jans-linux-setup: github API endpoint changes for agama projects (#11908) (22a7b1f)
- jans-linux-setup: jans-scim-model.jar is not a provider for KC (#11969) (1f579ef)
- jans-linux-setup: Janssen and Gluu SQL field size sync (#11989) (8895a92)
- jans-linux-setup: KC version 26.3.2 (#11892) (b13de19)
- jans-linux-setup: missing py libs for suse (#12109) (38b61ad)
- jans-linux-setup: missing python libs for rhel-8 (#12056) (76724f3)
- jans-linux-setup: redirect kc start error to logs (1f579ef)
- jans-linux-setup: remove redirecting of SE to file for KC (#12065) (516cce0)
- jans-linux-setup: session argument for get_sqlalchObj_for_dn (#11935) (61cde98)
- jans-linux-setup: typo in Line 551 of scritps.ldif cookie -> logout_status_jwt #12077 (#12078) (07e8efd)
- jans-lock: fix config endpoint URL (#11915) (604f7d2)
- README: Add information about project stages (#11854) (cd2f1ec)
1.9.0 (2025-07-24)#
Features#
- add check to prevent unsigned user-info jwt in the role_based_scopes_update_token script (Admin UI) (#11724) (52c4682)
- add the mandatory permissions for default roles in Admin UI (#11711) (9a56669)
- added essentialPermissionInAdminUI attribute to AdminPermission object (#11714) (d945703)
- cloud-native: add the mandatory permissions for default roles in Admin UI (#11739) (7831887)
- config-api: audit for config-api endpoints (#11760) (be52530)
- config-api: logs to indicate password related activity (#11791) (838686b)
- jans-auth-server: deprecated /revoke_session endpoint (it duplicates Global Token Revocation functionality) #11470 (#11801) (d7178aa)
- jans-auth-server: improved SessionIdService - added option to load session without local copy #11366 (#11761) (4510bd2)
- jans-auth-server: small improvement of ssa doc #11736 (#11737) (7a6af91)
- jans-auth: exclude htmlunit-* dependencies from final artifacts (#11830) (1c17b6d)
- jans-auth: fix client_registration script imports (#11705) (8b75934)
- jans-cedarling: add maven javadocs plugin in java binding (#11745) (f68e936)
- jans-cedarling: add support for the optional SSA JWT (#11653) (902f9d0)
- jans-cedarling: implement JWT status list validation (#11520) (f2e7f29)
- jans-cedarling: output cedar annotations when there are any policy failures (#11588) (0714a17)
- jans-config-api: add cedarlingLogType attribute in Admin UI configuration (#11755) (d4da957)
- jans-config-api: add endpoint to reset license details in Admin UI configuration (#11786) (56df1e6)
- jans-config-api: update OpenApi specs for Admin UI plugin (#11729) (4dc0c9a)
- jans-fido2: Add unit tests for attestation controller for handling missing username, invalid origin, and challenge, with successful register and verify scenarios. (ca68fd0)
- jans-linux-setup: add Debian 13 MySQL support (#11759) (7fbcd10)
- jans-linux-setup: create clients takes all possible arguments (#11770) (eca4b0c)
- jans-linux-setup: debian 13 support for internal use (#11685) (7b6e25b)
- jans-orm: add method to return internal information about tables (#11695) (7039b74)
- update OpenApi specs for Admin UI plugin (4dc0c9a)
Bug Fixes#
- add defeat the gorn (5ed2dcd)
- config-api: user name validation modification (#11776) (45386c1)
- doc: added default values for sessionId related properties to avoid confusion (#11781) (0894860)
- docs: add documentation for configuration and session management (#11091) (0184771)
- docs: add note on config refresh behavior in TUI (#11789) (b237d19)
- docs: add upgrade note about manual custom script updates (#11719) (8a6e3db)
- docs: docs fix cedarling propertie link issue (aaa4eb9)
- docs: docs fix Sample Scripts link issue (bf617a3)
- docs: docs fix sample scripts link issue (#11779) (bf617a3)
- docs: docs update jans readme (#11687) (bf42440)
- docs: fix Cedarling property link issue (#11780) (aaa4eb9)
- docs: fix incorrect link in Jans Casa docs (#11798) (ec9a3a9)
- docs: remove attribute page (00e0b2d)
- docs: remove config-api attribute page (#11722) (00e0b2d)
- docs: remove converting data (e729c89)
- docs: remove the link to the converting data document from left nav (#11720) (e729c89)
- docs: reorganise supported OS versions for VM installation (#11679) (329a113)
- docs: update supported OS versions (329a113)
- docs: update testing document with Poetry installation instructions (#11681) (e609156)
- jans-auth-server: set sub claim to client identifier for "client credentials grant" for AT as JWT #11413 (#11778) (60373a7)
- jans-auth: duplicate entry exception in start login flow #9322 (#11808) (ee4d38c)
- jans-cli-tui: add defeat the gorn (#11825) (5ed2dcd)
- jans-cli-tui: adjust entries per page dynamiccally (#11807) (03dca24)
- jans-cli-tui: disable expiration verification for user data jwt (#11669) (a9f59f4)
- jans-cli-tui: dynamic script is list for dynamic scope (#11734) (fea842c)
- jans-config-api: changing the /admin-ui/license/resetConfig to DELETE Http method (#11793) (39c48cc)
- jans-fido2: resolve registration issue (#11827) (b8b9927)
- jans-kc-scheduler: typo prevented proper loading of authorization scopes for jans-config-api client (22718c5)
- jans-kc-scheduler: typo prevented proper loading of authz scopes #11802 (#11813) (22718c5)
- jans-linux-setup: data type of jansScr is LONGTEXT (#11763) (0025728)
- jans-linux-setup: openbanking installation setup (#11703) (4905ed7)
- jans-linux-setup: re-order app installations (#11731) (c569fbf)
- jans-linux-setup: scopes in /opt/kc-scheduler/conf/config.properties (#11819) (ee93677)
1.8.0 (2025-06-24)#
Features#
- charts: add nodeSelector spec (#11495) (90409f8)
- cloud-native: introduce Logout Status JWT (#11626) (6f5fe8f)
- cloud-native: introduce session_jwt=true at Authorization Endpoint and Session JWT Status List Endpoint (#11477) (5ae709f)
- config-api: scope search to include scopeType (#11607) (b77b72d)
- config-api: use orm method to provide persistence metadata (#11509) (dbdc1bd)
- config-api: use orm method to provide persistence metadata #11459 (#11473) (736d7f6)
- improve the display of cedarling result (#11552) (5ec5268)
- jans-auth-server: introduce session_jwt=true at Authorization Endpoint and Session JWT Status List Endpoint #11229 (#11251) (6b45f51)
- jans-auth-server: introduced Logout Status JWT #11468 (#11505) (92796fb)
- jans-auth: allow to override HttpService2 connection manager setting (54c547a)
- jans-auth: allow to override HttpService2 connection manager settings (#11586) (54c547a)
- jans-auth: update owasp (#11610) (bda24dc)
- jans-cedarling: implement sending logs to the lock server (#11161) (9330821)
- jans-cedarling: improve error message if json parsing of policy store failed (#11508) (4904d90)
- jans-cedarling: jans cedarling java binding (#11441) (da5423f)
- jans-cedarling: upgrade jna in cedarling-java binding (#11614) (aa45972)
- jans-cli-tui: display build date and build versions (#11539) (59415c8)
- jans-cli-tui: load agama community projects in 20 mins interval (#11627) (44873e0)
- jans-cli-tui: required property for attribute (#11593) (6b8c7a9)
- jans-config-api: update the license API url called from config-api (Admin UI Plugin) (#11559) (c8b7437)
- jans-core: added diagnostic to java compiler (#11562) (99bd129)
- jans-linux-setup: optional rdbm db schema (#11503) (f516bbc)
- jans-orm: add method to provide persistence metadata (#11450) (a066fcf)
- jans-orm: implement solution to import hashed passwords (7518dca)
- jans-orm: implement solution to import hashed passwords (#11601) (d8f5faa)
- jans-script: add sample Argon2 Persistence Ezxtension script (#11521) (3e2593f)
- jans-tui: added Jans-Client header (#11594) (13bd6c1)
- jans=-script: add sample Argon2 Persistence Ezxtension script (3e2593f)
- orm: fetch databaseName for PersistenceMetadata (#11485) (f9ffcac)
- orm: fix doc file (#11494) (0e71ad6)
- orm: fix doc file (#11497) (76d8f1d)
- orm: support password hashing using Argon2 (#11465) (5d48b27)
- orm: support password hashing using Argon2 (#11481) (47549af)
- update tf build docs (#11632) (c9f37dd)
- update the license API url called from config-api (Admin UI Plugin) (c8b7437)
Bug Fixes#
- build_cedarling_uniffi job in github workflow is failing (355cb2a)
- charts: invalid template function calls when using AWS secrets manager (#11467) (6a114a6)
- config-api: Scope filter based on fieldValuePair (#11528) (560f7a3)
- config-api: Scope filter based on fieldValuePair #11524 (560f7a3)
- docs: Add
Cedarling Technical Overviewdoc (d04336d) - docs: add appropriate title to the document (#11579) (2907197)
- docs: add Cedarling technical overview doc (#11581) (d04336d)
- docs: correct jans api swagger reference (#11474) (7072a83)
- docs: remove
overviewtitle (2907197) - docs: update release urls to point to latest Janssen release (#11557) (d13b291)
- docs: update standard claims list (#11567) (99227b1)
- docs: update the instructions for certificates (#10933) (dbdfbee)
- jans-auth-server: external libraries unavaiable from Java Interception Script #11377 (#11568) (aa3ffb5)
- jans-auth-server: improve logging - do not print that user is logged in in logs if it failed to login #11475 (#11480) (faae9d4)
- jans-cedarling: build_cedarling_uniffi job in github workflow is failing (#11542) (355cb2a)
- jans-cli-tui: display warnings for scriptType in edit clients (#11499) (68f2b57)
- jans-cli-tui: edit script config proprty (#11463) (bdc3bd7)
- jans-cli-tui: enforce setting SSA life time at least 5 minutes (#11628) (d4f9f2f)
- jans-cli-tui: persistence type (#11510) (d8c0cab)
- jans-cli-tui: user jansStatus is in body not custom attrbiute (#11615) (d809779)
- jans-linux-setup: re compatibility (#11483) (3bc9193)
- jans-orm: use password.method prefix for all hash algs (#11502) (62b322f)
- jans-scipt: correct script imports (#11516) (385219e)
- jans-scipt: correct script imports (#11517) (2b74d24)
- prepare release 1.8.0 (#11647) (f29d9a3)
1.7.0 (2025-05-20)#
Features#
- jans-auth-server: added refresh token lifetime to Token Endpoint response #11400 (#11414) (00d7c88)
- jans-cedarling: update plugin to use binding (#11356) (c61ef53)
- jans-cli-tui: ssa templates (#11368) (ed18096)
- jans-core: add jakarta.mail for TLS support (#11428) (8cf6b68)
- jans-lock: try to reload /.well-known/openid-configuration on f… (#11392) (00e2257)
- jans-lock: try to reload /.well-known/openid-configuration on failure (00e2257)
- use cedarling uniffi kotlin binding in java project (#11336) (067b3c1)
Bug Fixes#
- docs: add Config API OpenAPI Spec generation at build time (#11407) (70277c5)
- docs: add sections to place ADRs and design decisions (#11380) (4c0db93)
- docs: refactor development docs to add content from Wiki (#11409) (71d133f)
- docs: update curl instructions for jans config api (#11415) (39b6b82)
- jans-cedarling: fix logs in jwt module not getting displayed correctly (#11369) (e856545)
- jans-cli-tui: array type in auth properties (#11399) (6e4d7e4)
- jans-cli-tui: object type configuration properties (#11391) (7cf13a1)
- mail dependencies (#11426) (58c02b0)
- remove version_name attribute from manifest.json (#11387) (0febbd9)
Miscellaneous Chores#
1.6.0 (2025-05-08)#
Bug Fixes#
- fix(jans-linux-setup): pass -n to setup.py when invoked by -yes by @devrimyatar in https://github.com/JanssenProject/jans/pull/11180
- fix(docs): fix image paths in SAML SSO document by @ossdhaval in https://github.com/JanssenProject/jans/pull/11183
- fix(docs): add missing script to index by @yurem in https://github.com/JanssenProject/jans/pull/11186
- fix(jans-auth-server): Access Token from and OIDC flow should not contain the code #11181 by @yuriyz in https://github.com/JanssenProject/jans/pull/11197
- docs(jans-cedarling): improve cedarling docs by @rmarinn in https://github.com/JanssenProject/jans/pull/11193
- docs(jans-cedarling): new quickstart using tarp by @SafinWasi in https://github.com/JanssenProject/jans/pull/11004
- chore: release nightly by @moabu in https://github.com/JanssenProject/jans/pull/11213
- feat(jans-auth-server): add none client authentication support to PAR endpoint #10573 by @yuriyz in https://github.com/JanssenProject/jans/pull/11201
- feat: add ability to use cedarling authz before and after authentication by @duttarnab in https://github.com/JanssenProject/jans/pull/11203
- fix(jans-cedarling)!: role entity not being created in the unsigned interface by @rmarinn in https://github.com/JanssenProject/jans/pull/11176
- fix(docs): proofread and update the Cedarling quick start guide by @ossdhaval in https://github.com/JanssenProject/jans/pull/11210
- fix(docs): proofread and update the TBAC Cedarling quick start guide by @ossdhaval in https://github.com/JanssenProject/jans/pull/11214
- fix(docs): update titles for the Cedarling quick start guides by @ossdhaval in https://github.com/JanssenProject/jans/pull/11220
- Update rhel.md for sha command update by @manojs1978 in https://github.com/JanssenProject/jans/pull/11189
- feat: refactor tarp to adjust with security changes in chrome browser by @duttarnab in https://github.com/JanssenProject/jans/pull/11232
- feat(jans-linux-setup): support for cleanUpInactiveClientAfterHoursOfInactivity for clients by @devrimyatar in https://github.com/JanssenProject/jans/pull/11231
- chore(deps): bump blazemeter/taurus from 1.16.38@sha256:5bb39436180f7c769e00140b781bb1054a1eb4592dd9b82f76dcde470811bf39 to sha256:aa22ab6b42d24ec87ea9f68e4d6db9118619eecf69db76c1c0711f3515897780 in /demos/benchmarking/docker-jans-loadtesting-jmeter by @dependabot in https://github.com/JanssenProject/jans/pull/11238
- fix(jans-cedarling): entity builder not finding the 'iss' entity by @rmarinn in https://github.com/JanssenProject/jans/pull/11235
- bug(jans-cedarling)!: Fix all tokens_metadata to token_metadata by @olehbozhok in https://github.com/JanssenProject/jans/pull/11215
- feat(jans-auth-server): add configurable way to put user claims to session attributes #9625 by @yuriyz in https://github.com/JanssenProject/jans/pull/11219
- fix: validate license configuration in the database when fetching license details from Agama Lab server upon expiry (Admin UI) by @duttarnab in https://github.com/JanssenProject/jans/pull/11245
- fix(jans-pycloudlib): resolve schema error caused by marshmallow upgrades by @iromli in https://github.com/JanssenProject/jans/pull/11247
- fix: remove ID from profile instead of nullify it by @jgomer2001 in https://github.com/JanssenProject/jans/pull/11253
- chore(cloud-native): sync jans-pycloudlib to handle marshmallow library API changes by @iromli in https://github.com/JanssenProject/jans/pull/11255
- feat: rename jans-tarp project to janssen-tarp by @duttarnab in https://github.com/JanssenProject/jans/pull/11249
- chore: updgrade nimbus so json-smart is bumped to 2.5.2 by @jgomer2001 in https://github.com/JanssenProject/jans/pull/11264
- chore(jans-cedarling): add post to cedar schema by @SafinWasi in https://github.com/JanssenProject/jans/pull/11227
- [Snyk] Security upgrade io.swagger.core.v3:swagger-core-jakarta from 2.2.7 to 2.2.11 by @mo-auto in https://github.com/JanssenProject/jans/pull/11166
- build(config-api): lib version to resolve vulnerabilities by @pujavs in https://github.com/JanssenProject/jans/pull/11262
- feat(core): update resteasy to new version by @yurem in https://github.com/JanssenProject/jans/pull/11269
- Update resteasy by @yurem in https://github.com/JanssenProject/jans/pull/11273
- fix(jans-cedarling): fix usage outdated field resource_type by @olehbozhok in https://github.com/JanssenProject/jans/pull/11266
- fix(bom): use right jakarta.ws.rs-api version by @yurem in https://github.com/JanssenProject/jans/pull/11278
- feat(jans-cedarling): Optimize Cedar libraries size by @olehbozhok in https://github.com/JanssenProject/jans/pull/11281
- fix(jans-cedarling): fix docs bootstrap properties, remove redundant property by @olehbozhok in https://github.com/JanssenProject/jans/pull/11275
- fix(bom): deprecate jackson-module-jaxb-annotations by @yurem in https://github.com/JanssenProject/jans/pull/11286
- fix(bom): deprecate jackson-module-jaxb-annotations by @yurem in https://github.com/JanssenProject/jans/pull/11287
