Skip to content

Latest commit

 

History

History
244 lines (159 loc) · 5.18 KB

CHANGELOG.md

File metadata and controls

244 lines (159 loc) · 5.18 KB
Raw

Changelog

We follow the CalVer (https://calver.org/) versioning scheme: YY.MINOR.MICRO.

23.2.1 (07-07-2023)

  • Fix SSO error handling for inactive users

23.2.0 (06-25-2023)

  • Institution support email for selective SSO

23.1.0 (01-25-2023)

  • Institution Rework Project - CAS Part

22.1.3 (12-20-2022)

  • Add retries for OSF API requests during institution SSO

22.1.2 (11-21-2022)

  • Add an extra check for username and its shib attribute during SSO

22.1.1 (11-11-2022)

  • Trim config for instn cas clients
  • Sync with public charts

22.1.0 (11-09-2022)

  • Added the institution SSO integration guide
  • Synchronized the repo copy of institutions-auth.xsl against helm charts
  • Updated local configs for fakeCAS IdP with institution osftype0
  • Migrated okstate SSO from CAS to SAML
  • Updated readme accordingly

22.0.7 (10-06-2022)

Update help/support links

22.0.6 (09-30-2022)

Add branded login logo image for CoP Preprints

22.0.5 (07-29-2022)

Support shared SSO between FSU and MagLab

22.0.4 (06-29-2022)

Support institution affiliation via ORCiD SSO

22.0.3 (05-26-2022)

Update CAS PAT to never expire

22.0.2 (05-23-2022)

Enable CAS health endpoint for K8s liveness probing

22.0.1 (02-14-2022)

Institution selective SSO - CAS Part

22.0.0 (01-25-2022)

CAS accessibility fixes

21.3.4 (01-10-2022)

Update copyright year automatically

21.3.3 (12-20-2021)

A third logger upgrade fro CAS 6.2.x

21.3.2 (12-17-2021)

Another logger upgrade for CAS 6.2.x

21.3.1 (12-14-2021)

Upgrade logger for CAS 6.2.x

21.3.0 (07-19-2021)

Support OSF institution deactivation/reactivation

21.2.5 (05-18-2021)

Customize pac4j stop web flow view

21.2.4 (05-04-2021)

Fix dependencies to support CAS client using SAML validation

21.2.3 (05-03-2021)

Fix login URLs for cas-pac4j institution SSO

21.2.2 (04-29-2021)

Fix OAuth callback authorize redirect URL and consent approval callback URL

21.2.1 (04-28-2021)

Fix root controller relative redirection

21.2.0 (04-28-2021)

newCAS Production Server Release

21.1.5 (04-14-2021)

Fix invalid access type for OAuth /authorize

21.1.4 (04-14-2021)

Fix personal access token revokation

21.1.3 (04-09-2021)

Test server institution SSO update

21.1.2 (04-08-2021)

OAuth callback authorize service update

21.1.1 (04-08-2021)

Front-end fixes improvements

21.1.0 (03-30-2021)

OSF CAS feature-complete release

  • OSF CAS as an OAuth 2.0 server
  • OSF personal access token, developer apps and oauth scopes
  • Authentication failure throttling
  • Customized institution logout
  • Institution department
  • Overlay template and core library upgrade

21.0.0 (02-03-2021)

OSF CAS third release with web flow updates, institution SSO, and FE rework

  • Login and logout web flow fixes and improvements
  • Fully functional institution SSO, BE and FE
  • FE rework and UI / UX improvements

Extra features

  • Institution SSO migration
  • TOS consent check
  • SonarQube integraiton

20.1.0 (11-05-2020)

OSF CAS second release with FE re-design, BE improvements and DevOps updates

  • FE

    • Refactored styles to be consistent with both OSF and oldCAS
    • Rewrote how authentication delegation info is retrieved and used
    • Improved the behavior of inline error messages in login forms
    • Added new / Rewrote existing authentication exception pages
    • Improved UI / UX in responsive mode and on various screen dimensions

  • BE

    • Implemented a dedicated OSF CAS login context and a couple of pre-login check actions to support ORCiD login and institution SSO
    • Implemented ORCiD sign-up auto-redirect for OSF

  • DevOps

    • Updated tomcat server to work with its enclosing Shibboleth server
    • Separated staging / production and local configurations
    • Rewrote cas.properties into a helm charts template
    • Improved build / run / reload for local development

  • Other

    • Replaced Apereo branding with COS / OSF in multiple places

20.0.0 (09-02-2020)

OSF CAS first release with basic authentication features for OSF

  • Username and password login
  • Username and verification key login
  • Two-factor authenticaion
  • Long-term authentication
  • ORCiD login

Technical details

  • JSON service registry
  • JPA ticket regisrtry with PostgreSQL
  • JPA PostgreSQL authentication backend
  • Customized login web flow and authentication including:
    • OSF credential and metadata populator
    • OSF non-interactive authentication action
    • OSF PostgreSQL authentication handler
    • Pac4j authentication delegation
    • Two-factor authentication using time-based one-time password
    • Customized authentication exception handling
    • Customized user interface