v24.29-alpha4

What's Changed

• Disable editing of managed items by @byewokko in #409

Full Changelog: v24.29-alpha3...v24.29-alpha4

v24.29-alpha3

What's Changed

• Global roles propagated to tenants by @byewokko in #395

Full Changelog: v24.29-alpha2...v24.29-alpha3

v24.29-alpha2

What's Changed

• Sort clients alphabetically by client name by @byewokko in #408
• Handle session decryption error by @byewokko in #410

Full Changelog: v24.29-alpha1...v24.29-alpha2

v24.29-alpha1

What's Changed

• Print ASAB version during Docker build by @byewokko in #406

Full Changelog: v24.20-alpha14...v24.29-alpha1

v24.20

What's Changed

• Hash passwords using argon2 instead of bcrypt by @byewokko in #375
• Fix AttributeError in failed login by @byewokko in #376
• Configurable basic password requirements by @byewokko in #372
• Implement OAuth refresh tokens by @byewokko in #358
• Properly handle Argon2 VerifyMismatchError by @byewokko in #378
• Do not log failed LDAP login as error by @byewokko in #381
• Extend session expiration on cookie request by @byewokko in #383
• Delete client cookie on introspection failure by @byewokko in #385
• Session build refactoring by @byewokko in #386
• Move SSO session creation into session service by @byewokko in #387
• Revert "Move SSO session creation into session service" by @byewokko in #388
• Refactor SSO session creation by @byewokko in #389
• Expected client ID is optional for authentication by @byewokko in #390
• Custom response codes for tenant-related authorization errors by @byewokko in #392
• Properly parse URL query before adding new parameters by @byewokko in #393
• Encrypt cookie value in session update by @byewokko in #394
• External login with dynamic redirection by @byewokko in #384
• Catch token decoding errors when finding sessions by @byewokko in #397
• Fix attribute error in credentials update by @byewokko in #399
• Merge fixes and features by @byewokko in #401

Full Changelog: v24.17.2...v24.20

v24.20-beta3

What's Changed

• Hash passwords using argon2 instead of bcrypt by @byewokko in #375
• Fix AttributeError in failed login by @byewokko in #376
• Configurable basic password requirements by @byewokko in #372
• Implement OAuth refresh tokens by @byewokko in #358
• Properly handle Argon2 VerifyMismatchError by @byewokko in #378
• Do not log failed LDAP login as error by @byewokko in #381
• Extend session expiration on cookie request by @byewokko in #383
• Delete client cookie on introspection failure by @byewokko in #385
• Session build refactoring by @byewokko in #386
• Move SSO session creation into session service by @byewokko in #387
• Revert "Move SSO session creation into session service" by @byewokko in #388
• Refactor SSO session creation by @byewokko in #389
• Expected client ID is optional for authentication by @byewokko in #390
• Custom response codes for tenant-related authorization errors by @byewokko in #392
• Properly parse URL query before adding new parameters by @byewokko in #393
• Encrypt cookie value in session update by @byewokko in #394
• External login with dynamic redirection by @byewokko in #384
• Catch token decoding errors when finding sessions by @byewokko in #397
• Fix attribute error in credentials update by @byewokko in #399
• Merge fixes and features by @byewokko in #401

Full Changelog: v24.17...v24.20-beta3

v24.20-alpha14

What's Changed

• Accept algorithmic token in oauth introspection by @byewokko in #405

Full Changelog: v24.20-alpha13...v24.20-alpha14

v24.20-alpha13

What's Changed

• Fix token request for self-encoded (algorithmic) sessions by @byewokko in #404

Full Changelog: v24.20-alpha12...v24.20-alpha13

v24.20-alpha12

What's Changed

• Log login factor verification failure by @byewokko in #402
• Fix credential search performance by @byewokko in #391

Full Changelog: v24.20-alpha11...v24.20-alpha12

v24.17.2

Compatibility

Recommended LMio WebUI v24.08-beta6 or later

What's Changed

• SERIOUS Fix attribute error in credentials update (#399)
• ASAB version locked
• Client cache by @byewokko in #361
• List credentials from authorized tenant only by @byewokko in #348
• Fix searching credentials with multiple filters by @byewokko in #362
• Fix resource initialization by @byewokko in #363
• Invitation URL in response, resending invitations by @byewokko in #364
• User invitations are enabled by default by @byewokko in #367
• Improve resource filtering and sort them alphabetically by @byewokko in #370
• Deprecate passlib by @byewokko in #368
• Consistent use of item-specific not-found exceptions by @byewokko in #371
• Authorize into last active tenant by @byewokko in #373
• Deny password change when old password verification fails by @byewokko in #374
• Advance branch to v24.17-beta2 by @byewokko in #379
• Handle Argon2 VerifyMismatchError by @byewokko in #380

Full Changelog: v24.06...v24.17.2