All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog.
Unreleased - XXXX-XX-XX
2.3.1 - 2024-10-17
- #319 - fix: do not spam log file when running in parallel with oauth app
2.3.0 - 2024-07-10
- #255 - feat: use password policy app to generate password for provisioned users (#282)
- #286 - chore: remove unused config option
use-token-introspection-endpoint - #298 - chore: drop php 7.3 - ownCloud server 10.12 is minimum criteria
- #314 - sec: bump phpseclib to 3.0.39
- dependency updates; github/settings updates; README.md updates.
2.2.0 - 2022-12-21
- #239 - fix: auto update function return
- #246 - Duo SSO/code_challenge_methods_supported
- #250 - fix: user information is only read from the JWT token if configured
- #255 - fix: restrict usage of self signed JWK header in JWTs
- #259 - fix: log url in case of curl error
- #222 - feat: account info auto-update
- #243 - feat: JWT token will always be used for user info, expiry and verification
- #253 - Add config option to allow basic auth only for guests
- #257 - feat: add translations support
- #272 - Send to auth module so the login type is recognized in core
2.1.1 - 2022-02-25
- Public Link Uploads Fail for Anonymous Users - #203
- Read openid configuration from DB first before using config.php - #200
- Regular Maintenance (Library updates)
2.1.0 - 2021-10-29
- chore: jumbojett/openid-connect-php seems unmaintained - we move to juliuspc/openid-connect-php #183
- [Enhancement] Add db as additional settings storage backend 167
- PKCE Flow challenge was not used - #170
- Use random_bytes to generate auto-provisioning user-id and password - #154
- Provision accounts based on auto-provisioning claim - #149
- Add app db table as additional, optional config storage - #67
2.0.0 - 2021-01-10
- Import user from openid provider: Auto provisioning mode - #85
- Azure AD: Use access token payload instead of user info endpoint - #103
- Limit OpenID Connect logins to users of specific user backend - #100
- Message: Object of class OCA\OpenIdConnect\Application could not be converted to string - #112
- Properly handle token expiry in the sabre dav auth backend - #106
- Properly evaluate the config setting use-token-introspection-endpoint #98
- Use built-in session functions of the OpenID Connect Library - #97
- Bump libraries
1.0.0 - 2020-10-16
- Add configurable post_logout_redirect_uri - #90
- Properly handle token expiry in the sabre dav auth backend - #108
- Limit OpenID Connect logins to users of specific user backend - #100
- Properly evaluate the config setting use-token-introspection-endpoint - #98
- Bump libraries
0.2.0 - 2020-02-11
- Drop Support for PHP7.0 - #40
- Perform local logout before calling idp - #45
- Introduce LoginPageBehaviour - #53
- Re-license under GPLv2 - #57
- Initial Release