- fix(core): fix ClassNotFoundException XmlElement exception by @yurem in https://github.com/JanssenProject/jans/pull/11293
- fix(cloud-native): demo scripts fail to deploy cluster due to python externally-managed-environment error by @iromli in https://github.com/JanssenProject/jans/pull/11290
- feat(jans-cedarling): add some logging msgs for jwt service startup by @rmarinn in https://github.com/JanssenProject/jans/pull/11178
- feat: add field reset button in cedarling authz form by @duttarnab in https://github.com/JanssenProject/jans/pull/11260
- fix: update terraform provider docs and API calls by @moabu in https://github.com/JanssenProject/jans/pull/11301
- feat(jans-cli-tui): splash screen by @devrimyatar in https://github.com/JanssenProject/jans/pull/11298
- feat: allow linking to occur in a popup by @jgomer2001 in https://github.com/JanssenProject/jans/pull/11305
- fix(config-api): custom script creation failing #11307 by @pujavs in https://github.com/JanssenProject/jans/pull/11308
- Jans linux setup jetty 12 11276 by @devrimyatar in https://github.com/JanssenProject/jans/pull/11295
- fix(jans-cli-tui): add pylib to path before importing promptoolkit by @devrimyatar in https://github.com/JanssenProject/jans/pull/11313
- feat(jans-cedarling): go binding for cedarling by @olehbozhok in https://github.com/JanssenProject/jans/pull/11239
- fix(jans-linux-setup): jetty.sh script waits service started by @devrimyatar in https://github.com/JanssenProject/jans/pull/11319
- feat(jans-auth): add missing erver side tests dependecy by @yurem in https://github.com/JanssenProject/jans/pull/11315
- Lock api by @yurem in https://github.com/JanssenProject/jans/pull/11317
- Auth deps by @yuremm in https://github.com/JanssenProject/jans/pull/11321
- feat(jans-config-api): disable jetty ee9-jsp module in jans-config-api by @yurem in https://github.com/JanssenProject/jans/pull/11324
- chore(deps): bump setuptools from 70.0.0 to 80.1.0 in /docs by @dependabot in https://github.com/JanssenProject/jans/pull/11327
- chore(deps): bump blazemeter/taurus from 1.16.40 to 1.16.41 in /demos/benchmarking/docker-jans-loadtesting-jmeter by @dependabot in https://github.com/JanssenProject/jans/pull/11302
- chore(deps): bump docker/setup-qemu-action from 5306bad0baa6b616b9934712d4eba8da2112606d to 737ba1e397ec2caff0d098f75e1136f9a926dc0a by @dependabot in https://github.com/JanssenProject/jans/pull/11283
- chore(deps): bump actions/setup-python from 5.0.0 to 5.6.0 by @dependabot in https://github.com/JanssenProject/jans/pull/11282
- chore(deps): bump sigstore/cosign-installer from 3.5.0 to 3.8.2 by @dependabot in https://github.com/JanssenProject/jans/pull/11270
- fix(jans-fido2): #11331 minor edits by @maduvena in https://github.com/JanssenProject/jans/pull/11332
- chore: misc casa image updates by @jgomer2001 in https://github.com/JanssenProject/jans/pull/11334
- docs: add cedarling rust docs by @moabu in https://github.com/JanssenProject/jans/pull/11311
- chore(deps): bump org.quartz-scheduler:quartz from 2.3.2 to 2.5.0 in /jans-casa by @dependabot in https://github.com/JanssenProject/jans/pull/10206
- chore(deps): bump commons-io:commons-io from 2.17.0 to 2.19.0 in /jans-casa by @dependabot in https://github.com/JanssenProject/jans/pull/11217
- fix: fix the android and iOS sample app based on changes in cedarling uniffi binding by @duttarnab in https://github.com/JanssenProject/jans/pull/11294
- chore(deps): bump org.apache.maven.plugins:maven-clean-plugin from 2.5 to 3.4.1 in /jans-casa by @dependabot in https://github.com/JanssenProject/jans/pull/10903
- chore(deps): bump org.apache.maven.plugins:maven-war-plugin from 2.3 to 3.4.0 in /jans-casa by @dependabot in https://github.com/JanssenProject/jans/pull/9985
- chore(deps): bump org.apache.maven.plugins:maven-resources-plugin from 2.6 to 3.3.1 in /jans-casa by @dependabot in https://github.com/JanssenProject/jans/pull/9996
- chore(deps): bump org.apache.maven.plugins:maven-site-plugin from 2.1.1 to 3.21.0 in /jans-casa by @dependabot in https://github.com/JanssenProject/jans/pull/10064
- chore(ci): SBOM enrichment and upload as a release asset by @ossdhaval in https://github.com/JanssenProject/jans/pull/11267
- feat(cloud-native): upgrade to Jetty 12 by @iromli in https://github.com/JanssenProject/jans/pull/11297
- fix(jans-cedarling): switch cedarling instance to pointer by @SafinWasi in https://github.com/JanssenProject/jans/pull/11338
- fix(core): fix unable to decorate com.sun.faces.config.ConfigureListener by @yurem in https://github.com/JanssenProject/jans/pull/11345
- feat(jans-link): turn off Weld dev mode in production by @yuremm in https://github.com/JanssenProject/jans/pull/11347
- fix(charts): missing feature of jans-keycloak-link by @iromli in https://github.com/JanssenProject/jans/pull/11257
- fix(jans-cli-tui): include jans-logo.txt in package by @devrimyatar in https://github.com/JanssenProject/jans/pull/11359
- fix(jans-cli-tui): smtp test failing #11330 by @pujavs in https://github.com/JanssenProject/jans/pull/11358
- feat(jans-auth): restore Nashorn engine by @yurem in https://github.com/JanssenProject/jans/pull/11363
- fix: update javadocs plugin to allow generation of javadocs by @moabu in https://github.com/JanssenProject/jans/pull/11364
- chore: prepare release of 1.6.0 by @moabu in https://github.com/JanssenProject/jans/pull/11376
- fix: tf license by @moabu in https://github.com/JanssenProject/jans/pull/11382
1.5.0 (2025-04-04)#
⚠ BREAKING CHANGES#
- jans-cedarling: move TOKEN_CONFIGS into the token_metadata schema (#10972)
Features#
- add ability to decode token jwt so that users can check claims in payload (#10930) (a88aab3)
- add ability to show decision, system and metric logs in tarp based on user selection (#10917) (4df25f0)
- add ability to to use cedarling authorize_unsigned in tarp (#11147) (3185a89)
- add tolerations (03ae383)
- add tolerations to helm charts (#11100) (03ae383)
- admin-ui should only make monthly request agama-lab to validate license (#10966) (3647fe8)
- apply password policy to set/reset password (#11149) (52f0f47)
- charts: cloudtools integration with Helm charts (#11102) (5739aa3)
- cloud-native: create utility image to run commands for cluster (#10987) (51e175c)
- code refactoring for UI improvement in tarp (#11151) (123e62f)
- docs: session management (#11098) (d3fcf8b)
- jans-auth-server: do not return claim in introspection response if it's null. #10865 (#10877) (eb3de16)
- jans-auth-server: introduce rate limit support for DCR (#10991) (6a1ccce)
- jans-auth-server: make all ssa attributes optional during creation #10858 (#10896) (a01b1ca)
- jans-auth-server: rate limit - use guava cache to auto-expire buckets during high load #11054 (#11059) (01a0a9f)
- jans-auth-server: removed CleanerTimer from AS (replaced by independent clean service) (#11096) (bb51848)
- jans-auth-server: requirePkce configuration property on client level (#10962) (4cda61c)
- jans-auth-server: set expiration to the past (to clean up) on SSA revoke #10916 (#10939) (8c460ca)
- jans-cedarling: add alias to load key policy_store_version` (#10893) (21e4acc)
- jans-cedarling: add an example that runs profiling (#10979) (dc38e10)
- jans-cedarling: Add bootstrap properties of memory logger max_items and max_item_size (#10924) (2189094)
- jans-cedarling: create uniffi binding for cedarling with sample ios app using it (#10816) (026ed0b)
- jans-cedarling: implement loading types from other namespace (#10807) (da05595)
- jans-cedarling: include a sample android app in cedarling uniffi binding (#10994) (5b74f9d)
- jans-cedarling: New interface: authorizeUnverified - send Principal as Object v. JWT (#11035) (37b72ad)
- jans-cedarling: Support JSON logic for principal boolean operations (#10956) (cbe4dbc)
- jans-cli-tui: add hints to fido configuration screen (#10864) (39ffa8a)
- jans-cli-tui: SSA custom attributes 10855 (#10870) (6f2cb6b)
- jans-linux-setup: data cleaning cron job task (#10946) (33d5eb2)
- jans-linux-setup: LDAP Link installation is optional (#10964) (673d7fb)
- jans-linux-setup: link jans script to /usr/local/bin (#11125) (d8c7a17)
- jans-linux-setup: link jans script to /usr/localbin (d8c7a17)
- jans-linux-setup: ubuntu24 support (#10949) (481fdca)
- jans-lock: configure maven to update OpenAPI lock-server.yaml (#10952) (11c2249)
- jans-lock: configure maven to update OpenAPI lock-server.yaml (#10953) (a8f09f2)
Bug Fixes#
- admin UI unable to fetch MAU _threshold on restart of config-api (b4cfaa2)
- charts: broken istio integration (#11041) (8b536ab)
- core: remove jansAlias from jansDocument (#11085) (a3a9bb2)
- docs: add Cedarling quick start guide and binding type documents (#10906) (bc0686f)
- docs: Cedarling docs updates (#10998) (903e29f)
- docs: Cedarling documentation reorganisation (#10900) (33920c2)
- docs: incorrect package name in rhel document (#10890) (1d98a9c)
- docs: moving contributor license agreement to GitHub (#11034) (6ce100a)
- docs: remove agama lab quick start guide (7a7ae38)
- docs: remove agama lab quick start guide from Jans docs (#11132) (7a7ae38)
- docs: review and update Cedarling WASM document (#10988) (2136bdf)
- docs: update cedarling docs navigation (#11001) (4da085f)
- docs: update document titles for better search results (#11105) (6b6815d)
- docs: update titles for better docs search results (#11131) (b9cb65e)
- error when deselect one of the tokens in the cedarling authz form (#10986) (8444271)
- fox docs formatting (3da3644)
- ignore null authz input tokens (56af565)
- jans-auth-server: correction after removing CleanerTimer from AS (replaced by independent clean service) #10935 (#11108) (13b5ea6)
- jans-cedarling: fix
CEDARLING_TOKEN_CONFIGSto have namespace (66dd8a7) - jans-cedarling: fix documentation CEDARLING_POLICY_STORE_LOCAL can hold only string (#11015) (2c6a112)
- jans-cedarling: fix log workload authz info (87672d8)
- jans-cedarling: ignore null authz input tokens and improve error message (#11063) (56af565)
- jans-cedarling: reason missing from decision log (#10895) (87672d8)
- jans-cli-tui: Catch errors when changing user password (#11154) (9fc36c3)
- jans-cli-tui: multivalued claims for users (#11011) (159b512)
- jans-cli-tui: null value in client grantTypes (#10872) (a609f8c)
- jans-cli-tui: properties acrMappings (#11048) (f025083)
- jans-cli-tui: typo in editing attribute (#11152) (f42dd4a)
- jans-config-api: admin UI unable to fetch MAU _threshold on restart of config-api (#10969) (b4cfaa2)
- jans-core: reverted back CleanerEvent (used by fido2) #11113 (#11115) (266583f)
- jans-fido2: #10244 + docs (#11057) (3912551)
- jans-fido2: #10947 syncing configuration parameters in docs and … (#10948) (b635cbc)
- jans-fido2: #10947 syncing configuration parameters in docs and templates (b635cbc)
- jans-fido2: fixes to downloading mds3 blob #11126 (#11127) (3776c0c)
- jans-fido2: U2F attestation and corrected auth_cert link #10911 (#10912) (b47ca75)
- jans-linux-setup: lock client creation with setup.properties (#10929) (f374ed2)
- jans-linux-setup: owner of service status script (#11122) (aad24a3)
- jans-linux-setup: rename permission to role in attribute inum=6049 (#10915) (359dc75)
- jans-tarp: unsigned authorization form not working (#11159) (cc9c7fd)
- logging: improve detail formatting (#10955) (9334d61)
- return 500 instead of 404 on lookup error (#11156) (ecc1eac)
- scope not getting added if dropdown is not used (#10908) (63bc735)
- show proper error message for when MAU threshold absent when checking flex license (#11110) (40f9d09)
- show proper error message for when MAU threshold absent when checking flex license #11093 (40f9d09)
- ssaCustomAttributes is missing in response from Auth server Configuration endpoint (#11120) (b4a4cf6)
Code Refactoring#
1.4.0 (2025-02-12)#
Features#
- agama: add support for parameterizable enter/exit urls in flows (#10716) (71fbcb7)
- agama: allow integration of Agama flows in AS consent (#10727) (4ef6c9a)
- config-api: lock stat endpoint and SAML TR fix (#10755) (11bddd1)
- config-api: testng framework cleanup changes (#10736) (77d6646)
- demo-tarp: use @janssenproject/cedarling_wasm npm package #10805 (#10806) (b178d4a)
- jans-auth-server: allow invoke consent script by acr #10548 (#10712) (e1982e1)
- jans-cedarling: add krakend plugin (#10713) (78457b6)
- jans-cedarling: custom tokens and putting tokens in principal attrs (#10706) (c342a05)
- jans-cedarling: implement benchmarks for startup and authz (#10775) (80f0b63)
- jans-cedarling: implement environment variable loading for sidecar (#10751) (21d8ef5)
- jans-cedarling: Improve log searching and retrieval (#10772) (9286f82)
- jans-cedarling: Load bootstrap properties from environment variables (#10692) (d7200cb)
- jans-cedarling: update sidecar for log retrieval (#10786) (bd67f89)
- jans-linux-setup: restart admin-ui via jans (#10740) (2a0aaf6)
- jans-lock: redirect for consent if external script is enabled a… (#10771) (c3e4a97)
- jans-lock: redirect for consent if external script is enabled and client is not authorized (c3e4a97)
- update help section of tarp (#10708) (bee683b)
- use @janssenproject/cedarling_wasm npm package #10805 (b178d4a)
Bug Fixes#
- account absent start url in native flows (#10731) (2c0cc62)
- account absent start url in native flows #10729 (2c0cc62)
- align consent script wrt latest AS updates (#10780) (6cb802b)
- config-api: asset upload config and saml document store changes (#10734) (8e9d43e)
- Corrected fido-2-devices link to heading in user management document. issue#9636. (8ffc483)
- docs: corrected fido-2-devices link to heading in user management document (8ffc483)
- docs: update Agama Lab quick start guide (#10779) (7403ed1)
- docs: update broken link in custom claims document (#10781) (40b7039)
- docs: update LDAP link document with configuration details (#10824) (53dd493)
- jans-auth-server: always save access_token to persistence regardless of cache configuration #10763 (#10784) (cf8ce67)
- jans-auth-server: second authorization challenge call does not invoke the right script #10745 (#10746) (3ba585c)
- jans-auth-server: typo in determineConsentFlow method #10758 (#10759) (52cabdb)
- jans-cedarling: fix token handling (#10761) (2533e30)
- jans-cli-tui: save config-api configuration (#10724) (6a955a4)
- jans-cli-tui: ScrollablePane for config-api main screen (#10722) (4585f3a)
- jans-linux-setup: fido document store paths (#10801) (881c1e0)
- jans-linux-setup: revert admin-ui restart (27faefc)
- jans-linux-setup: Store fido2 authenticator_cert in DB (#10697) (86966df)
- jans-linux-setup: update jansservices module post setup (#10715) (cfa301f)
- references to file location_type (#10797) (cfaab7e)
- update resource endpoints for terraform (#10836) (5dfee2b)
1.3.0 (2025-01-20)#
Features#
- agama: modify RRF and RFAC behavior for non-web clients (#10547) (58fd359)
- allow integration of Agama flows into the authz challenge enpoint (#10587) (856f9fe)
- cedarling integration with tarp (#10681) (4f44337)
- cloud-native: secure mounted configuration schema (#10577) (57c266a)
- extract wasm tar in /jans-tarp folder (#10689) (ca8f453)
- integrate cedarling with jans-tarp (#10662) (9f9ae8a)
- jans-auth-server: introduced new 'prepareAuthzRequest' method in authorization challenge script (#10598) (02c240e)
- jans-auth: log current folder in UserJansExtUidAttributeTest test (ca79ace)
- jans-auth: log current folder in UserJansExtUidAttributeTest test (#10667) (51ce4dc)
- jans-auth: Remove copyright footer (#10666) (474661c)
- jans-auth: Show valid client name or id in consent form (#10649) (5a53d53)
- jans-cedarling: add to decision log diagnostic info (#10581) (6f8dc7c)
- jans-cedarling: add WASM bindings for Cedarling (#10542) (ec7c7e1)
- jans-cedarling: implement CEDARLING_ID_TOKEN_TRUST_MODE (#10585) (d76f28c)
- jans-cedarling: Make SparKV use generics, and update MemoryLogger to use those. (#10593) (25c7a49)
- jans-fido2: Add test cases for RP domain origin validation and handle multiple origins #9248 (22f0cbe)
- jans-fido2: Add test cases for RP domain origin. (#10572) (22f0cbe)
- jans-lock: lock should collect MAU and MAC based on log entries… (#10328) (b8a7e1a)
