- update for new vpn-lib-common API
- cleanup autoloader so Psalm will be able to verify the scripts in web and bin folder
- when creating a certificate through the API, bind it to the OAuth client ID
- delete all certificates associated with OAuth client ID when revoking OAuth application on "Account" page and disconnect the clients using certificates issued to this client (issue #89)
- rename "Configurations" to "Certificates" as that better covers what this page is actually about
- update
nl_NL
translations - add
fr_FR
translation (by Tangui Coulouarn)
- use new authorization method
- many
vimeo/psalm
fixes - code refactors to make it better verifyable
- convert errors from backend into proper API responses instead of HTTP/500 responses to API client (#95)
- record the last time the user authenticated
- certificates can no longer be disabled, so no need to show this any longer,
also remove it as a reason from
/check_certificate
API call
- support
tlsProtection
- support optional "customFooter" template
- add support for Android "app links" for OAuth clients
- enable logging in OAuth client
- update nl_NL translations
- show the user ID on the TOTP/YubiKey page when authenticating
- add Let's Connect for Android as an OAuth client registration
- convert spaces in
_
when downloading an OpenVPN configuration through the portal, fixes import in NetworkManager (Linux) (#92) - return
reason
through API when checking validity of certificate
- fix
/check_certificate
response to match API (#32)
- update for
fkooman/oauth2-client
version 7
- implement
/check_certificate
API call - support multiple RADIUS servers
- update for
fkooman/oauth2-server
API changes
- support RADIUS for user authentication
- switch to
UserInfo
class - add extra redirect URIs for iOS client
- make sure chosen userId does not exist yet when registering a new account (avoiding database constraint exception)
- script to generate voucher now prints voucherCode
- input validation for user chosen passwords when changing passwords and registering new accounts
- rework exposing proto/port in client configuration
- make sure data directory exists before adding users
- remove
addVpnProtoPorts
configuration option, and switch toexposedVpnProtoPorts
in Server API
- support
FormPdoAuthentication
and make it the default - deprecate
FormAuthentcation
, new deploys will useFormPdoAuthentication
by default - implement support for changing passwords by users when using
FormPdoAuthentication
- implement user self registration with vouchers
- if
tlsCrypt
is enabled, useAES-256-GCM
as only supported cipher
- set default for refresh token expiry to 180 days (instead of 6 months to sync with default of CA certificates)
- add Let's Connect OAuth client registration for Windows
- update Norwegian translation
- update authorization dialog text
- support refresh token expiry (update
fkooman/oauth2-server
) - set default for refresh token expiry to 6 months
- no longer show "Scope" for authorized applications
- translate "Enroll" on account page
- do not show group information when there are no groups to show (issue #85)
- do not show authorized applications when there are none
- simplify OAuth consent dialog
- reenable "Approval" dialog for OAuth clients for now
- make add-user script interactive if no
--user
or--pass
CLI parameters are specified (issue #83)
- use 160 bits TOTP secret instead of 80 bits
- expose
user_id
in/user_info
API call - update Tunneblick documentation
- cleanup autoloading
- hardcode the official eduVPN application registration for all platforms
- wrap
InputValidationException
in proper API responses when the API calls triggered those exceptions - update
eduvpn/common
- add 2FA enrollment to OAuth API
- cleanup templates for easier extension and custom styling
- breaks existing templates (falls back to default)
- implement page informing user to close the browser (after redirects to native app only)
- mention uMatrix on documentation page (for advanced users)
- update
nl_NL
translation
- support disabling approval for trusted OAuth clients
- rework (lib)sodium compatiblity
- fix unit tests for
fkooman/oauth2-server
2.0.1- OAuth server update fixes IE 11 support for the eduVPN for Windows application
- update
fkooman/oauth-client
to 6.0.0 - update LDAP authentication configuration examples
- support LDAP authentication
- support disabling compression
- support PHPUnit 6
- update to
fkooman/oauth2-server
2.0 (CHANGES) - allow updating branding/style using
styleName
configuration option
- update documentation, recommend against jail breaking / rooting
- federated identity issuer can also contain numbers
- support PHP 7.2 (sodium)
- refactor binary scripts
- update iOS documentation, mention seamless tunnel
- update Linux documentation, mention various tested distributions
- add Danish translation (provided by Tangui Coulouarn)
- update Documentation page (remove screenshot, 2FA updates)
- only have English as UI language by default as we have multiple languages supported now, it does not make sense to favor Dutch
- API call
user_info
also exposestwo_factor_enrolled_with
now to show which 2FA methods the user is enrolled for
- show "display name" of OAuth client instead of "client id" on the account page (issue #75)
- change session name to SID to get rid of explicit Domain binding;
- update session handling:
- (BUG) session cookie MUST expire at end of user agent session;
- do not explicitly specify domain for cookie, this makes the browser bind the cookie to actual domain and path;
- update
fkooman/secookie
- update default config file, no effect for deployed instances:
- set OAuth access token expiry to 1 hour
- remove old Android app as OAuth client
- remove incomplete
de_DE
andfr_FR
translations for now - update configuration template
- new default discovery URL
- disable eduvpn.tuxed.net client by default
- initial release