Allow deletion of unverified webauthn MFAs that have no external_uuid

Changed (non-breaking)

• An unverified webauthn-type MFA can now be deleted even if it has no_external_uuid

Call Google Analytics 4

Changed

It now makes calls for Google Analytics 4. This includes replacing hyphens with underscores in the GA event labels/names, since hyphens are not accepted in GA4.

Added

• GaController that provides a cli command which makes a call to GA4 for manual testing.
• Expects to have two new environment variables:
  -- GA_MEASUREMENT_ID
  -- GA_API_SECRET

Removed

No longer expects the environment variable GA_TRACKING_ID

Name new webauthn and fix bug with delete inactive users

Added

• Accept a label while adding a new webauthn

Fixed

• A bug that broke the delete inactive users functionality by deleting children webauthn's before their parent mfa gets deleted

Allow user to have multiple webauthns

Merge pull request #283 from silinternational/develop

Release 6.2.0 Allow user to have multiple webauthns

PHP8 upgrade, random sleep pre-migrations and related tweaks

Merge pull request #281 from silinternational/develop

Release 6.1.0 PHP8 upgrade, random sleep pre-migrations and related tweaks

Ensure clientExtensionResults is encoded as an object, even if empty

Merge pull request #265 from silinternational/develop

Release 6.0.2 (again but with updated changelog) Ensure clientExtensionResults is encoded as an object, even if empty

Fix user search

The mfa property on the GET /user response was not formed correctly, resulting in idp-id-broker-search failing

WebAuthn

Breaking change - update to use WebAuthn rather than U2F

Avoid error spam by not checking the email service status

Merge pull request #256 from silinternational/develop

Release 5.3.3 Avoid error spam by not checking the email service status

5.3.2

Allow hyphens in employee_id (for UUIDs)
(This happens to have been a tag on develop. But the main branch has the same contents.)