- jans-pycloudlib: secure mounted configuration schema (#10551) (2d27184)
Bug Fixes#
- actions: immutable github sha instead of github head_ref (5091b56)
- agama: update expected status code (#10618) (c0dce75)
- build acct linking agama (#10575) (85b95ec)
- cloud-native: add missing endpoints to aio image (#10595) (5fb1903)
- cloud-native: resolve image builds on slow network (#10524) (3409098)
- config-api: setting agama flow as auth method (#10539) (3c00152)
- docker-jans-auth: missing permissions on /app/templates (#10641) (f1b3ca2)
- docker-jans-persistence-loader: exclude external tables when creating indexes (#10522) (9610bc1)
- docs: add documentation for
janswrapper command (#10611) (b65f5e1) - docs: correct the file name for Keycloak link document (#10680) (35e6ef0)
- docs: minor fixes to the Jans README (#10604) (41bf8b8)
- docs: minor URL fixes (ba9908d)
- docs: minor URL fixes (#10632) (ba9908d)
- docs: remove tent references (040ff17)
- docs: remove tent references from documentation (#10603) (040ff17)
- implement missing method from interface (#10646) (2381a09)
- jans-auth-server: access evaluation tests are failing on jenkins (#10630) (8789289)
- jans-auth-server: access evaluation tests are failing on jenkins #10629 (37e177c)
- jans-auth-server: access evaluation tests are failing on jenkins #10629 (8789289)
- jans-auth-server: challenge endpoint returns 400 if authorize throws an unexpected exception (#10553) (02c3df7)
- jans-auth-server: failing test - SelectAccountHttpTest selectAccountTest #10647 (d19e34f)
- jans-auth-server: NPE during client name rendering #10663 (9dbcb0d)
- jans-auth-server: test is failing - TokenRestWebServiceHttpTest requestAccessTokenFail #10637 (db38009)
- jans-auth-server: tests corrections (ef8a07a)
- jans-auth: log current folder in UserServiceTest test (#10675) (1468b47)
- jans-cedarling: fix Cedarling WASM docs (#10601) (7690030)
- jans-kc-link: remove default keycloak configs (#10679) (261c936)
- jans-keycloak-link: unstatisfied dependencies (#10627) (721b8fe)
- startjanssendemo: enhance the script (1ba8e98)
- startjanssendemo: remove unneeded code and packages installation (#10531) (1ba8e98)
- update token script (role_based_scopes_update_token) should reje… (#10536) (3cd5d88)
- update token script (role_based_scopes_update_token) should reject the tampered user-info-jwt #10535 (3cd5d88)
1.2.0 (2024-12-24)#
Features#
- add internationalization in selector page (#10405) (00facf6)
- add programatic access to labels in Agama (#10313) (1e91d9b)
- config-api: agama download endpoint (#10463) (5bec96c)
- config-api: implemenetd agama repo endpoint and fixed user pwd validation for patch (#10373) (03d3529)
- jans-agama: update htmlunit (#10464) (3cc7c5a)
- jans-auth-server: access token lifetime from UpdateToken interception script has highest priority #9748 (#10379) (c2ef55d)
- jans-auth-server: added exp,nbf, and iat to UserInfo JWT (#10390) (c99a71a)
- jans-auth-server: allow to use openidSubAttribute for localAccountId for pairwise identifier look up #9696 (#10269) (5d72a06)
- jans-auth-server: introduced
/.well-known/authzen-configurationendpoint (#10321) (efb7ab6) - jans-auth-server: updated first party native authn implementation ( in backwards compatibility way) #10380 (#10442) (bc431fb)
- jans-cedarling: add logging
cedarlingversion on start application (#10288) (20ed173) - jans-cedarling: add support for Cedar schema action introspection (#10358) (ed0edb9)
- jans-cedarling: add well-known authzen configuration endpoint (#10435) (cc6fc7b)
- jans-cedarling: automatically add entity references into the context (#10387) (ed44ec0)
- jans-cedarling: Bootstrap support for JSON and YAML properties (#10216) (e7ffb08)
- jans-cedarling: implement loading policy store from CEDARLING_POLICY_STORE_URI (#10336) (ffe9f49)
- jans-cedarling: implement loading role from many JWT tokens (#10422) (8da040e)
- jans-cedarling: implement new bootstrap configs for JWT validation (#10306) (6d810a5)
- jans-cedarling: initialize flask sidecar (#10270) (46f9a51)
- jans-cedarling: pass entities data into the context (#10275) (e2e4f89)
- jans-cli-tui: user fido devices (#10305) (811d953)
- jans-fido2: major FIDO2 / Passkeys upgrade ProjectPasskeys (#10080) (e823bf7)
- jans-link: add ingress resource for jans-link (#10494) (2779a7e)
- jans-linux-setup: jans-fido2-model auth lib (#10468) (f99d870)
- jans-linux-setup: location of service scripts, config-api plugins (#10341) (7299fea)
- jans-linux-setup: Retreive Agama Lab project scripts (#10335) (26713a8)
- migrate and fix e-mail otp plugin (#10294) (d3f83cb)
- misc UI updates (#10278) (c0a6639)
- terraform-provider-jans: update terraform provider with latest API changes (#10485) (075650c)
Bug Fixes#
- actions: microk8s action passing correct arguments (#10363) (a1517a0)
- assign nightly version (2dd3484)
- bom: deprecate commons-lang due to conflict with commons-lang3 (#10267) (396551e)
- bug if version passed is a tag (82694ca)
- cloud-native: applications are failing to start when prometheus metrics are enabled (#10459) (b293ebe)
- config-api: application status endpoint specification changes (#10203) (c49a0af)
- config-api: user password being displayed as clear text (#10441) (4e7c13b)
- config-api: user password patch fix (#10396) (0345f11)
- docker-jans-config-api: resolve path to external healthcheck script (#10450) (bef11a6)
- docker-jans-monolith: update scripts location (#10481) (45fe7a5)
- docs: autogenerate docs (#10232) (50e5957)
- jans-auth-server: lower possibility to get data loss during status index pool update #10284 (#10285) (16371ee)
- jans-auth: fido - #10445 modified the script and properties file for fido (#10446) (99285e9)
- jans-auth: fix client side jans-auth tests failures #10212 (#10213) (c0bc881)
- jans-casa: #10470 Enrollment of a passkey implies the enrollment of all three types of authenticator - client-device, hybrid, security-key (b0a7da3)
- jans-casa: assign nightly version for email 2fa plugin (#10300) (2dd3484)
- jans-casa: enrollment of a passkey implies the enrollment… (#10473) (b0a7da3)
- jans-cedarling: add handling nonexistent authorization decisions (#10431) (29d9bc6)
- jans-cedarling: add missing fields on LogEntry struct (#10297) (b91279f)
- jans-cedarling: fix sidecar docker (#10361) (48e8eae)
- jans-cedarling: revert "pass entities data into the context" (#10290) (5e10625)
- jans-cedarling: update example authorize_without_jwt_validation (#10308) (ccb376c)
- jans-cli-tui: display error for session search (#10251) (87a6c39)
- jans-cli-tui: properties object with no keys (#10411) (e0f55a0)
- jans-cli-tui: update user password (#10456) (927befc)
- jans-config-api: unable to update Admin-ui feature in webhook (#10220) (1244488)
- jans-fido: Resolve dependecy issue (a71e866)
- jans-fido: Resolve dependecy issue #10080 (#10406) (b6b45e1)
- jans-keycloak-integration: kc startup issues #10348 (#10349) (ecd8e38)
- jans-linux-setup: auth server test configuration (#10365) (e68d275)
- jans-linux-setup: bug if version passed is a tag (#10274) (82694ca)
- jans-linux-setup: config-api plugin installation (#10389) (59ba1b0)
- jans-linux-setup: display CLI logs in jans script (#10262) (ef0f4fe)
- jans-linux-setup: download from tags (#10391) (c6d95a1)
- jans-orm: merge ORM changes from Gluu (#10293) (17e9443)
- monolithic: update scripts location (45fe7a5)
1.1.6 (2024-11-20)#
⚠ BREAKING CHANGES#
- chore(charts)!: remove spanner support from Helm charts by @iromli in https://github.com/JanssenProject/jans/pull/10071
- chore(cloud-native)!: remove spanner support from OCI images by @iromli in https://github.com/JanssenProject/jans/pull/10070
- chore(jans-pycloudlib)!: remove couchbase support from pycloudlib by @iromli in https://github.com/JanssenProject/jans/pull/10129
- chore(cloud-native)!: remove couchbase support from OCI images by @iromli in https://github.com/JanssenProject/jans/pull/10132
- chore(charts)!: remove couchbase support from Helm charts by @iromli in https://github.com/JanssenProject/jans/pull/10138
What's Changed#
- chore(jans-linux-setup) remove spanner db by @devrimyatar in https://github.com/JanssenProject/jans/pull/10068
- chore(charts)!: remove spanner support from Helm charts by @iromli in https://github.com/JanssenProject/jans/pull/10071
- fix(config-api): date filter fix by @pujavs in https://github.com/JanssenProject/jans/pull/10075
- chore(docs): docs remove spanner refs by @ossdhaval in https://github.com/JanssenProject/jans/pull/10076
- feat(jans-cedarling): improve error handling for JWKS responses by @rmarinn in https://github.com/JanssenProject/jans/pull/9982
- feat(jans-cedarling): ensure that all cedarling test fixture files are human-readable. by @djellemah in https://github.com/JanssenProject/jans/pull/10036
- feat(jans-config-api): adding allowSmtpKeystoreEdit property in admin-ui configuration by @duttarnab in https://github.com/JanssenProject/jans/pull/10091
- fix(jans-cli-tui): more verbose in smtp test response by @devrimyatar in https://github.com/JanssenProject/jans/pull/10090
- fix(jans-bom): define plugins in base parent project by @yurem in https://github.com/JanssenProject/jans/pull/10087
- fix(jans-orm): throw exception if table in DB is not exists by @yurem in https://github.com/JanssenProject/jans/pull/10096
- fix(jans-casa): primary button not changing color when customized via custom branding plugin by @mjatin-dev in https://github.com/JanssenProject/jans/pull/10084
- fix(jans-cli-tui): remove filePath when putting asset by @devrimyatar in https://github.com/JanssenProject/jans/pull/10107
- fix(jans-lock): fix broken link in lock docs by @yurem in https://github.com/JanssenProject/jans/pull/10110
- feat(jans-cedarling): add env variable for python by @SafinWasi in https://github.com/JanssenProject/jans/pull/10115
- chore(cloud-native)!: remove spanner support from OCI images by @iromli in https://github.com/JanssenProject/jans/pull/10070
- chore: upgrade javascript libraries to newer versions in HTML files by @mjatin-dev in https://github.com/JanssenProject/jans/pull/10108
- fix: remove unnecessary mount for k8s setup by @moabu in https://github.com/JanssenProject/jans/pull/10112
- docs(update): custom scripts docs update by @mmrraju in https://github.com/JanssenProject/jans/pull/10125
- chore(jans-pycloudlib)!: remove couchbase support from pycloudlib by @iromli in https://github.com/JanssenProject/jans/pull/10129
- fix(docs): fix docs link by @ossdhaval in https://github.com/JanssenProject/jans/pull/10123
- chore(jans-linux-setup): drop couchbase support by @devrimyatar in https://github.com/JanssenProject/jans/pull/10133
- fix(docs): remove Couchbase references by @ossdhaval in https://github.com/JanssenProject/jans/pull/10119
- chore(jans-cedarling): remove ipaddr by @SafinWasi in https://github.com/JanssenProject/jans/pull/10140
- ci: move jenkins operations to GH by @moabu in https://github.com/JanssenProject/jans/pull/10082
- chore(cloud-native)!: remove couchbase support from OCI images by @iromli in https://github.com/JanssenProject/jans/pull/10132
- feat(jans-cedarling): Implement check authorization principals based on the schema for action by @olehbozhok in https://github.com/JanssenProject/jans/pull/10126
- fix(jans-orm): update SQL ORM tests to conform latest JSON Filter API by @yurem in https://github.com/JanssenProject/jans/pull/10150
- fix(jans-link): add missing configuration providers by @yurem in https://github.com/JanssenProject/jans/pull/10124
- feat(jans-cedarling): update Trusted Issuers schema in the policy store by @rmarinn in https://github.com/JanssenProject/jans/pull/10141
- fix(jans-bom): update libs by @yurem in https://github.com/JanssenProject/jans/pull/10154
- fix(config-api): adding missing scope in spec and udated example of search field by @pujavs in https://github.com/JanssenProject/jans/pull/10156
- fix(jans-linux-setup): use sqlconnection instead of mysqlconnection by @devrimyatar in https://github.com/JanssenProject/jans/pull/10161
- chore(cloud-native): upgrade libs to reduce vulnerabilities by @iromli in https://github.com/JanssenProject/jans/pull/10168
- chore(charts)!: remove couchbase support from Helm charts by @iromli in https://github.com/JanssenProject/jans/pull/10138
- fix(jans-linux-setup): missing scopes of api-admin by @devrimyatar in https://github.com/JanssenProject/jans/pull/10162
- feat(jans-cli-tui): session management by @devrimyatar in https://github.com/JanssenProject/jans/pull/10164
- feat: implement native internationalization for Agama projects by @jgomer2001 in https://github.com/JanssenProject/jans/pull/10165
- ci: remove python3 ldap package by @moabu in https://github.com/JanssenProject/jans/pull/10172
- chore: adjust projects that use localization labels by @jgomer2001 in https://github.com/JanssenProject/jans/pull/10174
- feat(jans-cedarling): implement mapping JWT payload to
cedar-policyentity by @olehbozhok in https://github.com/JanssenProject/jans/pull/10169 - refactor(jans-cedarling): relax JWT validation to allow optional claims by @rmarinn in https://github.com/JanssenProject/jans/pull/10173
- fix(jans-cli-tui): file type scripts by @devrimyatar in https://github.com/JanssenProject/jans/pull/10181
- chore(jans-pycloudlib): remove ldap references from pycloudlib by @iromli in https://github.com/JanssenProject/jans/pull/10177
- fix: admin-ui plugin should send appropriate message on expiry/ for inactive license. #10178 by @duttarnab in https://github.com/JanssenProject/jans/pull/10189
- User auth test by @yurem in https://github.com/JanssenProject/jans/pull/10191
- chore(jans-cedarling): update python example and docs by @SafinWasi in https://github.com/JanssenProject/jans/pull/10183
- feat(jans-auth-server): openID AuthZEN implementation by @yuriyz in https://github.com/JanssenProject/jans/pull/10197
- chore(release): release 1.1.6 by @moabu in https://github.com/JanssenProject/jans/pull/10201
1.0.21 (2023-12-14)#
Bug Fixes#
1.0.20 (2023-11-08)#
Features#
- jans-tarp: user should be allowed to paste an SSA (or specify a file from disk) in DCR form #6161 (#6467) (9b1f694)
Bug Fixes#
- prepare for 1.0.20 release (c6e806e)
1.0.19 (2023-10-11)#
Features#
- docker-jans: upgrade base image to Java 17 (#6231) (8ed40e9)
- keycloak refactoring referred to Issue #5330 review (#6157) (7319120)
Bug Fixes#
- charts: use interval-based cronjob schedule syntax (#6089) (2c0fc97)
- docs: autogenerate docs (#6261) (57137e4)
- docs: scripts should be shown alphabetically (#6222) (f60010c)
- prepare for 1.0.19 release (554fd43)
1.0.18 (2023-09-23)#
Features#
Bug Fixes#
- jans-auth-server: redirect when session does not exist but client_id parameter is present (#6104) (f8f9591)
- jans-auth-server: swagger is malformed due to typo #6085 (#6086) (e1ae899)
- prepare for 1.0.18 release (87af7e4)
- remove content-type in header from /retrieve GET request #6096 (#6099) (a85d867)
1.0.17 (2023-09-17)#
Bug Fixes#
- docker-jans-fido2: search cache for session instead of persistence (#6040) (d8d4073)
- docker-jans-persistence-loader: search session by deviceSecret (#6038) (d299d7f)
- docs: autogenerate docs (#6065) (0f3cf5d)
- prepare for 1.0.17 release (4ba8c15)
1.0.16 (2023-08-02)#
Features#
Bug Fixes#
- docs: autogenerate docs (#5749) (9a29ec1)
- jans-linux-setup: load test data with setup.properties (#5723) (b2fa5de)
- prepare for 1.0.16 release (042ce79)
- prepare for 1.0.16 release (b2649c3)
1.0.15 (2023-07-12)#
Bug Fixes#
- prepare for 1.0.15 release (0e3cc2f)
1.0.14 (2023-06-12)#
Bug Fixes#
- docker-jans-auth-server: handle missing secret when comparing contents (#5187) (f2a373e)
- docs: autogenerate docs (#5225) (9c8e510)
- prepare for 1.0.14 release (25ccadf)
1.0.13 (2023-05-10)#
Bug Fixes#
- docker-jans-loadtesting-jmeter: rename incorrect reference to OCI image (#4908) (7db2c11)
- docs: autogenerate docs (#4933) (337239b)
- prepare for 1.0.13 release (493478e)
1.0.12 (2023-04-18)#
Features#
Bug Fixes#
1.0.11 (2023-04-05)#
Features#
Bug Fixes#
- docs: autogenerate docs (#4486) (a9b3eab)
- jans-linux-setup: re-orginize creating smtp configuration (#4457) (5b543cd)
