Skip to content

Latest commit

 

History

History
205 lines (135 loc) · 6.91 KB

CHANGELOG.md

File metadata and controls

205 lines (135 loc) · 6.91 KB

Changelog

[3.3.1] - 2022-05-18

  • Fixed issue where UMD bundle namespace changed

[3.3.0] - 2022-04-25

Added:

  • OAuth token threshold config property and proactive refresh of tokens expiring soon
  • Add Angular sample app to the repo

[3.2.2] - 2022-1-31

Fixed

  • Fixed typescript transpilation bug in esmodule config

[3.2.1] - 2022-1-31

Fixed

  • Updated readme

[3.2.0] - 2022-1-31

Fixed

  • /authorize call not honoring middleware overwrites
  • expand middleware passing to call-site so that it overwrites middleware set in config

Added:

  • Refactor of end-to-end test suite to use playwright test runner instead of jest
  • Upgrade rxjs version from 6 to 7 in autoscript files for e2e tests
  • Remove SSL certificate dependency in CI
  • Move to using Github Actions for CI
  • Convert to monorepo using nx
  • Add react sample app to the repo
  • Remove certificate dependency across all sample apps
  • Replaced development bundle with a rollup production bundle in javascript-sdk package
  • Update Readme's in all packages / samples
  • Added a CONTRIBUTING.MD file
  • Added a pull request template for contributors

[3.0.0] - 2021-6-24

Added

  • "Native" Social Login callbacks for both the original AM nodes in 6.5 and the new IDM nodes in 7.0
  • SDK Social Login feature officially supports Apple, Facebook and Google
  • New FRAuth methods for handing redirection to provider and resuming an authentication journey
    • FRAuth.redirect for redirecting to an Identity Provider for authentication
    • FRAuth.resume supports both return from an IdP and returning from Email Suspend node
  • New FRAuth.start method that aliases FRAuth.next to align native mobile SDKs
  • E2E test pages will now follow your OS's dark mode setting

Fixed

  • Arbitrary query parameters are now passed along through to the /authorize endpoint supporting the use of ACR values for tree specificity
  • Fixed build issue when using Windows PowerShell
  • WebAuthn error handling is now standardized according to the WebAuthn spec
  • When WebAuthn encounters an error, the SDK now formats the error appropriately for AM and sets it into the hiddenValueCallback; this allows the developer to just send it to AM "as is" or handle it specially when catching the thrown error
  • Changed the default behavior in case of unidentified storage, to be the localStorage option
  • Increased timeout (20 to 60 seconds) for E2E tests to avoid pure timeout failures

Breaking

  • WebAuthn's thrown error message text has been changed to align with spec, so check all conditionals comparing error message strings
  • Renamed getAuthorizeUrl method to getAuthCodeByIframe
  • Removed the single parameter from createVerifier function
  • Removal of nonce function

[2.2.0] - 2020-12-18

Added

  • Centralized login support has been added
  • OAuth authorize endpoint now supports both iframe and fetch through the new support property in the config
  • Support for TypeScript 4.0

Fixed

  • step.getStage() is no longer used in sample app; getStage(step) is now used for better compatibility with AM 6.5
  • FRUser.logout now uses a try-catch around each endpoint call, rather than a single try-catch, ensuring an error in one doesn't interrupt other endpoints being called
  • Paths for sample app now point to correct favicon image
  • Improved automation testing
  • Compatibility with AM 6.5.3 WebAuthn nodes
  • Step detection with getWebAuthnStepType and "usernameless" configuration
  • getTokens method with forceRenew now revokes existing tokens, if present, before requesting new ones

[2.1.0] - 2020-08-25

Added

  • Support for "usernameless" login (storing username on WebAuthn capable tech)
  • Support for the recovery code display node and the parsing of the codes from the TextOutputCallback
  • Support for user verification property for WebAuthn
  • Updated support for new IDM nodes for registration and self-service: BooleanAttributeInputCallback and NumberAttributeInputCallback support
  • Added SuspendedTextOutputCallback support for the new Email Suspended Node
  • Added SessionManager.logout() call back to FRUser.logout()

Fixed

  • Conditionally set user verification, relying party and allow credentials to WebAuthn key options
  • Added exclude credentials to script parsing for WebAuthn key options
  • Ensure display name and username are correctly parsed and added to WebAuthn key options
  • Add authenticator attachment to WebAuthn and other WebAuthn fixes for custom configuration
  • Increased entropy for cryptographic functions related to PKCE for both state and verifier
  • Improved instructions for cert creation for sample app

Deprecated

  • Name change for getAuthorizeUrl: method's name will change to better reflect its behavior in v3
  • Removal of nonce: this utility is no longer used in the SDK, and therefore will be removed in v3
  • Function signature change for createVerifier: the parameter will be removed in v3.

[2.0.0] - 2020-06-22

Added

  • Support for authorization by transaction
  • Support for authorization by tree
  • Support for device profile collection callback
  • Allow server paths to be configurable
  • Allow OAuth token storage to be configurable
  • Support for request "middleware" for modifying request from SDK
  • "Containerize" code base for easier development
  • End-to-end tests now use Playwright and mock Node.js server
  • Support for WebAuthn script-based authentication

Fixed

  • Increased default timeout to accommodate development/debugging
  • Provide alternative token store for Firefox Private IndexedDB bug
  • Aligned json-based WebAuthn with 7.0 release of AM

[1.0.5] - 2020-01-16

Added

  • Support for additional querystring parameters (e.g. suspendedId) when invoking authentication trees

[1.0.4] - 2020-01-06

Fixed

  • Renamed getWebAuthStepType to getWebAuthnStepType in FRWebAuthn module

[1.0.3] - 2020-01-06

Added

  • Replaced url and querystring dependencies to avoid build issues in some environments

[1.0.2] - 2019-12-20

Added

  • Exported Deferred and nonce

[1.0.1] - 2019-12-19

Added

  • Server mocking with Mirage JS for E2E tests
  • Version header to all OpenAM calls to avoid CSRF problems
  • Updated callback interface to reflect that some properties are optional

[1.0.0] - 2019-12-09

Added

  • WebAuthn module that can be used in custom UIs
  • Improvements to FRCallback
  • Addressed all linter warnings

[0.9.3] - 2019-11-13

Fixed

  • Non-relative import in FRAuth module

[0.9.2] - 2019-11-06

Added

  • OAuth2Client obeys realmPath configuration setting

[0.9.1] - 2019-10-28

Added

  • FRPolicy module allows easy consumption and customization of policy-related errors
  • Export SessionManager module
  • FRStep.type property to simplify conditional handling of tree responses
  • Overhaul and expansion of tests to include unit, integration, and e2e testing

[0.9.0] - 2019-10-17

Added

  • Initial release for SDK
  • Initial npm deployment for beta version