2021-03-02

Bug fixes and other updates

• Return PubClient instead of Client from /users/list-clients (#1391)

Internal changes

• Federation: Add qualified endpoints for prekey management (#1372)

2021-02-25

Bug fixes and other updates

• Pin kubectl image in sftd chart (#1383)
• Remove imagePullPolicy: Always for reaper chart (#1387)

Internal changes

• Use mu-haskell to implement one initial federation request across backends (#1319)
• Add migrate-external-ids tool (#1384)

2021-02-16

Release Notes

This release might require manual migration steps, see ElasticSearch migration instructions for release 2021-02-16 .

Features

• Team search: Add search by email (#1344) (#1286)
• Add endpoint to get client metadata for many users (#1345)
• Public end-point for getting the team size. (#1295)
• sftd: add support for multiple SFT servers (#1325) (#1377)
• SAML allow enveloped signatures (#1375)

Bug fixes and other updates

• Wire.API.UserMap & Brig.API.Public: Fix Swagger docs (#1350)
• Fix nix build on OSX (#1340)

Internal changes

• [federation] Federation end2end test scripts and Makefile targets (#1341)
• [federation] Brig integration tests (#1342)
• Add stack 2.3.1 to shell.nix (#1347)
• buildah: Use correct dist directory while building docker-images (#1352)
• Add spar.scim_external table and follow changes (#1359)
• buildah: Allow building only a given exec and fix brig templates (#1353)
• Galley: Add /teams/:tid/members csv download (#1351) (#1351)
• Faster local docker image building using buildah (#1349)
• Replace federation guard with env var (#1346)
• Update cassandra schema after latest changes (#1337)
• Add fast-intermediate Dockerfile for faster PR CI (#1328)
• dns-util: Allow running lookup with a given resolver (#1338)
• Add missing internal qa routes (#1336)
• Extract and rename PolyLog to a library for reusability (#1329)
• Fix: Spar integration tests misconfigured on CI (#1343)
• Bump ormolu version (#1366, #1368)
• Update ES upgrade path (#1339) (#1376)
• Bump saml2-web-sso version to latest upstream (#1369)
• Add docs for deriving-swagger2 (#1373)

2021-01-15

Release Notes

This release contains bugfixes and internal changes.

Features

• [federation] Add helm chart for the federator (#1317)

Bug fixes and other updates

• [SCIM] Accept any query string for externalId (#1330)
• [SCIM] Allow at most one identity provider (#1332)

Internal changes

• [SCIM] Change log level to Warning & format filter logs (#1331)
• Improve flaky integration tests (#1333)
• Upgrade nixpkgs and niv (#1326)

2021-01-12

Release Notes

This release contains bugfixes and internal changes.

Bug fixes and other updates

• [SCIM] Fix bug: Deleting a user retains their externalId (#1323)
• [SCIM] Fix bug: Provisioned users can update update to email, handle, name (#1320)

Internal changes

• [SCIM] Add logging to SCIM ops, invitation ops, createUser (#1322) (#1318)
• Upgrade nixpkgs and add HLS to shell.nix (#1314)
• create_test_team_scim.sh script: fix arg parsing and invite (#1321)

2021-01-06

Release Notes

This release contains bugfixes and internal changes.

Bug fixes and other updates

• [SCIM] Bug fix: handle is lost after registration (#1303)
• [SCIM] Better error message (#1306)

Documentation

• [SCIM] Document validateSAMLemails feature in docs/reference/spar-braindump.md (#1299)

Internal changes

• [federation] Servantify get users by unqualified ids or handles (#1291)
• [federation] Add endpoint to get users by qualified ids or handles (#1291)
• Allow overriding NAMESPACE for kube-integration target (#1305)
• Add script create_test_team_scim.sh for development (#1302)
• Update brig helm chart: Add setExpiredUserCleanupTimeout (#1304)
• Nit-picks (#1300)
• nginz_disco: docker building consistency (#1311)
• Add tools/db/repair-handles (#1310)
• small speedup for 'make upload-charts' by inlining loop (#1308)
• Cleanup stack.yaml. (#1312) (#1316)

Release 2020-12-21

Release Notes

• upgrade spar before brig
• upgrade nginz

Features

• Increase the max allowed search results from 100 to 500. (#1282)

Bug fixes and other updates

• SCIM: Allow strings for boolean values (#1296)
• Extend SAML IdP/SCIM permissions to admins (not just owners) (#1274, #1280)
• Clean up SCIM-invited users with expired invitation (#1264)
• move-team: CLI to export/import team data (proof of concept, needs testing) (#1288)
• Change some error labels for status 403 responses under /identity-providers (used by team-settings only) (#1274)
• [federation] Data.Qualified: Better field names (#1290)
• [federation] Add endpoint to get User Id by qualified handle (#1281, #1297)
• [federation] Remove DB tables for ID mapping (#1287)
• [federation] servantify /self endpoint, add qualified_id field (#1283)

Documentation

• Integrate servant-swagger-ui to brig (#1270)

Internal changes

• import all charts from wire-server-deploy/develop as of 2012-12-17 (#1293)
• Migrate code for easier CI (#1294)
• unit test and fix for null values in rendered JSON in UserProfile (#1292)
• hscim: Bump upper bound for servant packages (#1285)
• drive-by fix: allow federator to locally start up by specifying config (#1283)

2020-12-15

Release Notes

As a preparation for federation, this release introduces a mandatory 'federationDomain' configuration setting for brig and galley (#1261)

Features

• brig: Allow setting a static SFT Server (#1277)

Bug fixes and other updates

Documentation

Internal changes

• Add federation aware endpoint for getting user (#1254)
• refactor brig Servant API for consistency (#1276)
• Feature flags cleanup (#1256)

2020-11-25

Release Notes

• Allow an empty SAML contact list, which is configured at saml.contacts in spar's config.
  The contact list is exposed at the /sso/metadata endpoint.

Features

• Make Content-MD5 header optional for asset upload (#1252)
• Add applock team feature (#1242, #1253)
• /teams/[tid]/features endpoint

Bug fixes

• Fix content-type headers in saml responses (#1241)

Internal changes

• parse exposed 'tracestate' header in nginz logs if present (#1244)
• Store SCIM tokens in hashed form (#1240)
• better error handling (#1251)

Release 2020-10-28

Features

• Onboard password-auth'ed users via SCIM, via existing invitation flow (#1213)

Bug fixes and other updates

• cargohold: add compatibility mode for Scality RING S3 implementation (#1217, reverted in 4ce798e, then #1234)
• update email translations to latest (#1231)

Documentation

• [brig:docs] Add a note on feature flag: setEmailVisibility (#1235)

Internal changes

• Upgrade bonanza to geoip2 (#1236)
• Migrate rex to this repository (#1218)
• Fix stack warning about bloodhound. (#1237)
• Distinguish different places that throw the same error. (#1229)
• make fetch.py compatible with python 3 (#1230)
• add missing license headers (#1221)
• More debug logging for native push notifications. (#1220, #1226)
• add libtinfo/ncurses to docs and nix deps (#1215)
• Double memory available to cassandra in demo mode (#1216)