- prepare for release (60775c0)
1.0.10 (2023-03-16)#
Features#
- config-api: agama deployment path param change and client authorization (#4147) (22323ce)
- docker-jans-persistence-loader: add online_access scope and enable agama engine by default (#4136) (8c0bbb3)
- docker-jans: add client auth scopes (#4156) (1ae907b)
- include jansDeviceData in SCIM Fido2Resource schema #4057 (#4115) (04436dc)
- jans-auth-server: added online_access scope to issue session bound refresh token #3012 (#4106) (635f611)
- jans-linux-setup: enable agama engine by default (#4131) (7e432dc)
- tent: support additional params (#4044) (f521f7a)
Bug Fixes#
- add custom permissions (34336ac)
- config-api: smtp password decryption and encryption logic (#4161) (4aefb0d)
- config-api: user custom attribute changes and agama param changes (#4123) (291004e)
- docker-jans-config-api: remove licenseSpringCredentials from admin-ui jansConfDyn (#4125) (2cf8aa0)
- docs: autogenerate docs (#4200) (e20f399)
- formating issues (#4119) (c5b89ce)
- jans-cli-tui: dropdown widget raises error if not initial values provided (#4142) (0aa51eb)
- jans-cli-tui: working branch 11 (#3980) (fdba800)
- jans-fido2: handling exception fido2 get endpoints by invalid params (#4139) (a50d2af)
- jans-linux-setup: set jansAuthMode - default acr mode (#4162) (f7d0489)
- javadoc errors (#4088) (be10a09)
- prepare release for 1.0.10 (e996926)
- prevent getFlowByName method crash by refactoring #4128 (#4129) (092989b)
- terraform-provider-jans: update terraform module (#4164) (073ef39)
- terraform-provider-jans: update terraform provider (#4148) (92134c8)
- update chart image repositories (8eea271)
1.0.9 (2023-03-09)#
Features#
- agama: update gama deployment endpoint to support configuration properties (#4049) (392525c)
- getting license credentials from SCAN (#4052) (5c563b7)
- jans-auth-server: introduced additional_token_endpoint_auth_method client's property #3473 (#4033) (79dcb60)
Bug Fixes#
- docs: autogenerate docs (#4050) (dcbb645)
- docs: autogenerate docs (#4105) (da87cef)
- jans-auth-server: bad indentation in AS swagger.yaml #4108 (#4109) (cdcefd2)
- jans-config-api: getting license credentials from SCAN (#4055) (407d618)
- prepare 1.0.9 release (e6ea522)
- prepare 1.0.9 release (55f7e0c)
- update next SNAPSHOT and dev (0df0e7a)
1.0.8 (2023-03-01)#
Features#
- add to AS session the data passed in
Finish(#3978) (12bedb7) - Include additional attributes on SSA Get endpoint (#3983) (4fded3e)
- jans-cli-tui: enable super gluu option (#3970) (0200751)
Bug Fixes#
- docker-jans: add missing logs due to improper configuration (#3994) (c041f12)
- docker-jans: resolve required keys_ops_type for generating/rotating keys (#3990) (0ed67fb)
- fix user publicKey search (#3982) (d0584dd)
- jans-auth-server: WebApplicationException is not propagated out of "Update Token" script #3996 (#3997) (d561f14)
- jans-linux-setup: install cb before jans installation (#3981) (dfed3b5)
- jans-linux-setup: install ncurses-compat-libs cb backend for el8 (#3969) (412e07f)
- jans-linux-setup: start jans-auth after backend (#3975) (4afbcee)
- jans-pycloudlib: split aws secrets when payload is larger than 65536 bytes (#3971) (bd3d59b)
- solved error when generate jwt of ssa return error, but ssa persist in database (#3985) (768fd04)
1.0.7 (2023-02-22)#
Features#
- add -key_ops ALL to setup (ref: #3747) (#3755) (3ce4bb2)
- add authentication SG flow tests (#3877) (d5c3fac)
- add custom Github External Authenticator script for ADS #3625 (#3626) (f922a7a)
- add debug SG logging (#3730) (a0c9ca2)
- add fast forward suport to skip step authentication flow #3582 (#3583) (25ee0af)
- add Jupiter+Weld+Mockito+Extension to Fido2 (#3875) (0152435)
- add more loggers (#3742) (919bc86)
- add project metadata and related handling #3476 (#3584) (b95e53e)
- add support for postgres testing (3494925)
- Change org_id to String type and Add status in get SSA (#3763) (d01269a)
- config-api: config api configuration endpoint (#3648) (c798c4c)
- config-api: data conversion, audit log and swagger enhancement (#3588) (a87b75b)
- config-api: plugin endpoint and audit interceptor (#3613) (95fadc6)
- config-api: script default script validation for location (#3786) (446de9e)
- docker-jans-configurator: allow user-defined salt (#3624) (cf743b7)
- docker-jans-persistence-loader: add ssa admin scope (#3762) (540f619)
- docker-jans: add support for mounted hybrid properties file (#3623) (8c58a5a)
- docker-jans: change persistence entry check to read configuration (#3618) (d465c19)
- docker-jans: introduce key_ops when generating keys (#3770) (2495842)
- docs: updated swagger for new endpoint get jwt of ssa, also added more documentation for scopes. (7dcca94)
- jans-auth-server: add configurable rotation of client's registration access token #3578 (#3876) (83183c0)
- jans-auth-server: added dynamicRegistrationDefaultCustomAttributes to provide default custom attributes during dcr #3595 (#3596) (6202230)
- jans-auth-server: added flexible date formatter handler to AS (required by certification tools) #3600 (#3601) (f646d73)
- jans-auth-server: added flexible formatter handler for IdTokenFactory class (#3605) (f4b0179)
- jans-auth-server: added sector_identifier_uri content validation (certification) #3639 (#3641) (2583e53)
- jans-auth-server: introduced key_ops for granular map of crypto service to rotation profile #3415 (#3642) (58693c5)
- jans-auth-server: new endpoint for get jwt of ssa based on jti. (#3724) (7dcca94)
- jans-auth-server: OAuth 2.0 Step-up - added acr and auth_time #2589 (#3887) (2bd7a67)
- jans-auth-server: OAuth 2.0 Step-up - added acr and auth_time to introspection response #2589 (#3885) (a325998)
- jans-auth-server: provide ability to ignore/bypass prompt=consent #3721 (#3851) (c0286ba)
- jans-auth-server: provided ability to set scriptDns related attributes of client (e.g. introspectionScripts) #3645 (#3668) (cee2525)
- jans-auth-server: provided convenient method to add claim to AT as JWT in modifyAccessToken() method #3579 (#3629) (cf0a824)
- jans-auth-server: renamed "key_ops" -> "key_ops_type" #3790 (#3791) (cadb3d6)
- jans-auth-server: renamed "key_ops" -> "key_ops_type" #3790 (#3792) (7a6bcba)
- jans-auth-server: use key_ops=ssa to generate jwt from ssa (#3806) (2603bbb)
- jans-linux-setup create test client with all available scopes (#3696) (c2da52e)
- jans-linux-setup spanner rest client (#3436) (e4d1d0c)
- jans-linux-setup ssa admin scope (#3759) (485f7b4)
- jans-tent: add Jans Tent product (#3647) (80c53e0)
- optmize cleander job (#3737) (2a864d9)
- process lib directory in
.gamafiles for ADS projects deployment (#3644) (40268ad) - support cancel request (#3733) (2741e51)
- Support Super Gluu one step authentication to Fido2 server #3593 (#3599) (c013b16)
- terraform-provider-jans: update terraform module (#3813) (605dd16)
Bug Fixes#
- add init containers for adjusting ownership on upgrade (e20e817)
- add init containers for opendj (0264df2)
- auto installing of the GithubAuthenticatorForADS.py has been removed; (#3889) (bd6b7ad)
- cbor data stream lenght calculatro return wrong lengh #3614 (#3615) (22065ea)
- config-api: agama swagger spec and admin-ui web key issue (#3831) (1593997)
- config-api: fixed start-up issue due to scope objectclass case (#3697) (eac6440)
- config-api: plugin result subsequent call (#3633) (3e4d513)
- config-api: user service conflict with fido2 and script enhancement (#3767) (5753d39)
- docker-jans-monolith: use test client and secret (42c9556)
- docker-jans-persistence-loader: add missing persist tokens config when upgrading from previous version (#3849) (5b8036d)
- docker-jans: handle failure on running API requests to Kubernetes API server in Google Cloud Run (#3893) (a31dee3)
- fido2-client: conflict of log4j config (#3636) (77412d5)
- fix authenticatorData encoding (#3815) (687cb2a)
- fix fmt name (#3900) (4a6a0c1)
- fixes for cancel support (#3735) (3e64530)
- jans-auth-server: added testng to agama-inbound #3714 (#3719) (955ac8c)
- jans-auth-server: AS complication fails on main #3863 (#3864) (e2aa1a6)
- jans-auth-server: corrected issue caught by RegisterRequestTest #3683 (#3684) (3e201d8)
- jans-auth-server: error from introspection interception script is not propagated during AT as JWT creation #3904 (#3905) (8c551c0)
- jans-auth-server: jansApp attribute only relevant for SG (#3782) (6153a13)
- jans-auth-server: key_ops in jwks must be array #3777 (#3778) (2be2a03)
- jans-auth-server: provided corrected public key for outdated keystores during id_token creation if key_ops_type is absent #3840 (#3841) (3291eab)
- jans-auth-server: wrong Client Authn Method at token endpoint throws npe #3503 (#3598) (e3bd1e8)
- jans-cli-tui documentation and setup (#3818) (74660db)
- jans-cli-tui include pyproject.toml (ref: #3804) (#3835) (f250372)
- jans-cli-tui rename config-api swagger file (#3758) (a7e14a0)
- jans-cli-tui SSA org_id, status and software_roles (#3765) (4bd3e9a)
- jans-cli-tui typo (#3846) (aaab377)
- jans-cli-tui typo organisation (#3853) (58a974b)
- jans-cli-tui working branch 4 - many different improvements (#3504) (e572552)
- jans-cli-tui working branch 5 (#3649) (4d3f982)
- jans-cli-tui working branch 6 (#3794) (afea59d)
- jans-cli-tui working branch 7 (#3824) (776bab3)
- jans-cli-tui: working branch 9 (#3871) (9f16d75)
- jans-config-api: Fixing runtime ambiguity for RegistrationPersistenceService.java (#3756) (83c7b50)
- jans-config-api: runtime exceptions in config-api at startup (#3725) (8748cc3)
- jans-fido2: RegistrationPersistenceService implemntation (#3728) (d5b8b67)
- jans-linux-setup add twilio and jans-fido2 client libraries to jans-auth (#3716) (4f43328)
- jans-linux-setup conversion fails for null integer field (#3610) (207946c)
- jans-linux-setup downgrade cryptography (#3635) (c7b5e3b)
- jans-linux-setup downgrade jwt for py3.6 (#3621) (322f752)
- jans-linux-setup external libs in jans-fido2.xml (#3627) (8d4783b)
- jans-linux-setup installation without test client (#3706) (e45f19e)
- jans-linux-setup key_ops_type for key regeneration tool (ref: #3881) (#3882) (51c0750)
- jans-linux-setup ldif property objectClass should be case sensitive (#3702) (0dc14a0)
- jans-linux-setup rename config-api swagger file (#3678) (4615973)
- jans-linux-setup rename role_based_client as tui_client (#3630) (b331ef3)
- jans-linux-setup save test_client_id to setup.properties (#3844) (d1d898c)
- jans-linux-setup script locatipn is db (#3788) (4381928)
- jans-linux-setup script locatipn is db openbanking (#3789) (697efc5)
- jans-linux-setup sync test client variable names (#3862) (fe7e24c)
- jans-linux-setup test client fixes (#3699) (72e2f3f)
- jans-pycloudlib: avoid overwritten data by using merge strategy for AWS wrappers (#3832) (cf0d4e3)
- jans-pycloudlib: avoid overwritten data by using merge strategy for Google wrappers (#3826) (809b9db)
- jans-pycloudlib: split google secrets when payload is larger than 65536 bytes (#3890) (a86b098)
- license overwrite (055d72b)
- missing comma delimiter for Postgres index fields (#3741) (1a2d298)
- opendj jans vlume mount (4de4815)
- opendj statefulset permissions (0d9a2a7)
- prepare 1.0.7 release (ce02fd9)
- remove upgrade flag (bee17a7)
- rename role_based_client as tui_client (#3657) (c393cb2)
- store correct script revision after script reload from file (#3704) (2ca6a83), closes #3703
- tent: remove unknown module refference (#3802) (b01a015)
- terraform-provider-jans: update terraform module (#3869) (30e3c67)
- update configmaps ENVs (a797c61)
1.0.6 (2023-01-09)#
Features#
- add attributes and branch for ADS deployments #3095 (#3228) (2dc9267)
- add benchmark demo (#3325) (26bbb0c)
- add endpoint to do syntax check only #3277 (#3299) (3b23636)
- add endpoints for MVP ADS projects management #3094 (#3262) (8546356)
- added custom resource owner password script fro two-factor twilio authentication (#3208) (eae0ca1)
- agama: deploy flows from .gama files (#3250) (df14f8a)
- changes in admin-ui plugin to allow agama-developer-studio to use its OAuth2 apis #3085 (#3298) (9e9a7bd)
- config-api: audit log, agama ADS spec, fix for 0 index search (#3369) (ea04e2c)
- config-api: client claim enhancement, manual spec removed (#3413) (bd2cdf8)
- config-api: health check response rectification and Agama ADS swagger spec (#3293) (faf2888)
- docker-jans: add admin-ui scopes (#3530) (bc62673)
- docker-jans: enable prefix and group for stdout logs (#3481) (e7684e7)
- docs: jans TUI SCIM configuration -- screenshot (#3318) (7b463b0)
- docs: jans TUI SCIM configuration feature - screenshot1 (#3306) (d1adc98)
- docs: jans TUI SCIM configuration feature (#3305) (70e358e)
- jans-auth-server: added ability to return error out of introspection and update_token custom script #3255 (#3356) (a3e5227)
- jans-auth-server: added externalUriWhiteList configuration property before call external uri from AS #3130 (#3425) (6c7df6f)
- jans-auth-server: avoid compilation problem when version is flipped in test code #3148 (#3210) (4d61c7b)
- jans-auth-server: block authentication flow originating from a webview (#3204) (e48380e)
- jans-auth-server: draft for - improve dcr / ssa validation for dynamic registration #2980 (#3109) (233a78c)
- jans-auth-server: end session - if id_token is expired but signature is correct, we should make attempt to look up session by "sid" claim #3231 (#3291) (cd11750)
- jans-auth-server: implemented auth server config property to disable prompt=login #3006 (#3522) (0233cd1)
- jans-auth-server: new configuration for userinfo has been added (#3349) (3ccc4a9)
- jans-auth-server: remove ox properties name (#3285) (f70b207)
- jans-auth-server: renamed "code"->"random" uniqueness claims of id_token to avoid confusion with Authorization Code Flow #3466 (#3467) (dd9d049)
- jans-config-api: added admin-ui scopes in config-api-rs-protect.json (c348ae6)
- jans-core: add AES utility class #3215 (#3242) (7e59795)
- jans-linux-setup script for adding sequenced users to rdbm backend (#3311) (63c74ec)
- problems with handling custom attributes #2752 (#3378) (3028a94)
Bug Fixes#
- #2201 (#3365) (ebca16b)
- #2201 (#3451) (0417c2a)
- #2201 removing an irrelevant head from mkdocs (#3478) (9771205)
- add 'java' to the list of restricted variable names #3533 (#3534) (a970d88)
- add link to api reference (#3394) (f091045)
- agama: after moving agama to jans-auth-server agama model tests are not run #3246 (#3247) (9887e23)
- agama: fix agama auth dependency which blocks build process #3149 (#3244) (8f9fee3)
- agama: fixing tests run on jenkins #3149 (#3261) (cc6c5e1)
- app_info.json value of JANS_BUILD (#3199) (fe35e85)
- Broken swagger address. (843f78b)
- catch org.eclipse.jetty.http.BadMessageException: in (#3330) (1e0ff76), closes #3329
- docs/requirements.txt to reduce vulnerabilities (#3523) (82efd8f)
- docs: jans logging configuration - VM Operation Guide - 1 (#3348) (e0f8c71)
- docs: jans TUI administration -- Config Guide - TUI -- Auth server (#3227) (16ab709)
- docs: jans TUI configuration -- Auth Server - TUI - image (#3237) (3fbc9e7)
- docs: jans TUI configuration -- Config Guide - Auth Server - Client configuration - TUI (#3233) (ee8e056)
- docs: jans TUI configuration -- Fido - TUI (#3251) (cd6eef1)
- docs: jans TUI configuration -- Fido Administration - TUI (#3252) (a371cda)
- docs: jans TUI installation -- Config Guide - TUI (#3224) (cc00a71)
- docs: missing single quotes (#3239) (9f38c6a)
- fix format string #3278 (#3281) (7104d9c)
- fix token indexes and clnId type (#3434) (4a18904)
- generate javadpcs envproperty (9182aa5)
- hash (cdb5204)
- hash (156fb2f)
- jans-auth-server/pom.xml to reduce vulnerabilities (#3314) (f3e8205)
- jans-auth-server: changed getAttributeValues to getAttributeObjectValues (#3346) (a39b61e)
- jans-auth-server: compilation error of server side tests #3363 (#3364) (e83c087)
- jans-auth-server: corrected keys description "id_token <purpose>" -> "Connect
" #3415 (#3560) (75f99bd) - jans-auth-server: Duplicate iss and aud on introspection as jwt #3366 (#3387) (8780e94)
- jans-auth-server: parse string from object (#3470) (db9b204)
