Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog.

Unreleased ....

0.6.1 - 2023-08-31

FIXED

#359 - fix: harden subdomain validation

0.6.0 - 2023-07-27

Changed

#353 - Always return an int from Symfony Command execute method
Minimum core version 10.11, minimum php version 7.4
Download URL string changes
Bump libraries

0.5.3 - 2022-06-02

Fixed

#327 - Use userid on api calls, show username in login form
#331 - Add missing token index
#337 - Don't require client secret when using PKCE

Changed

#328 - Fill login_hint with username

0.5.2 - 2021-11-02

#313 - Add occ oauth2:list command
#315 - Sanitize output of command oauth2:list-clients
#314 - Add occ oauth2:modify-client command

0.5.1 - 2021-10-05

Fixed

Fix user lookup in authmodule #307

0.5.0 - 2020-08-16

Added

Add support for trusted clients #298
Support setups with user login name != internal UID #286
Implement the oauth2 pkce extension #276

Changed

Return proper error description for auth-core/refresh-token errors #279
Adjust PHP dependencies for composer 2.0 #273

0.4.4 - 2020-03-03

Fixed

No exception in case the token is unknown and the openid connect app is enabled - #255

0.4.3 - 2019-12-20

Changed

Improve adding a new client - #237
Drop PHP Support 7.0 - #238

0.4.2 - 2019-11-21

Changed

Handle refresh token of a disabled user - #225
Use a WHATWG URL spec compliant URL parser - see https://url.spec.wha… - #229
Remove back button from error page, add logging and return proper err… - #220
Check user status - #209

0.4.1 - 2019-05-15

Fixed

The redirect_uri needs to be encoded in the logout url - #197

0.4.0 - 2019-02-13

Added

Display currently logged in user display name in authorization page - #188
Added option for switching user in authorization page - #188

0.3.0 - 2018-12-07

Added

Added autofocus to buttons - #173
Add occ oauth2:remove-client to remove a client by its id - #178
Support for PHP 7.1 and 7.2 - #161
Support for implicit grant - #166

Changed

Set max version to 10 because core platform is switching to Semver - #180

Fixed

Don't fail if the client was already added - #176
Use markdown properly in description - #153

0.2.3 - 2018-08-09

Fixed

Erroneous ownCloud 2.4.2 client behavior causing service interruptions #145
Initialization for password-less sessions #129

0.2.2

Added

OpenID Connect UserInfo endpoint #115

Fixed

Expired token causing server failures #118

0.2.1 - 2017-11-28

Fixed

OAuth app blocking public uploads #100

0.2.0 - 2017-10-13

Added

Oracle and 4-byte MySQL support - #42
Predefined client ids for mobile and desktop clients - #38

Changed

Allow multiple tokens per client - #65

Fixed

Security Hardening - #71
Verify Bearer token even if the session is still valid - #53
Use displayname on switch user screen - #90