CHANGELOG.md

Changelog

6.0.1

• Ensure the correct error page is displayed when authentication fails #332
• Upgrade of numerous NPM and Composer dependencies

6.0.0

• Update php8 and Symfony 6.4

5.0.5

• Translate remaining [Recovery token] occurrences #303
• Installed security updates for phpseclib/phpseclib and guzzlehttp/psr7

5.0.1..5.0.4

• Display vetting types in institution overview #292
• Correctly check if LoA is satisfied #293
• Display the SSO 2FA feature toggle on the Institution configuration page on the RA #294
• Upgrade dev (build) dependencies #297

5.0.0

Self-asserted token registration

• Display recovery token data in audit log #287
• Implement recovery tokens overview (search) page #285
• Implement recovery token revocation #286
• Manage the institution specific vetting type hints #290
• Audit log: display timestamps in the local system timezone #284

4.3.6

• Display forgotten Second Factor tokens and their audit logs #275 #277
• Install security upgrades #276

4.3.5

• QA tests where moved from running on Travis, to reside on GitHub Actions #271, #273, #274

4.3.4

• Added Github Action for tag release automation

4.3.3

• Added browserlist entry in package.json to ensure IE 11 support

4.3.2

• Update Stepup Bundle and Http Foundation to prevent deprecation warnings

4.3.1

• Update stepup-bundle and stepup-saml-bundle

4.3.0

Bugfix

• Update Stepup-Bundle

4.2.0

Feature

• Show migrated tokens in the audit log

4.1.3

Improvements

• Move from security-checker to local-php-security-checker
• Update dependencies

4.1.2

Bugfix

• Add component_info to archive
• Update Content Security Policy to allow images
• Update http-kernel #243

4.1.1

Feature

• Bump lodash to 4.17.9 to mitigate vulnerability #240

4.1.0

Feature

• Make the the prove possession step optional #238

4.0.0

From this version PHP 7.2 is supported and support for PHP 5.6 is dropped.

Be aware that the new Symfony directory structure is now used. So if you are overwriting for example config files it is recommended to verify the location on forehand. Also the file extensions of Yaml files are changed and some Symfony specific special characters
need to be escaped.

See: https://github.com/symfony/symfony/blob/4.4/UPGRADE-4.0.md

Improvements

• Upgrade to Symfony 4.4 LTS and support php 7.2 #237

3.1.3

Bugfix

• Allow updating the location of an RA #235

3.1.2

Bugfix

• Repair the token export feature #234

3.1.1

Bugfix

• Remove filter from ra candidate search form #233

3.1.0

A release with bugfixes after initial FGA test:

• Update translations #228
• Improve button-group button alignment #231
• Fix exception controller authentication exceptions #232
• Remove unused select_raa code #230
• Security updates #229
• Test php 7.3 with travis #224

3.0.1

This is a security release that will harden the application against CVE 2019-346

• Upgrade Stepup-saml-bundle to version 4.1.8

3.0.0 FGA (fine grained authorization)

The new fine grained authorization logic will allow Ra's from other institutions to accredidate RA's on behalf of another organisation. This is determined based on the institution configuration. https://github.com/OpenConext/Stepup-Deploy/wiki/rfc-fine-grained-authorization/b6852587baee698cccae7ebc922f29552420a296

Features & Bugfixes The changes to RA in regards to the FGA changes only where to remain compatible with API changes made for Stepup-RA. No new features have been added.

2.10.8

This is a security release that will harden the application against CVE 2019-346

• Upgrade Stepup-saml-bundle to version 4.1.8

2.10.7

Features

• Allow filtering the RA candidate on institute #201
• Add search support on the RA management page #200

Improvements

• Widen the width of the menu #199
• Remove RAA switcher #198

2.10.6

Improvement

• Align buttons on 'Tokens' page #194

2.10.5

Bugfix

• Fix the token sorting PART II #192

2.10.4

Improvements

• Open help in new tab #187
• Introduce multi-lingual logout redirect #186

2.10.3

Bugfixes

• Flip value/label in choice form type definitions #168

Improvments for testing

• Ensure middleware API is used in test mode #167

2.10.2

Bugfixes

• Fix setAllowedTypes usage in VerifyPhoneNumberType form #166

2.10.1

• Restore DataExporter repository (thanks @tvdijen for issue 164)

2.10.0

Features & Bugfixes

• Improved the AccessDenied error page #159
• Fixed missing translations for validation messages on forms #163

Improvements

• Symfony 3.4.15 upgrade #162
• Behat test support #160
• Removed RMT from the project