- jans-auth-server: when obtain new token using refresh token, check whether scope is null (#3382) (22743d9)
- jans-cli-tui (#3287) (27e7518)
- jans-cli-tui refactor mouse operations (#3482) (39dc0c7)
- jans-config-api/pom.xml to reduce vulnerabilities (#3005) (3e642c2)
- jans-config-api: corrected broken swagger address (#3505) (843f78b)
- jans-eleven/pom.xml to reduce vulnerabilities (#3315) (813cf98)
- jans-linux setup enable couchbase for packages (#3249) (8f72ea6)
- jans-linux-setup agama test data file locations (#3313) (a39fc69)
- jans-linux-setup centos/rhel pgsql installation (#3404) (f168fbc)
- jans-linux-setup copy libs directory of agama test data (#3376) (6a5322d)
- jans-linux-setup enable mysqld on boot for el8 (#3456) (30d082a)
- jans-linux-setup load test data with jans-auth only (#3432) (f696fee)
- jans-linux-setup longtext for pgsql (#3266) (547cee8)
- jans-linux-setup opPolicyUri and opTosUri (#3411) (67e1d22)
- jans-linux-setup remove dependency to removed dependency yaml (#3422) (8385c96)
- jans-linux-setup set db component based on dn (#3290) (8d743f2)
- jans-linux-setup start mysql server before jans-auth on SUSE (#3500) (3822975)
- login page doesn't display the correct localized characters (#3528) (395b376), closes #1660
- minor (#3334) (3225455)
- modify clnId column type (#3459) (701394c)
- prepare for 1.0.6 release (9e4c8fb)
- remove multiple sed commands (#3526) (2b906db)
- TUI client pre-authorized (#3399) (ab30953)
- upgrade org.apache.httpcomponents:httpcore from 4.4.6 to 4.4.15 (#642) (069dceb)
- upgrade org.mvel:mvel2 from 2.1.3.Final to 2.4.14.Final (#648) (c4034d1)
- use correct Ubuntu version in README (#3393) (2673ccd)
- user attributes not updated #2753 (#3326) (c0a0f66)
- user attributes not updated #2753 (#3403) (f793f92)
1.0.5 (2022-12-01)#
Features#
- add custom annotation for configuration property and feature flag documentation (#2852) (9991d1c)
- add feature to include custom-claims in user-info endpoint of admin-ui plugin #2969 (#2970) (0549879)
- add jans cli tui (#2384) (c9c502b)
- allow to use like with lower together (#2944) (1807629)
- charts: add pdb and topology spread constrants (ce575c2)
- documentation for ssa and remove softwareRoles query param of get ssa (#3031) (d8e14eb)
- image: preserve attribute's values in jans-auth config (#3013) (3e9e7fc)
- jans cli to jans-cli-tui (#3063) (fc20e28)
- jans-auth-server: check offline_access implementation has all conditions defined in spec #1945 (#3004) (af30e4c)
- jans-auth-server: corrected GluuOrganization - refactor getOrganizationName() #2947 (#2948) (9275576)
- jans-auth-server: java docs for ssa (#2995) (892b87a)
- jans-auth-server: remove redirect uri on client registration when grant types is password or client credentials (#3076) (cd876b4)
- jans-auth-server: specify minimum acr for clients #343 (#3083) (b0034ec)
- jans-auth-server: swagger docs for ssa (#2953) (7f93bca)
- jans-auth-server: updated mau on refreshing access token #2955 (#3025) (56de619)
- jans-linux-setup include permission of all user roles (#3009) (62a421d)
- jans-pycloudlib: add AWS Secrets Manager support for configuration layers (#3112) (0522e61)
Bug Fixes#
- (jans-auth-server): fixed Client serialization/deserialization issue #2946 (#3064) (31b5bfc)
- (jans-auth-server): fixed client's sortby #3075 (#3079) (e6b0e58)
- #2487 - fido script, doc already moved to script-catalog (#2982) (10d8df5)
- #2487 - irrelevant folder, agama script is in agama-bridge (#2993) (d19b13a)
- #2487 - removing inwebo (#2975) (052f91f)
- #2487 - SIWA and SIWG (Sign in with Apple-Google), moved to script-catalog (#2983) (402e7ae)
- #2487 removing duplicated files (#3007) (9f3d051)
- #2487 scripts-catalog folder restructuring (#2999) (7b66f2b)
- #2666 (#3011) (f98cbc5)
- client-name, logout, user (#3122) (f374831)
- config-api: error handling for agama get and org patch (#3028) (21dd6e5)
- config-api: fix for swagger spec for scope creation and sessoin endpoint filter (#2949) (2989f1d)
- config-api: swagger update for enum and error handling (#2934) (6b61556)
- demo: incorrect URL to helm charts location (#2935) (b7e395b)
- disable github authentication and interception scripts by default and other changes. #3022 (#3023) (13f5998)
- ensure non-empty array is generated #2672 (#3047) (47902bd)
- getting ready for a release (0bda832)
- jans-auth-server: corrected regression made in token request #2921 (#2922) (deeae74)
- jans-auth-server: wrong import in GluuOrganization class which leads to failure on jans-config-api #2957 (#2958) (af4eda8)
- jans-auth-server: wrong userinfo_encryption_enc_values_supported in OpenID Configuration #2725 (#2951) (bc1a8ca)
- jans-cli-docs update links (#3118) (04fbb98)
- jans-config-api: user attributes not updated #2753 (082cfe3)
- jans-config-api: user attributes not updated #2753 (#3110) (803468b)
- jans-fido2: #1120 (#2928) (0fea95a)
- jans-fido2: #2840 (#2974) (d3351e1)
- jans-fido2: #2971 (#2972) (2f15cf8)
- jans-linux-setup fido2 script placeholder in scripts template (#2986) (70a4fe0)
- jans-linux-setup remove opendj sysv script (#2998) (13eebe4)
- jans-linux-setup service description for jans-auth (#2989) (6566d27)
- jans: added null check to avoid NullPointerException (#3077) (42d49b2)
- the admin-ui role/permission/mapping delete apis are not protected by appropriate permissions #2991 (#2992) (7d68021)
- typo (#2950) (6df810b)
1.0.4 (2022-11-08)#
Features#
- for file based scripts check both script revision and file (#2878) (97ab071)
- jans-auth-server: added token exchange support to client #2518 (#2855) (943d99f)
- jans-auth-server: ssa validation endpoint (#2842) (de8a86e)
- ssa revoke endpoint (#2865) (9c68f91)
Bug Fixes#
- #2825 (#2828) (5ce21aa)
- avoid NPE when configuration is missing #2857 (#2863) (4a27091)
- config-api: fixes for client creation, enum handling (#2854) (3121493)
- fix OR filters join when sub-filters uses lower (#2850) (3dc6b32)
- image: add missing write access in filesystem (#2846) (db4670d), closes #2844
- image: multiple dynamic scopes created when using 2 replicas (#2871) (5e0f1e6)
- jans-auth-server: fix language metadata format (#2883) (e21e206)
- jans-linux-setup render webapps.xml (#2839) (ed8fa84)
- pycloudlib: searching values from spanner returns empty set (#2833) (861a065)
1.0.3 (2022-11-01)#
Features#
- add inum claim in profile scope #2095 (#2096) (f67c32e)
- add new methods to allow get/set list of custom attributes from (#2105) (5ac23a1), closes #2104
- admin-ui apis refactoring #2388 (#2390) (c7b26e9)
- agama: add utility classes for inbound identity (#2204) (29f58ee)
- agama: add utility classes for inbound identity (#2231) (96e32a4)
- agama: add utility classes for inbound identity (#2280) (ca6fdc9)
- agama: add utility classes for inbound identity (#2417) (2878bdd)
- config-api: multiple pattern handling for search request (#2590) (46886fb)
- config-api: multiple pattern search in attribute api (#2491) (9f646ff)
- disable TLS in CB client by default (#2167) (8ec5dd3)
- docker-jans-fido2: allow creating initial persistence entry (#2029) (41dfab7)
- docker-jans-monolith: add docker jans monolith (#2323) (ba511c3)
- docker-jans-scim: allow creating initial persistence entry (#2035) (e485618)
- fix susrefire tests in filter module (#2141) (118d77c)
- generate zip files with CB/Spanner dependencies (#2715) (e4e2670)
- image: add custom libs for couchbase and spanner persistence (#2784) (db559dd)
- image: add token-exchange and device secret (#2788) (87c4676)
- image: generate scopes from swagger/openapi files (#2759) (63722ea)
- jans-auth-server: add access_token_singing_alg_values_supported to discovery #2372 (#2403) (3784c83)
- jans-auth-server: added allowSpontaneousScopes AS json config #2074 (#2111) (3083a3f)
- jans-auth-server: added convenient idTokenLifetime client property #2656 (#2668) (f97bfce)
- jans-auth-server: added creator info to scope (time/id/type) #1934 (#2023) (ca65b24)
- jans-auth-server: allow authentication for max_age=0 #2361 (#2362) (aed6ee3)
- jans-auth-server: allow end session with expired id_token_hint (by checking signature and sid) #2430 (#2431) (1b46b44)
- jans-auth-server: Draft support of OpenID Connect Native SSO (#2711) (595d1aa)
- jans-auth-server: extended client schema - added jansClientGroup #1824 (#2299) (29cfd4e)
- jans-auth-server: renamed "enabledComponents" conf property -> "featureFlags" #2290 (#2319) (56a33c4)
- jans-auth-server: updating arquillian tests 1247 (#2017) (ee200a7)
- jans-config-api: added new attributes (#1940) (757b22f)
- jans-config-api: agama flow endpoint (#1898) (0e73306)
- jans-config-api: agama patch endpoint (#2028) (0b96a95)
- jans-config-api: endpoint to get UmaResource based on clientId and swagger changes (#1912) (a3f9145)
- jans-config-api: enhancement to agama and uma resource endpoint (#2015) (f2c19a1)
- jans-config-api: fetch the associated clients_id in GET scopes api response (#1946) (ffe743c)
- jans-config-api: new endpoint to fetch scope by creator and type (#2098) (cf15d67)
- jans-config-api: pagination functionality for attribute endoint (#2232) (8bb8b70)
- jans-config-api: pagination functionality for endpoints and swagger spec rectification (#2397) (d893e13)
- jans-config-api: Scope object changes for creator details (#2033) (a8b8d76)
- jans-config-api: session management endpoint (#2158) (30f6e1a)
- jans-core: port Gluu ORM-based document store (#2581) (b61df80)
- jans-linux-setup delete_dn() (#2450) (b80a270)
- jans-linux-setup external CB/Spanner libs (#2730) (d97bffe)
- jans-linux-setup load agama test data (#2749) (c368a02)
- jans-linux-setup option reset-rdbm-db (#2413) (1029619)
- jans-linux-setup postgresql support (#2409) (08ecaf9)
- jans-linux-setup set_class_path() (#2442) (8128244)
- jans-linux-setup: added device_sso scope (#2766) (7c7af09)
- jans-linux-setup: added token exchange grant type (#2768) (b3abcfe)
- jans-scim: make max no. of operations and payload size of bulks operations parameterizable (#1872) (c27a45b)
- merge ORM from Gluu (#2468) (93149fd)
- need to fetch the associated clients_id in GET scopes api response #1923 (#1949) (88606a5)
- ssa creation endpoint (#2495) (61c83e3)
- sync mds v3 config in fido2 image (#2531) (56c8442)
- update Coucbase ORM to conform SDK 3.x (config updates) #1851 (#2118) (fceec83)
- update search by example to use multivalued property (#2298) (8ed3007)
- upgrade javax.servlet:javax.servlet-api from 3.1.0 to 4.0.1 (#646) (d186a05)
- upgrade org.jboss.resteasy:resteasy-servlet-initializer from 4.5.10.Final to 5.0.1.Final (#645) (a9a712d)
- upgrade org.jetbrains:annotations from 18.0.0 to 23.0.0 (#637) (e5fca5a)
- use entry in contain entry (#2311) (de9d00a)
Bug Fixes#
- #2143 (#2144) (ff7f9f4)
- #2157 (#2159) (dc8cb60)
- #776 (#2503) (a564431)
- #817 - script for DUO should have the universal prompt, other APIs are deprecated + documentation minor fixes (#2363) (ccc13af)
- #817 (#2364) (bbcd87a)
- admin-ui plugin should use encoded client_secret for authentication #2717 (#2718) (cc0020e)
- backticks CB attributes in N1QL (#2313) (d6db13d)
- cb ttl update sdk 3 (#2434) (534c6cb)
- close connections after reading metadata (#2327) (00f4f79)
- config-api: client default value handling (#2585) (fbcbbad)
- config-api: fix for acr error handling and spec enhancement for example (#2443) (8113841)
- config-api: fix for assosiated client not fetched for scope (#2540) (08488d1)
- config-api: fix for returning associated-clients for scope (#2567) (e623f64)
- config-api: fixing discrepancies in the api (#2216) (af4d3a5)
- config-api: rectified sortBy field for Agama resource (#2513) (bb3ac95)
- config-api: removing CB and MySqlDB endpoints and swagger fixes (#2480) (cc68cc9)
- config-api: scope addiotion while client creation (#2714) (d51ae24)
- config-api: search filter logic for attribute resource (#2310) (c75ff1d)
- config-api: specifying JSON values for Attribute enum properties (#2663) (55d20c8)
- config-api: swagger fixes for missing scope and admin-ui paths (#2697) (6dcbff3)
- config-api: swagger spec changes for session, properties endpoint and ignoring customobject for non LDAP DB (#2348) (c6acaac)
- docs: fix MarkupSafe hash (#2699) (adf2a6d)
- docs: revert MarkupSafe hash (#2701) (e722aed)
- don't backticks all in N1QL (#2316) (7cc721e)
- don't execute next paged search if current result count less than (#2171) (94a162f)
- fix search with % (#2307) (90987d7)
- fixed multiple encoding issue during authz (#2152) (fb0b6d7)
- forgot_password: update imports to jans locations (#1637) (6c6eeb3), closes #1601
- image: add missing script for openbanking installation (#2618) (de775a7)
- image: add missing ssa configuration (#2613) (b70b8b2)
- image: handle vulnerabilities reported by artifacthub scanner (#2436) (77d8d88)
- image: missing configuration for openbanking discovery (#2796) (ba664f0)
- image: remove metadata-root-ca.cer inside fido2 image (#2603) (9461fbc)
- images: conform to new couchbase persistence configuration (#2188) (c708542)
- include idtoken with dynamic scopes for ciba (#2108) (d9b5341)
- incorrect contents #817 (#2365) (746b33f)
- jans auth server: well known uppercase grant_types response_mode (#2706) (39f613d)
- Jans cli SCIM fixes (#2394) (a009943)
- jans-auth-server: "login:prompt" property passed in request object JWT breaks authentication #2493 (#2537) (9d4d84a)
- jans-auth-server/pom.xml to reduce vulnerabilities (#2466) (86e62f9)
- jans-auth-server/pom.xml to reduce vulnerabilities (#2520) (f927692)
- jans-auth-server: added schema for ssa, corrected persistence, added ttl #2543 (#2544) (ce2bc3f)
- jans-auth-server: client tests expects "scope to claim" mapping which are disabled by default #1873 (958cc92)
- jans-auth-server: fixing client tests effected by "scope to claim" mapping which is disabled by default #1873 (#1910) (6d81792)
- jans-auth-server: generate description during built-in key rotation #1790 (#2068) (cd1a77d)
- jans-auth-server: increased period of session authn time check (#1918) (a41905a)
- jans-auth-server: native sso - return device secret if device_sso scope is present #2790 (#2791) (9fa213f)
- jans-auth-server: npe - regression in token endpoint (#2763) (fe659d7)
- jans-auth-server: NPE during OB discovery #2793 (#2794) (fb3ee86)
- jans-auth-server: npe in discovery if SSA endpoint is absent #2497 (#2498) (c3b00b4)
- jans-auth-server: perform redirect_uri validation if FAPI flag is true #2500 (#2502) (aad0460)
- jans-auth-server: PKCE parameters from first SSO request retains in further calls (#2620) (de98b41)
- jans-auth-server: ssa get endpoint (#2719) (35ffbf0)
- jans-auth-server: structure, instance customAttributes, initial data for ssa (#2577) (f11f789)
- jans-cli access token expiration (#2352) (d506c8e)
- jans-cli displayName for OpenID Clients with MySQL backend (ref: #2314) (#2315) (e0dff68)
- jans-cli endpint param (#2569) (f6faa71)
- jans-cli fixes (#2429) (c9673dc)
- jans-cli fixes (#2515) (ccaacc8)
- jans-cli info for ConfigurationAgamaFlow (#2561) (2c446a7)
- jans-cli tabulate attrbiutes (#2321) (cb1e40d)
- jans-cli user patch (#2334) (fa3592b)
- jans-client-api: upgrade seleniumhq version from 3.x to 4.x (#2110) (d48271e)
- jans-config-api parameter month is not mandatory for endpoint /stat (#2459) (0654f98)
- jans-config-api/plugins/sample/demo/pom.xml to reduce vulnerabilities (#2625) (14dd8a6)
- jans-config-api/plugins/sample/demo/pom.xml to reduce vulnerabilities (#853) (2792b53)
- jans-config-api/plugins/sample/helloworld/pom.xml to reduce vulnerabilities (#2630) (0e39fb7)
- jans-config-api/plugins/sample/helloworld/pom.xml to reduce vulnerabilities (#2727) (5f42948)
- jans-config-api/plugins/sample/helloworld/pom.xml to reduce vulnerabilities (#972) (e2ae05e)
- jans-config-api/pom.xml to reduce vulnerabilities (#1464) (c832f98)
- jans-config-api/pom.xml to reduce vulnerabilities (#1746) (9dfe60e)
- jans-config-api/pom.xml to reduce vulnerabilities (#1780) (3252ff7)
- jans-config-api/pom.xml to reduce vulnerabilities (#2655) (499ff89)
- jans-config-api: avoid loss of attributes in agama endpoints (#2058) (3c8f816)
