v24.20-alpha14

What's Changed

• Accept algorithmic token in oauth introspection by @byewokko in #405

Full Changelog: v24.20-alpha13...v24.20-alpha14

v24.20-alpha13

What's Changed

• Fix token request for self-encoded (algorithmic) sessions by @byewokko in #404

Full Changelog: v24.20-alpha12...v24.20-alpha13

v24.20-alpha12

What's Changed

• Log login factor verification failure by @byewokko in #402
• Fix credential search performance by @byewokko in #391

Full Changelog: v24.20-alpha11...v24.20-alpha12

v24.17.2

Compatibility

Recommended LMio WebUI v24.08-beta6 or later

What's Changed

• SERIOUS Fix attribute error in credentials update (#399)
• ASAB version locked
• Client cache by @byewokko in #361
• List credentials from authorized tenant only by @byewokko in #348
• Fix searching credentials with multiple filters by @byewokko in #362
• Fix resource initialization by @byewokko in #363
• Invitation URL in response, resending invitations by @byewokko in #364
• User invitations are enabled by default by @byewokko in #367
• Improve resource filtering and sort them alphabetically by @byewokko in #370
• Deprecate passlib by @byewokko in #368
• Consistent use of item-specific not-found exceptions by @byewokko in #371
• Authorize into last active tenant by @byewokko in #373
• Deny password change when old password verification fails by @byewokko in #374
• Advance branch to v24.17-beta2 by @byewokko in #379
• Handle Argon2 VerifyMismatchError by @byewokko in #380

Full Changelog: v24.06...v24.17.2

v24.17.1

Compatibility

Recommended LMio WebUI v24.08-beta6 or later

What's Changed

• ASAB version locked
• Client cache by @byewokko in #361
• List credentials from authorized tenant only by @byewokko in #348
• Fix searching credentials with multiple filters by @byewokko in #362
• Fix resource initialization by @byewokko in #363
• Invitation URL in response, resending invitations by @byewokko in #364
• User invitations are enabled by default by @byewokko in #367
• Improve resource filtering and sort them alphabetically by @byewokko in #370
• Deprecate passlib by @byewokko in #368
• Consistent use of item-specific not-found exceptions by @byewokko in #371
• Authorize into last active tenant by @byewokko in #373
• Deny password change when old password verification fails by @byewokko in #374
• Advance branch to v24.17-beta2 by @byewokko in #379
• Handle Argon2 VerifyMismatchError by @byewokko in #380

Full Changelog: v24.06...v24.17.1

v24.20-alpha11

What's Changed

• Catch token decoding errors when finding sessions by @byewokko in #397
• Fix attribute error in credentials update by @byewokko in #399

Full Changelog: v24.20-alpha9...v24.20-alpha11

v24.20-alpha9

What's Changed

• External login with dynamic redirection by @byewokko in #384

Full Changelog: v24.20-alpha8...v24.20-alpha9

v24.20-alpha8

What's Changed

• Move SSO session creation into session service by @byewokko in #387
• Revert "Move SSO session creation into session service" by @byewokko in #388
• Refactor SSO session creation by @byewokko in #389
• Expected client ID is optional for authentication by @byewokko in #390
• Custom response codes for tenant-related authorization errors by @byewokko in #392
• Properly parse URL query before adding new parameters by @byewokko in #393
• Encrypt cookie value in session update by @byewokko in #394

Full Changelog: v24.20-alpha7...v24.20-alpha8

v24.20-beta1

What's Changed

• Hash passwords using argon2 instead of bcrypt by @byewokko in #375
• Fix AttributeError in failed login by @byewokko in #376
• Configurable basic password requirements by @byewokko in #372
• Implement OAuth refresh tokens by @byewokko in #358
• Properly handle Argon2 VerifyMismatchError by @byewokko in #378
• Do not log failed LDAP login as error by @byewokko in #381
• Extend session expiration on cookie request by @byewokko in #383
• Delete client cookie on introspection failure by @byewokko in #385
• Session build refactoring by @byewokko in #386
• Move SSO session creation into session service by @byewokko in #387
• Revert "Move SSO session creation into session service" by @byewokko in #388
• Refactor SSO session creation by @byewokko in #389

Full Changelog: v24.17...v24.20-beta1

v24.20-alpha7

What's Changed

• Session build refactoring by @byewokko in #386

Full Changelog: v24.20-alpha6...v24.20-alpha7