The upgrade instructions are available at Oro documentation website.
The current file describes significant changes in the code that may affect the upgrade of your customizations.
- Added command
oro:oauth-server:generate-keys
that generates RSA keys for using in OAuth2 server. - Added cron command
oro:cron:oauth-server:check-keys-permissions
that checks if RSA private key file has secure permissions and creates a notification alert if not. - Added
\Oro\Bundle\OAuth2ServerBundle\Client\AccessTokenClient
that makes internal requests to provide an OAuth2 access token. - Added
\Oro\Bundle\OAuth2ServerBundle\Client\AuthorizationCodeClient
that makes internal requests to provide an OAuth2 authorization code. - Added the ability to fetch an access token from a cookie instead of
Authorizarion
header in theoauth2
authentication method - via theauthorization_cookies
setting.
- Updated
customer_user_oauth_application_created
email templates to extend it frombase_storefront
email template.