- jans-config-api: config-api compilation failed in main #2030 (#2031) (1659da1)
- jans-config-api: Fix to not update Metadata for PUT and PATCH agama endpoint (#2046) (da93050)
- jans-config-api: issue UMA scope request being saved as OAUTH (#2063) (81472aa)
- jans-config-api: rectified endpoint url in swagger spec for uma resource (#1965) (0dc3b2e)
- jans-core: removed redundant reference #1927 (#1928) (064cbb8)
- jans-eleven/pom.xml to reduce vulnerabilities (#1463) (b6def37)
- jans-eleven/pom.xml to reduce vulnerabilities (#2471) (903bda2)
- jans-eleven/pom.xml to reduce vulnerabilities (#2519) (c0a2bbe)
- jans-eleven/pom.xml to reduce vulnerabilities (#2676) (d27a7f9)
- jans-linus-setup typo (#2427) (8b5f287)
- jans-linux-setup add mod_rewrite to httpd_2.4.conf (#1987) (b33b78e)
- jans-linux-setup Config API installation status (#2276) (6cf25ae)
- jans-linux-setup config api prompt (#2293) (abfa315)
- jans-linux-setup config-api scope type oauth (#2318) (8e48d71)
- jans-linux-setup debian11 installation (#2160) (8b99498)
- jans-linux-setup don't call package installation unless missing packages (#2641) (d340c3c)
- jans-linux-setup downloads dependencies without interaction in case -n (#2546) (d53f9a2)
- jans-linux-setup extract files (#2464) (35ced3e)
- jans-linux-setup humanize os name (#2066) (8c89638)
- jans-linux-setup install cb via apt for dependencies (#2330) (732ce6a)
- jans-linux-setup lowercase admin user status (#2274) (28e5f06)
- jans-linux-setup MySQL schema name is db name (#2592) (2fc3d6e)
- jans-linux-setup python3-psycopg2 (#2423) (0d4aad2)
- jans-linux-setup remove fido2 metadata-root-ca.cer (#2594) (139a6a4)
- jans-linux-setup scan docs/script-catalog for custom scripts (#2488) (de585c9)
- jans-linux-setup test data load (#2685) (4d4d848)
- jans-linux-setup typo (#2526) (4fa83fc)
- jans-linux-setup upgrade to MDS3 in fido2 (#2507) (fcbcd2f)
- jans-linux-setup-typo (#2523) (579ccac)
- jans-linux-setup: review columns size for Agama tables (#2324) (55d7a7e)
- jans-scim: improper handling response of get user operation (#2420) (b9e00af)
- jans-scim: X509 cert not set after successful POST request (#2407) (fd616c4)
- jans: config api and client api (#2408) (003af55)
- localized String should be converted to JSON (#2542) (30225f9)
- minor (#2470) (657b9f7)
- minor (#2786) (3f67763)
- moved contents under scripts-catalog (#2370) (fa2273a)
- moved to script-catalog (#2485) (960b87f)
- orm: length check added before accessing CustomObjectAttribute values (#2505) (6ff718f)
- pycloudlib: handle type mismatch for iterable (#2004) (46e0b2e)
- pycloudlib: set default values for JSONB column (#2651) (9b536ab)
- random password for keystores (#2102) (b7d9af1)
- remove request-body from delete endpoints of admin-ui plugin #2341 (#2342) (1429a85)
- scan docs/script-catalog for custom scripts (#2533) (5a0521e)
- select first sig key if none requested (#2494) (31fb464)
- update authn schemes in yaml descriptor #2414 (#2415) (4b239af)
- update chart repo (8e347a3)
- update chart repo (011af9d)
- update error pages (#1957) (3d63f4d)
- upgrade com.google.http-client:google-http-client-jackson2 from 1.26.0 to 1.40.1 (#644) (31bc823)
- use iterator to correcly remove OC attribute (#2138) (b590981)
Miscellaneous Chores#
1.0.2 (2022-08-30)#
Features#
- add inum claim in profile scope #2095 (#2096) (f67c32e)
- add new methods to allow get/set list of custom attributes from (#2105) (5ac23a1), closes #2104
- add newly redesigned jans-client-api (#1540) (4582ae5)
- add support for date ranges in statistic client #1575 (#1653) (8048cd9)
- add support for requestUriBlockList config (#1572) (63b3b74)
- added config to disable attempt to update before insert in cache (#1787) (d9a07ff)
- agama: add utility classes for inbound identity (#2204) (29f58ee)
- agama: add utility classes for inbound identity (#2231) (96e32a4)
- agama: allow the config-api to perform syntax check of flows (#1621) (2e99d3a)
- agama: reject usage of repeated input names (#1484) (aed8cf3)
- disable TLS in CB client by default (#2167) (8ec5dd3)
- docker-jans-fido2: allow creating initial persistence entry (#2029) (41dfab7)
- docker-jans-scim: allow creating initial persistence entry (#2035) (e485618)
- endpoint to get details of connected FIDO devices registered to users #1465 (#1466) (62522fe)
- expose prometheus metrics via jmx exporter (#1573) (205e320)
- fix susrefire tests in filter module (#2141) (118d77c)
- fix the dependencies and code issues (#1473) (f4824c6)
- introduce new hybrid persistence mapping (#1505) (a77ab60)
- jans linux setup enable/disable script via arg (#1634) (0b3cf16)
- jans linux setup openbanking CLI and certificate automation (#1472) (62b5868)
- jans-auth-server: add support for ranges in statistic endpoint (UI team request) (fd66720)
- jans-auth-server: added allowSpontaneousScopes AS json config #2074 (#2111) (3083a3f)
- jans-auth-server: added convenient method for up-scoping or down-scoping AT scopes #1218 (5d71655)
- jans-auth-server: added creator info to scope (time/id/type) #1934 (#2023) (ca65b24)
- jans-auth-server: added restriction for request_uri parameter (blocklist and allowed client.request_uri) #1503 (0696d92)
- jans-auth-server: added sid and authn_time for active sessions response (bf9b572)
- jans-auth-server: if applicationType is not set during client registration AS should default to 'web' #1687 (f9695e1)
- jans-auth-server: improve client assertion creation code (ClientAuthnRequest) #1182 (81946b2)
- jans-auth-server: improved TokenRestWebServiceValidator and added test for it #1591 (929048e)
- jans-auth-server: jwt "exp" must consider "keyRegenerationInterval" #1233 (023cf8a)
- jans-auth-server: make check whether user is active case insensitive #1550 (d141837)
- jans-auth-server: persist org_id from software statement into client's "o" attribute (021d3bd)
- jans-auth-server: removed dcrSkipSignatureValidation configuration property #1623 (6550247)
- jans-auth-server: removed id_generation_endpoint and other claims from discovery response #1827 (4068197)
- jans-auth-server: split grant validation logic into TokenRestWebServiceValidator #1591 (812e605)
- jans-auth-server: split validation logic to TokenRestWebServiceValidator #1591 (f9f6f49)
- jans-auth-server: updating arquillian tests 1247 (#2017) (ee200a7)
- jans-cli tabulate scim user list (#1518) (d370978)
- jans-client-api: migration to Weld/Resteasy and Jetty 11 - Issue 260 (#1319) (420ffc3)
- jans-client-api: Use injectable operations and remove serviceprovider (#1643) (982cab3)
- jans-config-api: added new attributes (#1940) (757b22f)
- jans-config-api: agama configuration integration (#1501) (e84575b)
- jans-config-api: agama flow endpoint (#1898) (0e73306)
- jans-config-api: agama patch endpoint (#2028) (0b96a95)
- jans-config-api: endpoint to get UmaResource based on clientId and swagger changes (#1912) (a3f9145)
- jans-config-api: enhancement to agama and uma resource endpoint (#2015) (f2c19a1)
- jans-config-api: enhancement to expose user inum at root level of response (#1477) (1e4b6bc)
- jans-config-api: fetch the associated clients_id in GET scopes api response (#1946) (ffe743c)
- jans-config-api: fixed user management swagger spec for mandatory fields (#1519) (29ff812)
- jans-config-api: new endpoint to fetch scope by creator and type (#2098) (cf15d67)
- jans-config-api: new functionality and swagger fix (#1802) (fc81d1d)
- jans-config-api: Scope object changes for creator details (#2033) (a8b8d76)
- jans-config-api: session management endpoint (#2158) (30f6e1a)
- jans-config-api: swagger spec change to expose user inum at root level of response (#1483) (c202705)
- jans-config-api: user management endpoint 418 (#1548) (b95fa7b)
- jans-core: added StandaloneJavaCustomScriptManagerTest (48ba08b)
- jans-linux-setup add forgot password script (#1587) (b2e3eb3)
- jans-linux-setup agama (#1486) (6b23bfe)
- jans-linux-setup debian 11 packages (#1769) (6fbef91)
- jans-linux-setup Script for Keystroke Authentication (#1853) (11a9e04)
- jans-linux-setup: #1731 (#1732) (6fad15b)
- jans-linux-setup: added discoveryDenyKeys #1827 (f77a6da)
- jans-orm: update Couchbase ORM to use SDK 3.x #1851 (#1852) (d9d5157)
- jans-scim: make max no. of operations and payload size of bulks operations parameterizable (#1872) (c27a45b)
- need to fetch the associated clients_id in GET scopes api response #1923 (#1949) (88606a5)
- proper plugin activation of config-api container (#1627) (07cabb9)
- update Coucbase ORM to conform SDK 3.x (config updates) #1851 (#2118) (fceec83)
- update DSL to support shorthand for finish #1628 (71e4652)
Bug Fixes#
- : start_date and end_date not required in /stat reponse (swagger specs) #1767 (#1768) (c21452a)
- #2143 (#2144) (ff7f9f4)
- #2157 (#2159) (dc8cb60)
- a workaround for fido2 dependency (#1590) (527c928)
- add path parameter to /fido2/registration/entries #1465 (#1508) (808d0c4)
- agama: template overriding not working with more than one level of nesting (#1841) (723922a)
- build from source (#1793) (e389363)
- config-api: fixing discrepancies in the api (#2216) (af4d3a5)
- correct the link to image (#1660) (0943d81)
- docker-jans-persistence-loader/Dockerfile to reduce vulnerabilities (#1829) (8e4ae15)
- don't execute next paged search if current result count less than (#2171) (94a162f)
- fido2-plugin throwing error during deployment #1632 (#1633) (90d2c8a)
- fix typos and other issues in jans-config-api swagger specs #1665 (#1668) (3c3a0f4)
- images: conform to new couchbase persistence configuration (#2188) (c708542)
- include idtoken with dynamic scopes for ciba (#2108) (d9b5341)
- indentation (#1821) (8353092)
- jans app and java version (#1492) (1257e49)
- Jans cli user userpassword (#1542) (d2e13a2)
- jans-auth-server: client tests expects "scope to claim" mapping which are disabled by default #1873 (958cc92)
- jans-auth-server: corrected npe in JwtAuthorizationRequest (9c9e7bf)
- jans-auth-server: disable surefire for jans-auth-static (7869efa)
- jans-auth-server: fix missing jsonobject annotation (#1651) (be5b82a)
- jans-auth-server: fixed NPE during getting AT lifetime #1233 (f8be086)
- jans-auth-server: fixing client tests effected by "scope to claim" mapping which is disabled by default #1873 (#1910) (6d81792)
- jans-auth-server: generate description during built-in key rotation #1790 (#2068) (cd1a77d)
- jans-auth-server: increased period of session authn time check (#1918) (a41905a)
- jans-auth-server: sql localizedstring persistence SqlEntryManager (#1475) (b959b94)
- jans-cli download yaml files for build (#1635) (31b7e49)
- jans-cli help message format and prompt values (ref: #1352) (#1478) (37a9181)
- jans-cli hide menu item (#1510) (b70fc52)
- jans-cli user list failing for empty customAttributes (#1525) (7cbf10b)
- jans-client-api: minor observations PR13119 - typo transalation code-improvement (#1806) (6df2e42)
- jans-client-api: remove jans-config-api dependency and solve wrong test dependencies (#1737) (97dbe9c)
- jans-client-api: upgrade seleniumhq version from 3.x to 4.x (#2110) (d48271e)
- jans-config-api add JAVA to programmingLanguage (ref: #1656) (#1667) (a885a92)
- jans-config-api: avoid loss of attributes in agama endpoints (#2058) (3c8f816)
- jans-config-api: config-api compilation failed in main #2030 (#2031) (1659da1)
- jans-config-api: Fix to not update Metadata for PUT and PATCH agama endpoint (#2046) (da93050)
- jans-config-api: fixed due to couchbase cluster changes(#1863) (c996b51)
- jans-config-api: fixes for path conflict for SCIM config and spec for UMA Resource mandatory fields (#1805) (6d8cff6)
- jans-config-api: issue UMA scope request being saved as OAUTH (#2063) (81472aa)
- jans-config-api: rectified endpoint url in swagger spec for uma resource (#1965) (0dc3b2e)
- jans-config-api: removed java_script from programmingLanguages (8b935d8)
- jans-config-api: swagger spec change to add missing attributes for Client (#1786) (e623771)
- jans-config-api: switch to 1.0.1-SNAPSHOT (e8a9186)
- jans-core: removed redundant reference #1927 (#1928) (064cbb8)
- jans-core: switch to 1.0.1-SNAPSHOT (dbe9355)
- jans-linux-setup add dummy jansRedirectURI to scim client (5023c02)
- jans-linux-setup add gcs module path for downloading apps (#1538) (e540738)
- jans-linux-setup add gcs path after packages check (ref: #1514) (#1516) (31dd609)
- jans-linux-setup add mod_rewrite to httpd_2.4.conf (#1987) (b33b78e)
- jans-linux-setup debian11 installation (#2160) (8b99498)
- jans-linux-setup disable script Forgot_Password_2FA_Token (#1662) (377affc)
- jans-linux-setup displayName of forgot-password script (#1595) (07a5ea0)
- jans-linux-setup download jans-auth for --download-exit (#1659) (879ed87)
- jans-linux-setup enable forgot-password script (#1597) (149d19c)
- jans-linux-setup humanize os name (#2066) (8c89638)
- jans-linux-setup jans and jetty version (ref: #1792) (#1795) (58cbe20)
- jans-linux-setup multiple argument --import-ldif (#1476) (5556f36)
- jans-linux-setup no prompt for eleven installation (#1748) (7228391)
- jans-linux-setup python executable when launching setup (#1683) (87ac58c)
- jans-linux-setup remove 101-jans.ldif and 77-customAttributes.ldif (#1831) (bea6302)
- jans-linux-setup remove apache config when uninstall (#1844) (4a5bc3e)
- jans-linux-setup remove temporary link file (#1495) (673859a)
- jans-linux-setup securing files and dirs under /etc/jans (#1782) (d64a7ae)
- jans-orm: fixed npe in filter processor and covered with tests (ef46516)
- jans-orm: switch to 1.0.1-SNAPSHOT (0030da7)
- login.xhtml: add google client js (#1666) (daf9849)
- main docker version (1220e1c)
- pycloudlib: handle type mismatch for iterable (#2004) (46e0b2e)
- random password for keystores (#2102) (b7d9af1)
- test data for login (#1757) (e043949)
- update chart repo (8e347a3)
- update chart repo (011af9d)
- update error pages (#1957) (3d63f4d)
- update external modules for otp/fido2 (#1589) (fc42181)
- use iterator to correcly remove OC attribute (#2138) (b590981)
Miscellaneous Chores#
- prepare docker images release 1.0.1-1 (12660a8)
- prepare helm chart release 1.0.1 (ae78b76)
- release 1.0.1 (828bfe8)
- release 1.0.2 (43dead6)
- release 1.0.2-1 (d01b51a)
1.0.1 (2022-07-06)#
Features#
- add newly redesigned jans-client-api (#1540) (4582ae5)
- add support for date ranges in statistic client #1575 (#1653) (8048cd9)
- add support for requestUriBlockList config (#1572) (63b3b74)
- agama: allow the config-api to perform syntax check of flows (#1621) (2e99d3a)
- agama: improve flows timeout (#1447) (ccfb62e)
- agama: reject usage of repeated input names (#1484) (aed8cf3)
- endpoint to get details of connected FIDO devices registered to users #1465 (#1466) (62522fe)
- enhance error handling #1434 (a3f6314)
- expose prometheus metrics via jmx exporter (#1573) (205e320)
- fix the dependencies and code issues (#1473) (f4824c6)
- introduce new hybrid persistence mapping (#1505) (a77ab60)
- jans linux setup enable/disable script via arg (#1634) (0b3cf16)
- jans linux setup openbanking CLI and certificate automation (#1472) (62b5868)
- jans-auth-server: add support for ranges in statistic endpoint (UI team request) (fd66720)
- jans-auth-server: added convenient method for up-scoping or down-scoping AT scopes #1218 (5d71655)
- jans-auth-server: added restriction for request_uri parameter (blocklist and allowed client.request_uri) #1503 (0696d92)
- jans-auth-server: added sid and authn_time for active sessions response (bf9b572)
- jans-auth-server: improve client assertion creation code (ClientAuthnRequest) #1182 (81946b2)
- jans-auth-server: make check whether user is active case insensitive #1550 (d141837)
- jans-auth-server: persist org_id from software statement into client's "o" attribute (021d3bd)
- jans-auth-server: removed dcrSkipSignatureValidation configuration property #1623 (6550247)
- jans-cli --no-suggestion for automated testing (#1437) (187cc07)
- jans-cli tabulate scim user list (#1518) (d370978)
- jans-client-api: migration to Weld/Resteasy and Jetty 11 - Issue 260 (#1319) (420ffc3)
- jans-config-api: agama configuration integration (#1501) (e84575b)
