Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

6.1.1 – 2024-10-22

Fixed

Ensure providerClientId is declared when validating bearer tokens @artonge #969

6.1.0 – 2024-10-15

Added

feat(provisioning): New system config flag to disable user creation in soft auto provisioning @julien-nc #954
feat(ApiController): Add endpoint to de-provision user @edward-ly #960
Add an OCS API controller for pre-provisioning and de-provisioning @julien-nc #963

Changed

Make aud and azp checks optional when logging in or validating a bearer token @julien-nc #921
Bump max NC version to 31

Fixed

Fix provisioning mistake when setting role @julien-nc #930
Fix LoginController: revert default token_endpoint_auth_method value @edward-ly #946
Fix integration tests sometimes not finding docker-compose but 'docker compose' @julien-nc #953
Backchannel logout endpoint should only return 200 or 400 @julien-nc #955
Use correct userId when getting user folder in provisioning endpoint if unique-uid is enabled @julien-nc #958
Re-enable PKCE by default (if supported by the IdP) @edward-ly #956
Prevent redirecting to an absolute URL after login @julien-nc #961
Fix provisioning: If address attr is an object but can't be parsed to an array, give null to the 'attr mapped' event @julien-nc #948

6.0.1 – 2024-07-26

Fixed

Many fixes in ProvisioningServer @julien-nc #905

6.0.0 – 2024-07-23

Changed

Update npm pkgs
Use nextcloud/vue 8.15.0
Support more token endpoint authentication methods @xataxxx #897

Fixed

Set avatar on login @julien-nc #838
Fix small accessibility issue with NcModal @julien-nc

5.0.3 – 2024-06-21

Added

Support search by email in the user backend @tcoupin #815

Changed

Improve the stub so it's not confusing IDEs @nickvergessen @julien-nc #862 #863
Set group displayname when provisioning @towo @julien-nc #880
Add issuer, audience and azp checks in bearer token validator @julien-nc #864
Allow to disable default quota, displayName, groups and email claims @julien-nc #883

Fixed

Fix, improve and refactor the upsert occ command @julien-nc #860
Fix biography attr being used to set the account gender @julien-nc #888

5.0.2 – 2024-03-18

Changed

Update npm packages

Fixed

Stop using missing OC::->getEventDispatcher method (dropped in NC 28) @julien-nc #818

5.0.1 – 2024-02-28

Added

Soft auto-provisioning @julien-nc #730

Fixed

Prevent using ID4ME routes if ID4ME is disabled @julien-nc
Fix(login): user get null check @skjnldsv #789

1.3.6 – 2024-01-29

Added

Customizeable end session endpoint @nc-fkl #724
Implement ICountUsersBackend to give a user count in 'occ user:report' @julien-nc #733
Many additional user attribute mapping @nc-fkl #729
Psalm checks @julien-nc #765
Ensure the discovery endpoint result is valid @nc-fkl #750

Changed

Bump max NC version to 29 @julien-nc #717
Bump min NC version to 25 @julien-nc #765
Increased database column length for client id and secret @nc-fkl #711
Make PKCE optional @julien-nc #740
Update nextcloud/vue to v8 @julien-nc #763

Fixed

Avoid a lot of error log on token validation failure @aro-lew #721
Avoid identifier edition when editing a provider @nc-fkl #714

1.3.5 – 2023-11-24

Added

PKCE support #697 @rullzer @nc-fkl

Changed

improve id4me token validation #715 @julien-nc

Fixed

fix potentially missing alg in jwks #713 @julien-nc

1.3.4

Changed

Bump min NC to 24 @julien-nc #675
Upgrade php-jwt, adjust implementation @julien-nc #675

Fixed

Disable password confirmation for SSO @juliushaertl #668

1.3.3

Changed

Add issuer and azp validation, improve audience validation @julien-nc #642
Encrypt stored oidc provider client secrets and id4me client secrets @julien-nc #636

1.3.2

Fixed

fix Oracle database support by avoiding empty strings that are replaced with null @julien-nc #563
use more recent Ubuntu image for PhpUnit tests as the old ones are not picked up by runners @julien-nc #619
better error handling and throttling in Id4Me and login controllers @julien-nc #615 #618

