CHANGELOG

uffd (1.1.1) unstable; urgency=medium

  [ Julian Rother ]
  * Fix regression: OAuth2 authorize endpoint rejects empty scope parameter
  * Fix regression: OAuth2 token endpoint does not support Basic-Auth
  * Verify 2FA recovery codes and TOTP codes in constant-time

 -- root <root@runner-f9u6bnzu-project-27-concurrent-0>  Mon, 13 Sep 2021 20:18:30 +0000

uffd (1.1.0) unstable; urgency=medium

  [ Julian Rother ]
  * Switched tests from tmpfile to in-memory databases
  * Catch LDAPSASLPrepError on login
  * Restrict password alphabet to SASLprep-safe ASCII subset
  * Replace flask_oauthlib with plain oauthlib
  * Fix for 45d4598 (Replace flask_oauthlib with plain oauthlib)
  * Don't display login page if user is already logged in
  * Display per-client-customizable message on login page
  * Dedicated error page for permission errors
  * Fix HTML element id construction in role view
  * Removed TestUserViewsOLUserAsUser test cases
  * Make sure that users can only confirm their own verification tokens
  * Refactor permission checking and differenciate login and selfservice access
  * Refactor base template and add narrow base template
  * Handle if user referenced in session does not exist
  * Support for python3-fido2 v0.9.x (Debian Bullseye)
  * Support for python3-werkzeug v1.0.x (Debian Bullseye)
  * Properly rollback db transaction in db_flush (tests)
  * Fix debian package dependency on python3-oauthlib
  * Verify OAuth2 codes/tokens in constant-time
  * Verify invite link secrets in constant-time
  * Verify selfservice link secrets in constant-time
  * Verify signup link secrets in constant-time
  * Verify api keys in constant-time
  * Explain OAuth2 code/token customization hack
  * Add CI tests for Bullseye and fix remaining compatability issues
  * Publish Debian packages to packages.cccv.de

  [ C-Tim ]
  * fix(uffd-admin): Fix bug with util-linux fallback path
  * fix(migrations): Calculate correct path for migrations instead of assuming cwd

  [ Julian Rother ]
  * CI check for CHANGELOG on release
  * Refactor migrations to support MySQL/MariaDB
  * Add Debian repo signing key and install instructions
  * Auto-generate SECRET_KEY in Debian package, minor improvement of uffd-admin

 -- root <root@runner-f9u6bnzu-project-27-concurrent-0>  Mon, 13 Sep 2021 12:07:04 +0000

uffd (1.0.0) unstable; urgency=medium

  [ nd ]
  * enable more pylint checks
  * disable all checks for ldapalchemy and enable duplicate code check
  * disable cuplicate-code check in pylint again

  [ Julian Rother ]
  * Fixed typo in German translation (#91)
  * Made shell context more usable and cleaned up imports in __init__.py

  [ nd ]
  * refactor selfservice mail sending

  [ Julian Rother ]
  * Disabled unhelpful deprecation warnings for pytest
  * Fixed minor html validity error in qr code generation
  * Moved token generation to common module and introduced token_urlfriendly
  * Implemented ordering for navbar items
  * Added api endpoint for mail aliases

  [ Sistason ]
  * Updated translations readme, made some editorial translation changes and fixed some typos

  [ Julian Rother ]
  * Made devicelogin button text easier to understand, closes #91
  * Fixed layout bug in selfservice introduced by 7b94843b
  * Changed developing status to "production/stable"

 -- root <root@runner-f9u6bnzu-project-27-concurrent-0>  Fri, 13 Aug 2021 14:35:19 +0000

uffd (0.3.0) unstable; urgency=medium

  [ nd ]
  * update link to rocketchat in README
  * add uffd-admin command, cleanup cronjob and needed /run folder
  * move package build dependencies to docker image
  * enable uwsgi app by default and add maintainer script to restart uwsgi
  * move python dependencies from requirements.txt to setup.py
  * update changelog for 0.3.0 release
  * add more warnings against using pip install for production setups
  * add comment why we ignore the package dependencies extracted by pybild
  * removed not needed sleep from tests

  [ Julian ]
  * ensure uffd-admin works with arguments containing whitespace

 -- root <root@runner-f9u6bnzu-project-27-concurrent-0>  Sun, 01 Aug 2021 13:27:31 +0000

uffd (0.2.0) unstable; urgency=medium

  [ CCCV ]
  * Working debian packages

 -- root <root@runner-f9u6bnzu-project-26-concurrent-1>  Sat, 31 Jul 2021 19:05:30 +0000

uffd (0.1.2) unstable; urgency=medium

  * Initial release.

 -- Andreas Valder <nd@cccv.de>  Fri, 30 Jul 2021 23:02:31 +0200