- jans-config-api: enhancement to expose user inum at root level of response (#1477) (1e4b6bc)
- jans-config-api: fixed user management swagger spec for mandatory fields (#1519) (29ff812)
- jans-config-api: swagger spec change to expose user inum at root level of response (#1483) (c202705)
- jans-config-api: user management endpoint 418 (#1548) (b95fa7b)
- jans-core: added Discovery.java script and sample external service (440f2dd)
- jans-core: added StandaloneJavaCustomScriptManagerTest (48ba08b)
- jans-core: added test dependencies to scripts (53e5f67)
- jans-linux-setup add forgot password script (#1587) (b2e3eb3)
- jans-linux-setup agama (#1486) (6b23bfe)
- proper plugin activation of config-api container (#1627) (07cabb9)
- update DSL to support shorthand for finish #1628 (71e4652)
Bug Fixes#
- a workaround for fido2 dependency (#1590) (527c928)
- add path parameter to /fido2/registration/entries #1465 (#1508) (808d0c4)
- correct the link to image (#1660) (0943d81)
- fido2-plugin throwing error during deployment #1632 (#1633) (90d2c8a)
- fix typos and other issues in jans-config-api swagger specs #1665 (#1668) (3c3a0f4)
- jans app and java version (#1492) (1257e49)
- Jans cli user userpassword (#1542) (d2e13a2)
- jans-auth-server: added SessionRestWebService to rest initializer (f0ebf67)
- jans-auth-server: corrected npe in JwtAuthorizationRequest (9c9e7bf)
- jans-auth-server: disable surefire for jans-auth-static (7869efa)
- jans-auth-server: fix missing jsonobject annotation (#1651) (be5b82a)
- jans-auth-server: sql localizedstring persistence SqlEntryManager (#1475) (b959b94)
- jans-cli download yaml files for build (#1635) (31b7e49)
- jans-cli help message format and prompt values (ref: #1352) (#1478) (37a9181)
- jans-cli hide menu item (#1510) (b70fc52)
- jans-cli user list failing for empty customAttributes (#1525) (7cbf10b)
- jans-config-api add JAVA to programmingLanguage (ref: #1656) (#1667) (a885a92)
- jans-config-api: removed java_script from programmingLanguages (8b935d8)
- jans-config-api: switch to 1.0.1-SNAPSHOT (e8a9186)
- jans-core: switch to 1.0.1-SNAPSHOT (dbe9355)
- jans-linux-setup add gcs module path for downloading apps (#1538) (e540738)
- jans-linux-setup add gcs path after packages check (ref: #1514) (#1516) (31dd609)
- jans-linux-setup disable script Forgot_Password_2FA_Token (#1662) (377affc)
- jans-linux-setup displayName of forgot-password script (#1595) (07a5ea0)
- jans-linux-setup download jans-auth for --download-exit (#1659) (879ed87)
- jans-linux-setup enable forgot-password script (#1597) (149d19c)
- jans-linux-setup multiple argument --import-ldif (#1476) (5556f36)
- jans-linux-setup python executable when launching setup (#1683) (87ac58c)
- jans-linux-setup remove temporary link file (#1495) (673859a)
- jans-orm: switch to 1.0.1-SNAPSHOT (0030da7)
- main docker version (1220e1c)
- remove jans-auth-common dependency #1459 (75f4fb5)
- update external modules for otp/fido2 (#1589) (fc42181)
- update pom #1438 (#1439) (66b9962)
Miscellaneous Chores#
- prepare docker images release 1.0.1-1 (12660a8)
- prepare helm chart release 1.0.1 (ae78b76)
- release 1.0.1 (828bfe8)
1.0.0 (2022-05-20)#
Features#
- add helper to create persistence entry from LDIF file (#1262) (f2e653e)
- add schema updates #1390 (c9023b3)
- add script for Google login (#1141) (bac9144)
- add super-jans project (1ac74d0)
- adding logs to debug license issues#1258 (#1281) (8a08771)
- adjust ownership and permission to avoid bloated images (#1312) (d016682)
- allow flows to access their metadata properties #1340 (344ba04)
- call id-generation script when creating user/group #1145 (3a9a03a)
- config-cli enumerate scope type (275533b)
- create apis to verify and save license api-keys in Admin UI #1196 (#1203) (315faec)
- initial agama commit #1322 (#1323) (0148bc8)
- Jans linux setup refactor (#1328) (79d3a75)
- Jans linux setup ubuntu22 Installation (#1325) (8597750)
- jans-auth-config: user mgmt endpoint - wip (9c8094a)
- jans-auth-server: #808 sign-in with apple interception script (c21183a)
- jans-auth-server: adapted authorization ws to use authzrequest (58c5336)
- jans-auth-server: added authzrequest abstraction (af8faf0)
- jans-auth-server: authorized acr values (#1068) (26e576a)
- jans-auth-server: changed prog lang name python->jython (b9ba291)
- jans-auth-server: client registration language metadata (#1237) (a8d0157)
- jans-auth-server: enable person authn script to have multiple acr names (#1074) (1dc9250)
- jans-auth-server: force signed request object (#1052) (28ebbc1)
- jans-auth-server: hide 302 redirect exception in logs #1294 (00197c7)
- jans-auth,jans-cli,jans-config-api: changes to handle new attribute description in Client object and new custom script type (d64e042)
- jans-auth,jans-cli,jans-config-api: changes to handle new attribute description in Client object and new custom script type (a096110)
- jans-auth,jans-cli,jans-config-api: changes to handle new attribute description in Client object and new custom script type (d4a9f15)
- jans-cli display users in tabular form (#1296) (7f75d39)
- jans-cli group common items in menu (ref: #892) (#1306) (819f8f7)
- jans-cli obtain list of attrbiutes from server when creating user (1f9b62d)
- jans-cli tabulate attribute list (#1313) (a684484)
- jans-cli use test client (ref: #1283) (#1285) (6320af7)
- jans-config-api: added custom script patch endpoint (6daa4f6)
- jans-config-api: added patch endpoint for custom script (e274e20)
- jans-config-api: added patch endpoint for custom script (f8da77d)
- jans-config-api: added scope DN validation while client creation (#1293) (f276605)
- jans-config-api: converting fido2 endpoint to plugin (#1304) (88c3fff)
- jans-config-api: exposed attributes at root value (3c3df7a)
- jans-config-api: exposed attributes at root value (40570a7)
- jans-config-api: fixed build issue due to LocalizedString change (#1329) (3b5ab78)
- jans-config-api: ignore client.customObjectClasses value for persistence type other than LDAP (#1073) (622bcf4)
- jans-config-api: rectified test properties file (#1222) (5b80f67)
- jans-config-api: removed encrypttion and decryption of user password (7f50ad0)
- jans-config-api: removed unused import (8a41484)
- jans-config-api: user custom attributes at root level - 1348 (5b3f0a1)
- jans-config-api: user management api (b367d44)
- jans-config-api: user management api (517e7f2)
- jans-config-api: user management api (a034bc3)
- jans-config-api: user management endpoint (f28f3b8)
- jans-config-api: user management enhancement to chk mandatory feilds (903ba5a)
- jans-config-api: user management enhancement to chk mandatory feilds (0bc2282)
- jans-config-api: user management enhancement to chk mandatory feilds (e6e2781)
- jans-config-api: user management mandatory field chk changes (e242ec6)
- jans-config-api: user management patch endpoint (0a7ad7d)
- jans-config-api: user mgmt endpoint (a093758)
- jans-config-api: user mgmt endpoint (ad66713)
- jans-config-api: user mgmt endpoint (0f7a723)
- jans-config-api: user mgmt endpoint (379ca09)
- jans-config-api: user mgmt endpoint (f98c59e)
- jans-config-api: user mgmt endpoint (0ea10fd)
- jans-config-api: user mgmt endpoint - wip (70987f6)
- jans-config-api: user mgmt endpoint - wip (af30358)
- jans-config-api: user mgmt endpoint - wip (aadbf8b)
- jans-config-api: user mgmt endpoint -wip (ac35327)
- jans-config-api: user mgmt endpoints (1d53b2e)
- jans-config-api: user mgmt endpoints (5cd1ad5)
- jans-config-api: user mgmt patch endpoint (1180068)
- jans-config-api: user mgmt patch endpoint (12a08e1)
- jans-config-api: user mgmt patch endpoint (0427186)
- jans-config-api: user mgmt patch endpoint (cb7d36c)
- jans-config-api: user mgt plugin (ccc56f8)
- jans-config-api: user mgt plugin (ae132cf)
- jans-config-api: user-management endpoints (#1167) (d8e97c4)
- jans-core: added more error logs if script is not loaded (4084aeb)
- jans-core: added pure java discovery sample custom script (1d01ba7)
- jans-core: compile java code on the fly for custom script (5da6e27)
- jans-core: corrected StandaloneCustomScriptManager (0a52ec8)
- jans-core: remove UPDATE_USER and USER_REGISTRATION scripts #1289 (c34e75d)
- jans-linux-setup config-api fido2-plugin (ref: #1303) (#1308) (ea929c0)
- jans-linux-setup copy site packages in case of pyz (8a8a05e)
- jans-linux-setup fido metadata folder (8e95b7a)
- jans-linux-setup load pure java sample custom script (#1335) (60cb36c)
- jans-linux-setup refactor key reneration for all backends (ref: #1147) (#1228) (cbe29c4)
- jans-linux-setup set DefaultTimeoutStartSec=300s (#1279) (6b511c4)
- jans-linux-setup show version (b16b77d)
- jans-linux-setup: config-api user management plugin (ref: ##1213) (#1223) (450c78c)
- jans-linux-setup: multivalued json enhancement (#1102) (b8fb658)
- jans: jetty 11 integration (#1123) (6c1caa1)
- merge ORM from Gluu (#1200) (685a159)
- move file downloads to setup (2680bd0)
- pre-populate role scope mapping dynamically (#1201) (3ab6a11)
- remove Jython's pip from images (#1176) (e3f374f)
- user management enhancement to chk mandatory feilds (3ac4b19)
Bug Fixes#
- #1107 - not required (cf46672)
- #1107 jansCodeChallengeHash missing (65ac184)
- add issue guidelines to TOC (#1188) (192165b)
- add missing permission and defaultPermissionInToken attribute in role-scope mapping (#1270) (e2c67ec)
- adjust beans and schema #1107 (#1248) (369129d)
- admin-ui: the backend issues related to jetty 11 migration #1258 (#1259) (d61be0b)
- agama: adjust pom version #1402 (#1403) (930f080)
- agama: adjust pom version #1402 (#1404) (86bf614)
- avoid duplicated client when re-running persistence-loader and configurator (#1134) (5567ba9)
- broken links (86d0232)
- bug(jans-auth-server): custom pages are not found #1318 (e1e0bf9)
- change column size of jansFido2AuthnEntry.jansAuthData column (#1066) (f1c3ffa)
- code smells (e5aaad7)
- config-api: scim user management endpoint failing due to conflict with user mgmt path (#1181) (8ee47a0)
- Data too long for column #1107 (8eb2c70)
- errors adding/upgrading data into couchbase persistence (#1226) (db71324)
- extract directory (fe7a3c5)
- fix license apis#1258 (#1271) (14c6a2b)
- handle index error for JSON columns (#1205) (90f77c3)
- hyperlinks (#1209) (d1e1ed6)
- invalid LDAP schema reading token_server client ID (#1321) (db4f080)
- jans cli update readme (2f4f57f)
- jans-auth-server: added faces context as source of locale (#1189) (ce770ae)
- jans-auth-server: authorize page message policy (#1096) (f10ccb1)
- jans-auth-server: corrected fallback value of checkUserPresenceOnRefreshToken (a822ae5)
- jans-auth-server: corrected log vulnerability (1000a60)
- jans-auth-server: corrected npe in response type class (941248d)
- jans-auth-server: corrected signature algorithm identification with java 11 and later (3e203f2)
- jans-auth-server: corrected thread-safety bug in ApplicationAuditLogger #803 (ef73c2b)
- jans-auth-server: disabled issuing AT by refresh token if user status=inactive (3df72a8)
- jans-auth-server: do not serialize jwkThumbprint (d8634fe)
- jans-auth-server: during encryption AS must consider client's jwks too, not only jwks_uri (475b154)
- jans-auth-server: dynamic client registration managment delete event (911e54b)
- jans-auth-server: escape login_hint before rendering (e1a682a)
- jans-auth-server: fixed equals/hashcode by removing redundant dn field (d27659d)
- jans-auth-server: fixed server and tests after jetty 11 migration (#1354) (3fa19f4)
- jans-auth-server: gluuStatus -> jansStatus (7f86d6d)
- jans-auth-server: isolate regex redirection uri validation test (#1075) (cca0551)
- jans-auth-server: removed CONFIG_API from AS supported script types #1286 (c209868)
- jans-auth-server: removed ThumbSignInExternalAuthenticator (a13ca51)
- jans-auth-server: renamed localization resoruces files #1198 (#1199) (4561f2a)
- jans-auth-server: restored id generator call to external custom script (#1128) (5ba98c1)
- jans-auth-server: use duration class instead of custom util to calculate seconds from date to now (#1249) (5ae76ab)
- jans-auth-server: validate redirect_uri blank and client redirect uris single item to return by default (#1046) (aa139e4)
- jans-cl update WebKeysConfiguration (#1211) (54847bc)
- jans-cli allow emptying list attrbiutes by _null (#1166) (571c5cd)
- jans-cli code smells (1dc5cb0)
- jans-cli do not require client if access token is provided (6b787ec)
- jans-cli hardcode enums (739a759)
- jans-cli scope dn/id when creating client (518f971)
- jans-cli scope dn/id when creating client (f056abf)
- jans-cli: corrected typo (#1050) (4d93a49)
- jans-client-api replace netstat with ss in startup script (#1246) (cde3fb1)
- jans-config-api: corrected typo in swagger spec (3c11556)
- jans-config-api: LDAP test endpoint fix (#1320) (fb0e132)
- jans-core: corrected ExternalUmaClaimsGatheringService (cfe1b6d)
- jans-linux-setup --add-module (4f6b8a9)
- jans-linux-setup code smell (09bb36e)
- jans-linux-setup code smell (b790c01)
- jans-linux-setup code smell (3c57d5e)
- jans-linux-setup code smells (4f362e5)
- jans-linux-setup code smells (824cf1f)
- jans-linux-setup code smells (b2a48db)
- jans-linux-setup code smells (e930f16)
- jans-linux-setup code smells (45953c6)
- jans-linux-setup code smells (b01da85)
- jans-linux-setup config-api plugin dependencies (#1310) (b5577dd)
- jans-linux-setup copy_tree (2c2ad3a)
- jans-linux-setup create json index for multivalued attributes (#1131) (be9e63c)
- jans-linux-setup dependency prompt-toolkit (865647e)
- jans-linux-setup maven url (244135d)
- jans-linux-setup move mysql-timezone to config (31df7db)
- jans-linux-setup multivalued json mapping (ref: #1088) (#1090) (e3d9dbf)
- jans-linux-setup openbanking setup issues (3837dd2)
- jans-linux-setup set log level to TRACE for test data (#1345) (21a2120)
- jans-linux-setup typo (#1311) (97723d5)
- jans-linux-setup url of config api scim plugin (da007f0)
- jans-linux-setup-key key-regeneration fix spanner host (#1229) (5a472ad)
- jans-linux-setup: copy user-mgt-plugin (#1225) (8def41a)
- jans-linux-setup: defaults loggingLevel to INFO (#1346) (26b1163)
- jans-linux-setup: enable mod_auth_openidc (#1048) (40e24ea)
- jans-linux-setup: minor typo (#1109) (32b5af5)
- jans-linux-setup: rdbm index (#1135) (ec3bd1b)
- jans-linux-setup: remove attributes of size 64 from sql_data_types.json (#1112) (1726d09)
- linux-setup don't use personCustomObjectClassList for RDBMS (ref: #1214) (#1216) (4d8dff7)
- Make column wider #1044 (f3e393f)
- Security Hotspot (4e091c4)
- Security Hotspot (1899a39)
- set permission for jans-auth.xml explicitly (#1315) (80f33a2)
- submit button is missing from the Properties page #175 (2424965)
- the admin-ui backend issues related to jetty 11 migration #1258 (cf94d5f)
- typo and indexing error (#1125) (dc87dc0)
- Typo httpLoggingExludePaths jans-auth-server jans-cli jans-config-api jans-linux-setup docker-jans-persistence-loader (47a20ee)
- typo in jans-cli interactive mode (25f5971)
- update api-admin permissions from config api yaml (#1183) (438c896)
- update mysql/spanner mappings #1053 (94fb2c6)
- update templates #1053 (2e33a43)
- Use highest level script in case ACR script is not found. Added FF to keep existing behavior. (#1070) (07473d9)
- use secure http urls for maven repositories (#1353) (496b5b2)
- use shutil instead of zipfile (c0a0cde)
Miscellaneous Chores#
- prepare release 1.0.0-1 (8985928)
- release 1.0.0 (9644d1b)
- release 1.0.0 (b2895f2)
- release 1.0.0-beta.16 (a083ad6)
- release 1.0.0-beta.16 (90e4bb2)
- release 1.0.0-beta.16 (eec2073)
- release 1.0.0-beta.16 (cd92ead)
- release 1.0.0-beta.16 (7f0a91b)
- release 1.0.0-beta.16 (c2ad604)
- release 1.0.0-beta.16 (a641486)
- release 1.0.0-beta.16 (94d5791)
- release 1.0.0-beta.16 (16de429)
- release 1.0.0-beta.16 (72915c0)
- release 1.0.0-beta.16 (3ea2b37)
- release 1.0.0-beta.16 (78a6d39)
- release 1.0.0-beta.16 (11bfa93)
- release 1.0.0-beta.16 (22b180b)
- release 1.0.0-beta.16 (b9acd0b)
- release 1.0.0-beta.16 (328cd30)
- release 1.0.0-beta.16 (5a84602)
- release 1.0.0-beta.16 (4923277)
- release 1.0.0-beta.16 (258ba96)
- release 1.0.0-beta.16 (77c4423)
