v3.25.0

Added text changes when MFA button is clicked

v3.24.0

• Added SMS, and Call factor types as supported MFA devices for the OKTA auth connector.

v3.23.0

• Made the STS auth endpoint derive the region from the request and use that STS region rather than locking to global aka us-east-1.

v3.22.1

• Added human readable factor names for Okta MFA Authentication
• Filtered verification methods in the Okta Auth Connector to only show supported ones which are Okta Verify and Google Authenticator

v3.22.0

• Added Orphaned KMS Cleanup job.

v3.21.0

add v2 authentication endpoint that accepts a signed AWS STS get-caller-identity request and returns an unencrypted payload containing the access token

v3.20.0

Allows users to grant permission to an entire AWS account for their SDBs by giving permissions to arn:aws:iam::<account_id>:root

v3.19.0

Adds a config property to enable/disable case-sensitivity for user group permission checks

v3.18.2

• Refactored Job Coordinator Service to be Distributed Lock Service to better reflect what it does.
• Made the Distributed Lock Service manage the locks in a single transaction via spawning threads for each named lock and managing the transaction manually rather than through the annotation which didn't seem to work properly.
• Added logic to count events around lock acquisition and releases via the MetricService
• Fixed bug in MetricService that assumed null safety, but can in fact be provided null from the Guice module.
• Fixed bug in Lock Dao / Mapper, mysql can return null, 0, or 1. So an Integer rather than an int needs to be used.

v3.18.1

• No longer require token refresh on SDB creation, etc.