v2.3.0

Notices

We fixed a bug that the private_key_path option in the config.json was ignored. Instead, the fallback behaviour was always triggered to look for sk.der in several directories. If you specified the private_key_path, please check whether it has the correct value and points to a .der-file or otherwise remove the option to trigger the fallback behaviour again.

What's Changed

• Improvement: include all webapp locales in Dockerfile by @ivard in #37
• Fix: Dockerfile not stopping on Ctrl-C by @ivard in #38
• Fix: ensure war is named correctly and config dir is set by @ivard in #39
• Fix: private_key_path option from sample config missing by @ivard in #40
• CI/CD: ensure Gradle deps are available to dependabot by @ivard in #41
• Chore: bump vulnerable dependencies by @ivard in #42

Full Changelog: v2.2.0...v2.3.0

v2.2.0

Security

• Fix CWE-297 - improper validation of certificate with host mismatch

Internal

• Publish container at GHCR

Full Changelog: v2.1.0...v2.2.0

v2.1.0

Added

• TomEE 9 and Gradle 7.6 support
• Dockerize app to allow easier development

Fixed

• Multipart mailbody corruption
• Unhandled exception when sending mail fails

Security

• Rate limiting
• Log injection and long overflow
• Uncontrolled data used in path expression
• Dependency updates

Full Changelog: v2.0.3...v2.1.0

v2.0.3

What's Changed

• CI/CD: add GitHub Actions status checks workflow by @ivard in #31
• chore: make emails b1 "begrijpelijke taal" by @sanderhollaar in #32

Full Changelog: v2.0.2...v2.0.3

v2.0.2

What's Changed

• Implement UX 3.1 by @bobhageman in #29

Full Changelog: v2.0.0...v2.0.2

v2.0.0

What's Changed

• E-mail input read-only fix by @bobhageman in #27
• Rebranding to Yivi look, feel and texts by @bobhageman in #26

New Contributors

• @bobhageman made their first contribution in #27

Full Changelog: v1.2.2...v2.0.0

v1.2.2

What's Changed

• Feat: Make mail less likely to be seen as juink by @sanderhollaar in #24
• Fix: Hide Back button on first page as window.close() does not work on Firefox by @sanderhollaar in #25

Full Changelog: v1.2.1...v1.2.2

v1.2.1

What's Changed

• feat: update from openjdk8 to openjdk11 by @sanderhollaar in #18
• Fix: CI build pipeline should take into account version number in WAR file name by @ivard in #19
• Fix: use !#/usr/bin/env bash to make scripts run on NixOS by @sanderhollaar in #21
• Fix: Do not log personal data in log messages by @sanderhollaar in #20

New Contributors

• @sanderhollaar made their first contribution in #18

Full Changelog: v1.2.0...v1.2.1

v1.2.0

Added

• Ask for a pairing code after a user scanned an IRMA QR, to prevent QR theft.

Fixed

• Make sure uppercase characters in email addresses are filtered earlier, to prevent mismatches.

v1.1.1

Changed

• Improved util script to generate JWT keys
• Improved instructions in README