- release 1.0.0-beta.16 (688b324)
1.0.0-beta.16 (2022-03-14)#
Features#
- add acrValues property in admin-ui configuration. #1016 (#1017) (88b591a)
- add support for role-based client (i.e. jans-cli) (#956) (306bd52)
- add support to import custom ldif (#1002) (0b6334a)
- add validity length (in days) for certs (#981) (abc89dc)
- jans-auth-server: forbid plain pkce if fapi=true (fapi1-advanced-final-par-plain-pkce-rejected fail) #946 (21cecb0)
- jans-auth-server: new client config option defaultpromptlogin #979 (4e3de26)
- jans-cli: get access token from arg (#1013) (efd718a)
- jans-config-api: swagger spec change to add extension (4f9d76c)
- jans-config-api: swagger spec change to add extension to differentiate plugin en… (4f9d76c)
- jans-linux-setup: check availibility of ports for OpenDJ backend (#949) (a2944c1)
- jans-linux-setup: install mod_auth_openidc (ref: #909) (#952) (270a7b6)
- jans-linux-setup: refactored argsp (#969) (409d364)
- support regex client attribute to validate redirect uris (#1005) (a78ee1a)
- swagger spec change to add extension to differentiate plugin endpoint (bb3b88a)
Bug Fixes#
- ** jans-linux-setup:** added to extraClasspath (#968) (bfb0bfe)
- add missing values for openbanking (#939) (b140892)
- avoid jetty hot-deployment issue (#1012) (a343215)
- change in swagger spec for jwks to return missing attributes (477643b)
- ci: fix change identification logic (#966) (e964291)
- jans cli build issues (update doc and fix requirements) (#938) (18d1507)
- jans-auth-server: corrected ParValidatorTest #946 (04a01fd)
- jans-auth-server: corrected sonar reported issue (7c88078)
- jans-auth-server: fix npe (e6debb2)
- jans-auth-server: reduce noise in logs when session can't be found (47afc47)
- jans-auth-server: removed reference of removed tests #996 (cabc4f2)
- jans-auth-server: validate pkce after extraction data from request object (#999) (29fdfae)
- jans-config-api: create openid client throwing 502 (#1004) (3f58aff)
- jans-linux-setup add dependency python3-prompt-toolkit (#975) (2d4a101)
- jans-linux-setup flex-setup argsp (7ee41a7)
- jans-linux-setup flex-setup argsp (7ee41a7)
- jans-linux-setup flex-setup argsp (9a00e93)
- jans-linux-setup getting argparser (#974) (5fc60d4)
- jans-linux-setup remove fido authentication scripts from template (#991) (753ab0c)
- jans-linux-setup: backup cli direcory if any (#976) (dc42d0f)
- jans-linux-setup: not copy duo_web.py (#971) (b5691b5)
- jans-linux-setup: openbanking argparser issue (#985) (ab40173)
- jans-linux-setup: require python3-distutils for deb clones (#967) (9a76f23)
- jans-linux-setup: update suse15 dependency (#980) (3be0ffa)
Miscellaneous Chores#
- release 1.0.0-beta.16 (a083ad6)
- release 1.0.0-beta.16 (90e4bb2)
- release 1.0.0-beta.16 (eec2073)
- release 1.0.0-beta.16 (cd92ead)
- release 1.0.0-beta.16 (7f0a91b)
- release 1.0.0-beta.16 (c2ad604)
- release 1.0.0-beta.16 (a641486)
- release 1.0.0-beta.16 (94d5791)
- release 1.0.0-beta.16 (16de429)
- release 1.0.0-beta.16 (72915c0)
- release 1.0.0-beta.16 (3ea2b37)
- release 1.0.0-beta.16 (78a6d39)
- release 1.0.0-beta.16 (11bfa93)
- release 1.0.0-beta.16 (22b180b)
- release 1.0.0-beta.16 (b9acd0b)
- release 1.0.0-beta.16 (328cd30)
- release 1.0.0-beta.16 (5a84602)
- release 1.0.0-beta.16 (4923277)
- release 1.0.0-beta.16 (258ba96)
- release 1.0.0-beta.16 (77c4423)
- release 1.0.0-beta.16 (688b324)
- release 1.0.0-beta.16 (4e86f15)
- release 1.0.0-beta.16 (8d514ee)
- release 1.0.0-beta.16 (0899898)
1.0.0-beta.15 (2022-03-02)#
Features#
- #836 support push token update on finish authentication (#837) (4d6d916)
- add correlation id in pages and rest endpoints to track logs (#410) (b9c39af)
- add correlation id in pages and rest endpoints to track logs (#410) (27fab9f)
- add deletable flag to admin-ui role object #888 (#901) (5b95a55)
- add Gluu Casa support (608a9b8)
- add Gluu Casa support (608a9b8)
- add Gluu Casa support (089a872)
- add Gluu Casa support (089a872)
- add Helm chart for Core Janssen Distro (#753) (edb35d7)
- add jansClaimName to all attrbiutes (8f219fb)
- add jansClaimName to all attrbiutes (0947757)
- add POST /rolePermissionsMapping for adding new rolePermissionsMapping entry #144 (41d5913)
- add POST /rolePermissionsMapping for adding new rolePermissionsMapping entry #144 (85e777b)
- add POST /rolePermissionsMapping for adding new rolePermissionsMapping entry #144 (6ac57dc)
- add POST /rolePermissionsMapping for adding new rolePermissionsMapping entry #144 (d5b28fc)
- add POST /rolePermissionsMapping for adding new rolePermissionsMapping entry #144 (bd34c29)
- add POST /rolePermissionsMapping for adding new rolePermissionsMapping entry #144 (149aeb1)
- add POST /rolePermissionsMapping for adding new rolePermissionsMapping entry #144 (7bcad3b)
- add POST /rolePermissionsMapping for adding new rolePermissionsMapping entry #144 (932a45b)
- add POST /rolePermissionsMapping for adding new rolePermissionsMapping entry #144 (cc4bc91)
- add POST /rolePermissionsMapping for adding new rolePermissionsMapping entry #144 (4b2bea7)
- added ability remove all tokens per client by token type (3cd3ada)
- added ability remove all tokens per client by token type (5e8fad9)
- allow jwt tokens for scim service protection #834 (#856) (392b3fc)
- ce-setup add python cryptography library to dependency (d312479)
- ce-setup: deploy facter script (ref: #622) (#624) (9426517)
- enable/disable admin-ui frontend plugins (ref: #150) (aaf8ca1)
- enable/disable admin-ui frontend plugins (ref: #150) (66ca69f)
- if value is null return null to token type hint (78ed12f)
- if value is null return null to token type hint (848f1ca)
- image: implement role-based scope script (#813) (bd68898)
- image: push otp and super_gluu configuration to secrets (#784) (87bd7fe)
- jans-auth-server: add methods to dynamic client registration script to modify POST, PUT and GET responses (#661) (2aa2ba8)
- jans-auth-server: added cache support to /stat endpoint (e1dba92)
- jans-auth-server: added new stat response service with test (9d60629)
- jans-auth-server: added post response modification method (db936f9)
- jans-auth-server: added put response modification method (00a24f2)
- jans-auth-server: added read response modification method (ec8864b)
- jans-auth-server: added to par extra nbf and exp (for 60min) validation (#838) (9db47a4)
- jans-auth-server: allow return custom authz params to rp in response (#756) (0e865fb)
- jans-auth-server: extending crypto support sub pr4 (#670) (fe07d76)
- jans-auth-server: invoke custom script methods for response modification (da44d5a)
- jans-auth-server: preparations for revoke refresh tokens for client (b1cf69b)
- jans-auth-server: preparations for revoke refresh tokens for client (2641574)
- jans-auth-server: reject par without pkce for fapi (332df41)
- jans-auth-server: set public subject identifier per client (#800) (c303bbc)
- jans-auth-server: turn off consent for pairwise openid-only scope (#708) (a96007d)
- jans-ce-setup: ce-setup suse compatibility (#692) (f0076fc)
- jans-ce-setup: extending crypto support, sub pr4; #142; (#669) (b8fda09)
- jans-ce-setup: updated client registration script with newly added methods (595bfd4)
- jans-cli logout (ref: #706) (#723) (0cc51bc)
- jans-config-api: add deletable flag to admin-ui role object #888 (#900) (500a773)
- jans-config-api: all config-api plugins should be in same plugins folder in maven repo #851 (#852) (cca93b2)
- jans-config-api: config api interception script (#840) (8e4c688)
- jans-config-api: organization configuration management endpoints (#790) (40ca464)
- jans-config-api: scim config endpoint issue #271 (#665) (a6e9a04)
- jans-config-api: security issue - upgrade dependencies (#883) (10568ff)
- jans-config-api: swagger update for default value (#862) (8f59921)
- jans-config-api: underlying server stats #275 (ae6f2d7)
- jans-core: added methods for register response modification (9f18613)
- jans-core: added read response modification method (74bbe38)
- jans-linux-setup: added config-api interception script (ref: #831) (#882) (48a3195)
- jans-linux-setup: import custom ldif (#873) (363cf0e)
- jans-linux-setup: Jans linux setup pkg mysql and uninstall (#827) (0fb53e1)
- jans-setup: updated sample revoke script (45e43db)
- jans-setup: updated sample revoke script (607a23c)
- linux-setup node installer (662a27f)
- par should be able to register with nbf (a4a2981)
- protecting Admin-UI Plugin Apis #142 (52e8846)
- protecting Admin-UI Plugin Apis #142 (a1a0d54)
- removed revoke token context (84b27cd)
- removed revoke token context (4f71ae2)
- support MySQL with MariaDB engine gluu #18 (#712) (9071db4)
- underlying server stats (ae6f2d7)
- underlying server stats (0f36336)
- underlying server stats (56b72e9)
- update base images #672 (#673) (0a23d08)
- update config-api image (#874) (b9f56c3)
- use ExecutionContext instead of token revoke context in custom scripts (b67af11)
- use ExecutionContext instead of token revoke context in custom scripts (e1ba0b4)
Bug Fixes#
- brazilob jarm fapi conformance test last7 issues (#695) (edab074)
- ce-setup: typo (af37066)
- certmanager: patches for auth handler (#626) (d95453f)
- check MariaDB json in result set metadata (96b6772)
- client tests have been restored #1595; (76593c5)
- client tests have been restored #1595; (1cc118f)
- client tests have been restored #1595; (5570336)
- client tests have been restored #1595; (ef5cc52)
- client tests have been restored #1595; (776ce2a)
- client tests have been restored #1595; (8818dbc)
- client tests have been restored #1595; (87e0963)
- client tests have been restored #1595; (b43f3cd)
- client tests have been updated #1595; (17ab35d)
- client tests have been updated #1595; (4c352df)
- client tests have been updated #1595; (e705bc9)
- client tests have been updated #1595; (c4d9c2e)
- codacy warnings (0aca641)
- codacy warnings (1f5b246)
- code reformatting as suggested (a70ceda)
- copyrights have been added #1595; (72b4ad9)
- copyrights have been added #1595; (b6f6ae5)
- corrected uma test failures (12299fd)
- corrected uma test failures (ff26824)
- correction as suggested in review (adddb1a)
- data_provider, multiplying redundant calls of u test functions, listener has been added; (fab2f75)
- data_provider, multiplying redundant calls of u test functions, listener has been added; (096b0ac)
- doc_id for base (#149) (e7b4747)
- doc_id for base (#149) (eb0801e)
- early exit to avoid nested if(s) (ab65ac9)
- error has been added to the unit tests #1595; (53b4daa)
- error has been added to the unit tests #1595; (ac35a91)
- error has been removed from unit tests #1595; (fdecdc2)
- error has been removed from unit tests #1595; (e7330d6)
- fail has been added (for testing) #1595; (e5b7161)
- fail has been added (for testing) #1595; (aef4f3a)
- fail has been removed #1595; (cfa61e7)
- fail has been removed #1595; (fd65b1c)
- fix method to determine if Db is MariaDB (edf5a8d)
- fix RDBS export entry and DeleteNotifier (#864) (ce5b2e6)
- for JARM issue 310 311 and 314 (ae0cdb9)
- gprcio bug in build error (0ee6386)
- gprcio bug in build error (664a4fe)
- image: update images (#775) (b31059c)
- import Nullable (5057531)
- improving usage data_provider name; (6c47925)
- improving usage data_provider name; (5acd2e2)
- jans-auth-server: check alg none to display error JARM issue310 (#786) (b21a052)
- jans-auth-server: corrected 500 error if absent redirect_uri in object for fapi (89e586a)
- jans-auth-server: corrected error code for absent redirect_uri in object (fapi) (f73430c)
- jans-auth-server: corrected jarm error response (1d4b53b)
- jans-auth-server: corrected jarm isuue #310 (#773) (e1cdc19)
- jans-auth-server: corrected jarm response mode (9e3bf69)
- jans-auth-server: corrected npe in jarm (5cae544)
- jans-auth-server: corrected wrong expires_in (428c5b3)
- jans-auth-server: covered one more case when consent is off (8b59739)
- jans-auth-server: don't fail registration without custom script (#711) (277be82)
- jans-auth-server: error code correction unregister redirect_uri (#814) #816 (fe4d6a0)
- jans-auth-server: fixed device authz tests (8a952d7)
- jans-auth-server: fixed error code during error response creation (0d47490)
- jans-auth-server: for issue#315 JARM registered redirect uri (#752) (fe2dc59)
- jans-auth-server: if consent is off then check whether response already have access_tokne (81ad31b)
- jans-auth-server: if consent is off then check whether response already have code (294bb22)
- jans-auth-server: jarm failing tests (#745) (5d0b401)
- jans-auth-server: jarm tests fix (ddf3423)
- jans-auth-server: made tknCde consistency=true for UmaRPT (298a35a)
- jans-auth-server: made tknCde consistency=true for UmaRPT (0554882)
- jans-auth-server: set par expiration to request object exp #824 (#860) (c835c38)
- jans-ce-setup monorepo tweaks (36c2d0b)
- jans-ce-setup: add npm run plugin:clean to admin-ui setup (70f01bf)
- jans-cli sync swagger file from jans-config-api (#759) (315c699)
- jans-client-api/server/pom.xml to reduce vulnerabilities (89756bb)
- jans-client-api: corrected test cases configuration #724 (#726) (f98db00)
- jans-cli: jans cli pkg fixes (#854) (9e96e4c)
- jans-cli: retain scim client in config.ini (#872) (8346517)
- jans-config-api: excluded test from execution (#760) (3af6672)
- jans-config-api: license validity period should be read only #731 (f88095b)
- jans-config-api: multiple custom lib not working (#907) (9ef6fa4)
- jans-config-api: sql configuration endpoints are not found #793 (#794) (d8f2ea9)
- jans-fido2: use diamond operator (#764) (5950a26)
- jans-linux-setup config-api default file (#910) (86ff007)
- jans-linux-setup openbanking (1a5f708)
- jans-linux-setup : tweak install.py for new directory structure (#825) (493337f)
- jans-linux-setup update config-api scim plugin maven url (#866) (885a06d)
- jans-linux-setup: added missing values for openbanking (#913) (1977eec)
- jans-linux-setup: fixed link in readme.md (edf735e)
- jans-linux-setup: missing code for platform authenticator (TouchID) (#792) (263b76a)
- jans-linux-setup: remove non-utf character from description of attribute 98FC (#877) (321a8e9)
- jans-linux-setup: restore changes after 4babe55a494c0edad899776f086d8c59368031f2 (#835) (c8f4b19)
- jans-linux-setup: service install check for jetty 10 (#911) (a7e57aa)
- jans-linux-setup: uninstall does not prompt with -n (#887) (c009dd5)
- JARM tests fix (3bfb95f)
- license validity period should be read only #731 (#746) (73931f5)
- linux-setup apache config file name (#719) (46ce0ae)
- linux-setup mariadb json data types (#714) (4c21be2)
- linux-setup suse httpd configuration (#734) (7767b5e)
- listener class has been fixed #1595; (af141a3)
- listener class has been fixed #1595; (8c7e0c3)
- listener has been renamed; (d4cb3a7)
- listener has been renamed; (7f283f3)
- listener has been updated #1595; (527d1c2)
- listener has been updated #1595; (03bac01)
- listener has been updated #1595; (c31cf42)
- listener has been updated #1595; (21b8f56)
- listener has been updated; (f3cbc35)
- listener has been updated; (0673a15)
- newly added eddsa cause exception (#727) (6e5a865)
- pycloudlib: missing tar option to not restore file timestamp #613 (#627) (d19fbfd)
- remove remote theme (bcca289)
- reorder java modifiers (#750) (e5401b2)
- replace non UTF-8 characters (#770) (bb386cd)
- temp removing client tests #1595; (a04fa23)
- temp removing client tests #1595; (b6b965f)
- temp removing client tests #1595; (494f788)
- temp removing client tests #1595; (8261a1f)
- update admin ui properties (#778) (2052d02)
- update config github pages (#771) (5c5b979)
- update scripts (#765) (8b9aaca)
- update wrong import #905 (#906) (af55a81)
- upgrade commons-codec:commons-codec from 1.7 to 20041127.091804 (3d319b8)
- upgrade oauth.signpost:signpost-commonshttp4 from 2.0.0 to 2.1.1 (7246e8f)
- upgrade org.apache.httpcomponents:httpcore from 4.4.5 to 4.4.15 (82689d2)
- upgrade org.bitbucket.b_c:jose4j from 0.6.4 to 0.7.9 (874e2ad)
- upgrade org.codehaus.jettison:jettison from 1.3.2 to 1.4.1 (5ffe19d)
- use diamond operator (#766) (57664b0)
- vm setup suse fixes (#705) (2f69a8a)