Other

show redirect URI to help configuring the client on the provider side @julien-nc #598
add Nextcloud 27 support @julien-nc #616

1.3.1

Fixed

fix id4me/id4me-rp imports @julien-nc #585
don't include .nextcloudignore in app releases @julien-nc #595
avoid using IUserManager::getDisplayName that was introduced in NC 25 @julien-nc #594

1.3.0

Added

Group provisioning @MarvinOehlerkingCap #502
Group mapping @MarvinOehlerkingCap #502
Prefix user ID with provider ID @MarvinOehlerkingCap #502
User provisioning on API requests authenticated with a Bearer token @MarvinOehlerkingCap #502
DiscoveryService tests @julien-nc #518

Fixed

Expected code being exposed when the received one does not match @julien-nc #580
Non-unique database indexes @julien-nc #541
User display name change propagation @julien-nc #530
Fix discovery URL generation with GET parameters @julien-nc #518

Other

Safer user sync with LDAP user provisioning @julien-nc #535

1.2.1

Added

Support for Nextcloud 26 @nickvergessen #504
Support backchannel logout @julien-nc #464
New endpoint to pre-provision users @julien-nc #450
Create and populate user storage if necessary on bearer token validation @julien-nc #443

Fixed

Fix crash on bearer token validation before first login @julien-nc #498
Potential XSS with Safari @julien-nc #496
Fix single logout when using Keycloak >= 18 @ubipo #493
Enforce HTTPS @julien-nc #495
Check if user was deleted in LDAP if necessary @julien-nc #451
Perform a user search before login to make sure LDAP users are synced @julien-nc #436
Make sure the user avatar is generated on login @julien-nc #437
Fix upsert command resetting the scope if none provided @julien-nc #433
Fix upsert command not printing the provider when no parameter given @julien-nc #431
Fix single logout with non-auto provisioned users @julien-nc #429

Other

Modernize settings frontend (use @nextcloud/vue, bump js libs...) @julien-nc #497

1.2.0

Added

Fix and polish upsert and delete commands @eneiluj #338
Remove redundant and time consuming userinfo validation @eneiluj #334
Cache provider public keys @eneiluj #337
Move to IBootstrap @juliushaertl #385
New system config to disable SelfEncodedValidator bearer token validator @eneiluj #372
Dispatch new event when a bearer token is validated @eneiluj #381
Add new provider setting to request extra claims @eneiluj #407
Implement single logout @eneiluj #373

Fixed

Avoid claiming 'sub', display code response error @eneiluj #329
Optionally keep userinfo validator for api calls only, use all providers @eneiluj #335
Let .nextcloudignore skip defined paths only in root @juliushaertl #353
Avoid empty session on certain redirect situations in Safari @juliushaertl #358
Cache discovery endpoint results @juliushaertl #367
Fix a small php 8 compatibility issue @CarlSchwan #406
Cache user object when checking existance @CarlSchwan #412
Ensure that a remember me cookie is created @juliushaertl #425

v1.1.0

Added

#304 Allow to disable other login methods
#306 Add integration tests with keycloak
#317 Claim handling and complex mapping rules @tsdicloud
#320 Bearer token validation

Fixed

#303 Properly handle redirect after login
#319 Fix typo in quota attribute @rgfernandes
#316 Fix provider edition
#314 Fix header/column label missmatch @alerque

Other

Dependency updates

v1.0.0 (2021-08-03)

Implemented enhancements:

Add provider admin commands #292 (tsdicloud)
Move to npm7 and update actions #286 (skjnldsv)
Custom attribute mappings #268 (juliushaertl)
Implement missing user backend methods #267 (juliushaertl)
Update webpack config and add settings icon #259 (skjnldsv)

Fixed bugs:

Move mozart out of regular dependencies #296 (juliushaertl)

[0.3.1] - 2021-02-02

Fixed

Make column explitly nullable

[0.3.0] - 2021-02-02

Added

NC 21 support

Fixed

Installing on NC20

[0.1.0] - 2020-04-29

Added

Basic implementation of OIDC client
Expirimental support for ID4ME