Skip to content

v23.42-beta2
Compare
Choose a tag to compare
@byewokko byewokko released this 24 Oct 12:22
· 792 commits to main since this release
v23.42-beta2
d2b7561
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

Breaking changes

  • NGINX introspection endpoints paths changed and moved to private API. This is a major breaking change and requires updates to your Nginx configuration files. See #311 for migration guide and backward compatibility options.
  • Dropped support for authorize query params ldid and expiration (#296).

Full changelog

Fix

  • Preserve nonce when redirecting to login (#294, PLUM Sprint 230908, @elpablos)
  • Allow username for WebAuthn credentials username (#297, PLUM Sprint 230908)
  • NGINX introspection endpoints moved to private API (#301, #311, PLUM Sprint 231006)
  • Fix default authorize parameter values when redirecting (#313, PLUM Sprint 231020)

Features

  • Login with AppleID (#293, PLUM Sprint 230908, @filipmelik)
  • Webauthn authenticator metadata (#256, PLUM Sprint 230908)
  • Configurably disable auditing of anonymous sessions (#304, PLUM Sprint 231006)
  • Authorization for websocket requests (#300, PLUM Sprint 231006)
  • Silence stable log messages (#312, PLUM Sprint 231006)
  • External login registration webhook (#286, PLUM Sprint 231006)
  • OAuth Authorize ignores all unknown parameters (#296, PLUM Sprint 231006)

Contributors

filipmelik and elpablos
Assets 2
Loading