v0.21.2

Also adding 'schemas' to the NPM package.

v0.21.1

Added missing .env.defaults file to NPM package. This is required for npx @curveball/a12n-server to work.

v0.21.0

• New! Start a fresh a12nserver just by running npx @curveball/a12n-server
• #412: Fixed a few more PostgreSQL bugs (@AminDhouib)
• #407: Users can be added to groups again with their relative URI (@AminDhouib)
• #399: When trying to add a new OAuth2 client with an existing client_id,
  the server will now emit a 409 instead of a 500 error. (@AminDhouib)
• The requirePkce flag was not respected when creating a new OAuth2 client.

v0.20.4

• #397: Add REDIS_PASSWORD environment variable to support password-protected redis servers. (@mihok)
• #398: Allow the HTTP/1.1 KeepAlive timeout to be configured using the KEEP_ALIVE_TIMEOUT_MS environment variable. (@pschwyter)
• #400: Fix bug in the 'create app' form.
• #402: Add form for editing settings on OAuth2 clients.
• #401: Add schemas for user, app and group endpoints.

v0.20.3

0.20 is here, bringing a number of improvements and changes. This version is alpha, which means that some things might still change before the final release. You're encouraged to test this out, but it's not yet ready for production.

Change since last Alpha release

• Fix: Remove broken settings from the read-only settings page.

Changes since 0.19

• Now requires Node 16.
• Postgres support! (@mihok)
• Experimental sqlite support.
• Migrated all database access to Knex.
• Database migrations are now automatically run on startup, making upgrades a lot easier.
• Support for the /.well-known/jwks.json endpoint, allowing clients to discover JWT public keys.
• OAuth2 secrets are now prefixed with the secret-token: uri scheme, allowing github and other systems to detect possible commits of secret data.
• A new settings panel for admins, allowing admins to see exactly which settings have been applied. This is currently read-only.
• .env.defaults is no longer automatically loaded. The file still exists but its only purpose is to provide a template for developers to copy to .env.
• Updated 'create group' and 'create app' forms to be simpler.
• Show the public url when starting the server instead of just the TCP port.
• #382: Fix buggy email layout.
• Automatically open a debug connection on port 9339 when running with
  make start-dev. (@pschwyter)

v0.20.2

0.20 is here, bringing a number of improvements and changes. This version is alpha, which means that some things might still change before the final release. You're encouraged to test this out, but it's not yet ready for production.

Change since last Alpha release

• Fix: Parsing HTTP Basic header containing a : in the password. This is
  heavily used in server-to-server oauth2 flows. (@pschwyter)
• Automatically open a debug connection on port 9339 when running with
  make start-dev. (@pschwyter)

🛳️ Ahoi from Halifax! 🛳️

Changes since 0.19

• Now requires Node 16.
• Postgres support! (@mihok)
• Experimental sqlite support.
• Migrated all database access to Knex.
• Database migrations are now automatically run on startup, making upgrades a lot easier.
• Support for the /.well-known/jwks.json endpoint, allowing clients to discover JWT public keys.
• OAuth2 secrets are now prefixed with the secret-token: uri scheme, allowing github and other systems to detect possible commits of secret data.
• A new settings panel for admins, allowing admins to see exactly which settings have been applied. This is currently read-only.
• .env.defaults is no longer automatically loaded. The file still exists but its only purpose is to provide a template for developers to copy to .env.
• Updated 'create group' and 'create app' forms to be simpler.
• Show the public url when starting the server instead of just the TCP port.
• #382: Fix buggy email layout.
• Automatically open a debug connection on port 9339 when running with
  make start-dev. (@pschwyter)

v0.20.1

0.20 is here, bringing a number of improvements and changes. This version is alpha, which means that some things might still change before the final release. You're encouraged to test this out, but it's not yet ready for production.

Change since last Alpha release

• MYSQL_PORT and MYSQL_HOST were ignored. These settings now exist for backwards compatibility, but the backwards compatibility settings had a bug.

Changes since 0.19

• Now requires Node 16.
• Postgres support! (@mihok)
• Experimental sqlite support.
• Migrated all database access to Knex.
• Database migrations are now automatically run on startup, making upgrades a lot easier.
• Support for the /.well-known/jwks.json endpoint, allowing clients to discover JWT public keys.
• OAuth2 secrets are now prefixed with the secret-token: uri scheme, allowing github and other systems to detect possible commits of secret data.
• A new settings panel for admins, allowing admins to see exactly which settings have been applied. This is currently read-only.
• .env.defaults is no longer automatically loaded. The file still exists but its only purpose is to provide a template for developers to copy to .env.
• Updated 'create group' and 'create app' forms to be simpler.
• Show the public url when starting the server instead of just the TCP port.
• #382: Fix buggy email layout.

v0.20.0 - alpha

0.20 is here, bringing a number of improvements and changes. This version is alpha, which means that some things might still change before the final release. You're encouraged to test this out, but it's not yet ready for production.

• Now requires Node 16.
• Postgres support! (@mihok)
• Experimental sqlite support.
• Migrated all database access to Knex.
• Database migrations are now automatically run on startup, making upgrades a lot easier.
• Support for the /.well-known/jwks.json endpoint, allowing clients to discover JWT public keys.
• OAuth2 secrets are now prefixed with the secret-token: uri scheme, allowing github and other systems to detect possible commits of secret data.
• A new settings panel for admins, allowing admins to see exactly which settings have been applied. This is currently read-only.
• .env.defaults is no longer automatically loaded. The file still exists but its only purpose is to provide a template for developers to copy to .env.
• Updated 'create group' and 'create app' forms to be simpler.
• Show the public url when starting the server instead of just the TCP port.
• #382: Fix buggy email layout.

v0.19.12

This release reinstates the v0.19.10 changes after @curveball/browser received an updated logo.

Updates included:

• Add app logo to login, registration, lost-password pages.
• The 'Change password' form now lives on /change-password instead of /changepassword for consistency with other routes.
• Small fixes (Bad Gateway copyright notice, copy changes + new cancel button on reset password page).
• Update dependencies.

v0.19.11

• This release rolls back the 'app logo' feature. The default setting had cosmetic bugs.