Skip to content
This repository has been archived by the owner on Feb 15, 2025. It is now read-only.

Latest commit

 

History

History
324 lines (186 loc) · 7.63 KB

File metadata and controls

324 lines (186 loc) · 7.63 KB

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

[v2.8.1] - 2023-06-30

Fixed

  • Check if voPersonCertificateIssuerDN exists during the preparation of data for job scheduler

[v2.8.0] - 2023-05-24

Added

  • New error page for handling registered identifiers in an error state

[v2.7.0] - 2022-12-01

Added

  • New configuration option for setting the name of the attribute containing the user's Certificate Subject DN(s)

[v2.6.2] - 2022-10-10

Fixed

  • Encoding of default roles in entitlemenets for nested groups (AARC-G002)

[v2.6.1] - 2022-10-06

Fixed

  • Encoding of roles in entitlemenets for nested groups (AARC-G002)

[v2.6.0] - 2022-08-25

Added

  • New configuration option for generating entitlements without role attribute

[v2.5.0] - 2022-05-16

Added

  • Redirect users to Community Sign-up flow based on IdP tag in metadata

[v2.4.1] - 2022-04-28

Fixed

  • Check for every accepted AUP related to a VO if user is still member

[v2.4.0] - 2022-04-28

Added

  • Insert jobs to COmanage for updating OrgIdentity

[v2.3.1] - 2021-11-29

Fixed

  • Do not construct the organization attribute for a Removed OrgIdentity
  • Fixed error handling on unhandled exceptions such as database related errors

[v2.3.0] - 2021-11-15

Added

  • Add cuid in state

Fixed

  • Removed OrgIdentities should not be allowed to login
  • On failure return friendly error message, not the stack trace

[v2.2.0] - 2021-10-11

Added

  • Record Authenticiation Event to Registry Database

Fixed

  • Do not include empty edupersonEntitlements field in state
  • Skip merge of edupersonEntitlements when the user has no memberships

[v2.1.0] - 2021-07-12

Added

  • Support for resending email verificaton when the user status is in pending confirmation

Changed

  • Construct VO membership entitlements if the user is active or in grace period

[v2.0.5] - 2021-04-08

Added

  • Support for redirecting user to community signup flow without affiliation information

[v2.0.4] - 2021-01-25

Fixed

  • Namespace errors

[v2.0.3] - 2021-01-25

Fixed

  • Namespace errors

[v2.0.2] - 2021-01-25

Added

  • Encoding of nested COUs in entitlements according to AARC-G002
  • voGroupPrefix configuration option to support multitenacy
  • voPersonVerifiedEmail attribute for releasing verified email address(es)
  • Support for querying terms & conditions agreement information
  • Configuration for enabling the retrieval of certificate information
  • Option to skip voWhitelist checks, if voWhitelist is null
  • attrMap configuration option. Map COmanage Registry IdentifierEnum class values to SimpleSAMLphp attibute names
  • User's COPerson ID in state information
  • Support for retrieving user's SSH keys
  • Dictionary for error messages
  • coOrgIdType configuration option. List of Identifier types associated with user's Organizational Identities

Changed

  • Improve calculation of COPerson's profile attributes
  • Improve handling of suspended users
  • Calculation of user's Profile Identifier. A valid Identifier must be an authenticator and must not be expired

[v1.5.6] - 2021-01-15

Fixed

  • Fix agreed aup revision with null value evalueated falsely
  • Minor code style changes

[v1.5.5] - 2021-01-14

Fixed

  • Bug where retrieval of AUP information was skipped when the user had no COU or Group membership

[v1.5.4] - 2021-01-13

Added

  • User's Terms and Conditions/Acceptable Use Policy (AUP) information in state information
  • User's COPerson ID in state information
  • Support for retrieving user's SSH keys

[v1.5.3] - 2020-12-04

Added

  • Dictionary for error messages

[v1.5.2] - 2020-11-26

Changed

  • Improve handling of suspended users

[v1.5.1] - 2020-11-25

Added

  • coOrgIdType configuration option. List of Identifier types associated with user's Organizational Identities

Changed

  • Calculation of user's Profile Identifier. A valid Identifier must be an authenticator and must not be expired

[v1.5.0] - 2020-11-17

🌹

Added

  • attrMap configuration option. Map COmanage Registry IdentifierEnum class values to SimpleSAMLphp attibute names

Changed

  • Improve calculation of COPerson's profile attributes

[v1.4.2] - 2020-11-11

Added

  • Add option to skip voWhitelist checks, if voWhitelist is null

[v1.4.1] - 2020-11-04

Added

  • Add configuration for enabling the retrieval of certificate information

[v1.4.0] - 2020-10-09

Added

  • Support for querying terms & conditions agreement information

[v1.3.5] - 2020-10-09

Fixed

  • Fixed bug allowing duplicate eduPersonScopedAffiliation attribute values

[v1.3.4] - 2020-09-28

Added

  • Added voPersonVerifiedEmail attribute

Changed

  • Refactored getProfile query

[v1.3.3] - 2020-09-24

Added

  • Added voGroupPrefix configuration option to support multitenacy

Fixed

  • Fixed faulty condition in entitlement construction
  • Fixed uninitialized variables
  • Exclude parent COU default roles if the user is only a member of the admins group and has no affiliation with the COU
  • Minor code improvements

[v1.3.2] - 2020-09-15

Fixed

  • Fix wrong calculation of entitlements if the user is an admin but has no affiliation in a COU

Changed

  • Fetch COPerson memberships in one query

[v1.3.1] - 2020-09-08

Fixed

  • Fixed bug when encoding COUs not in voWhitelist

[v1.3.0] - 2020-09-08

Added

  • Encode nested COUs in entitlements according to AARC-G002

[v2.0.1] - 2020-02-23

Fixed

  • Fixes target_new URL redirect for self sign-up flow
  • Fixes evaluation of member and owner roles of COU admins group

[v1.2.2] - 2020-02-23

Fixed

  • Fixes target_new URL redirect for self sign-up flow
  • Fixes evaluation of member and owner roles of COU admins group

[v2.0.0] - 2020-02-14

Changed

[v1.2.1] - 2020-02-14

Fixed

  • Fetch missing CO Person data when resuming state from target_new URL

[v1.2.0] - 2020-02-12

Added

  • Encode COU role title and affiliation as role information in generated entitlements
  • Encode COU admins group member and owner role information in generated entitlements

[v1.1.1] - 2019-01-22

Fixed

  • Fix typos in coid var reference and legacy URN formatting

[v1.1.0] - 2019-01-21

This version is compatible with SimpleSAMLphp v1.14

Added

  • COmanageDbClient class
    • Get the following information about the user:
      • user's profile (given name, family name, organisation, affiliation, identifier)
      • certificate (subject DN)
      • role attributes (COU membership)
      • group membership (group member role)
    • Create eduPersonEntilement values based on:
      • roles attributes (COU membership)
      • groups (group member role)
    • Store the session into target_new query parameter. Use the stored seesion for the purpose of redirecting the user to the SP at the end of Registry enrollment.

Changed

  • Moved placeholder variables to configuration
    • urnNamespace
    • urnAuthority
    • COmanage registry redirect URLs
    • voRoles

Fixed

  • sql query failure due to typo error