- update style a bit
- add new text to documentation page
- update text, and translation
- update default fonts
- remove separator between language selection and logout
- update translations
- update normalize.css
- update documentation page
- move the language changer to the footer again
- reduce form size in footer
- make orange of warning boxes a bit less hard
- change language switcher to drop down box
- implement group membership caching (in user session)
- automatically obtain access token for Voot group API when enabled
- completely redo CSS
- add date and instance name to name of downloaded configuration file
- simplify configuration display
- only show two factor enrollment when there is at least one pool that requires 2FA
- always show drop down for profile selection
- warn if two factor enrollment is not done when profiles exist that require 2FA
- small fix for ACL check when ACL is not enabled
- fix ACL check for new page
- work with new group handling in vpn-server-api
- again show the revoked configurations in the user portal, although configurations can no longer be revoked, we do not want them to be completely gone from the UI
- no longer offer to revoke configurations, only disable as we phase out revocation completely
- add optional SURFconext Voot support
- fix API
- better error handling when somehow a non exiting pool is used
- update for new API
- update way in which the
remote
line in the config is sorted
- fix OAuth API
- remove ZIP download
- update to new vpn-server-api API
- update documentation
- implement "Pool" chooser if more than one pool is available
- fix remote API
- do not allow empty OTP code when enrolling
- new UI to change languages
- also allow changing languages when query parameters are present
- add some additional HTTP security headers
- update translation
- update to new API
- implement 2FA enrollment
- fix auto capitalization for iOS
- lots of translation updates
- update default VPN server list to also include udp/1195 and udp/1196
- randomize the remote list in the generated client config to get some rudimentary load balancing
- no longer use Twig template for client configuration
- allow configuring remote hosts in
config/config.yaml
- sync crypto config with server
- remove all 'pool' information from the UI
- add
nl_NL
translation - update dependencies
- replace complete API with OAuth 2.0 API
- remove QR code
- add Account page for listing user ID, applications that have tokens and group membership
- remove
whoami
endpoint, now available on account page
- remove
fkooman/io
dependency and useparagonie/random_compat
instead for random number generation
- remove the default user from the configuration file
- add an
add-user
script to easily add users - update documentation
- small fix in default pool
- support new info API
- fix init script
- update to new API of vpn-ca-api and vpn-server-api
- display the pool a CN is part of
- configuration file is now generated in the user portal
- better error display
- switch to Bearer authentication towards backends to improve performance (BREAKING CONFIG)
- no longer need to put
index.php
in the QR code - add
templateCache
to config example
- remove BasicAuthentication for users
- update config template
- add "Home" page
- also terminate a connection when the user revokes a configuration
- fix API URL, for working with SAML it needs to explicity include
index.php
in the URL
- make init script executable
- fix config template
- remove API that was used by vpn-admin-portal as vpn-admin-portal talks to vpn-config-api now
- add new API for consumers that also works when using SAML authentication
- implement a QR code option to enroll using an Android app (Advanced)
- cleanup the UI a lot
- show configurations split up by active, disabled, revoked and expired
- use new vpn-config-api for retrieving configurations
- support Form authentication next to Basic authentication
- implement logout support for Form authentication
- major refactoring of code
- update CSS
- update iOS documentation
- merge the 'Active' and 'Revoked' tab together and have an "Active", "Disabled" and "Revoked" table
- update documentation
- remove some redundant text from 'Revoke' tab
- add link to OpenVPN Connect for Android FAQ
- add section on Privacy
- update CSS
- BUGFIX: strlen($userId_$name) MUST have length <64
- sync CSS with vpn-admin-portal
- "No" in confirm revocation is now green
- remove boostrap for simple custom CSS
- sort the configuration listing descending by
created_at
, showing the newest on top
- implement error page when trying to create a configuration with an already existing name
- autofocus the configuration name text box
- implement confirmation dialog when revoking a configuration
- update to work with new vpn-server-api
- many minor UI improvements
- update documentation section
- implement "whoami" to find out the user ID
- also refresh CRL when the user revokes a configuration
- switch configuration to YAML from ini
- completely new UI design
- get rid of
READY
state, see [UPGRADING.md]. - introduce advanced form download, disabled by default, only enabling ZIP download for now
- use bootstrap for UI
- fix ZIP
key-direction
- no longer store the retrieved configuration in the database, but immediately
send it to the client (removed the
config
column from DB, see [UPGRADING.md]) - rename the files in the ZIP to allow for better sorting in directory listings
- store the configuration creation/revocation time (add column
created_at
andrevoked_at
to DB, see [UPGRADING.md]) - sort display by status, creation time (no longer alphabetic)
- NOTE: all configurations that were created, but not yet downloaded will be unavailable and marked as revoked, see [UPGRADING.md]
- when creating a new configuration, immediately redirect to download page
- do not use HTTP referer anymore for redirects
- update dependencies
- BREAKING change the config category
[VpnCertService]
to[VpnConfigApi]
- update README
- move classes in new sub folder
- BREAKING add ability to block users, requires DB update (add
blocked_users
table) - BREAKING add API calls for integration with
vpn-admin-portal
, configuration file needs to be updated with new[ApiAuthentication]
section - remove the
/config/
sub folder, but keep 301 redirect to '/' - remove the embedded documentation, does not belong here
- add page to show when user is blocked
- cleanup templates
- cleanup authentication
- update dependencies
- fix file download in IE (issue #7)
- add a new recommended client for Android
- rework and cleanup the templates a bit
- add documentation section
- update Service class to support multiple authentication backends by default
- BREAKING modify configuration file to support multiple authentication
backends, needs reconfiguring. See
config/config.ini.example
. - support both Basic and Mellon authentication now
- add script to generate password hash for BasicAuthentication configuration
- update config download page to mention NetworkManager and OpenWrt as examples use cases for the ZIP file
- rename the files in the ZIP export to also include the name of the config to
allow for example multiple copies in
$HOME/.cert
on Linux
- use
fkooman/tpl-twig
instead of included template management
- initial release