Skip to main content

8.15 Auth

Features​

  • auth-config : Enable support for GPAL auth perms by default in auth-processes.xml
  • pbc-auth-ui : Support overriding design system prefix
  • pbc-auth-ui : Make one-time password field required

Fixes​

  • auth-manager : Add custom pbc implementation without hardcoded counterparty AUTH-431
  • auth-manager : Fix connection contention in user session check
  • auth-oidc : Use RandomStringUtils from Apache Commons Lang3 instead of Apache Commons Lang given it is not available anymore due to the Apache Commons Configuration upgrade in GSF
  • auth-oidc : Use lastIndexOf to extract idp from state parameter
  • Handle multiple cases in the refresh token cookie for terms and conditions web endpoints
  • Move PKCE code verifier store to the database
  • Remove USER_NAME header requirement from terms and conditions endpoints as it doesn't work with external proxy devices
  • Use TLS for user connection if useTls set
  • pbc-auth-ui : Increase maxRows limit for right codes

Dependency changes​

  • Remove hardcoded constraints on commons lang, commons config and commons codec
  • Bump com.auth0:java-jwt from 4.4.0 to 4.5.0
  • Bump com.auth0:jwks-rsa from 0.22.1 to 0.23.0
  • Bump com.unboundid:unboundid-ldapsdk from 7.0.3 to 7.0.4
  • Bump jjwtVersion from 0.12.6 to 0.13.0
  • Bump org.gradle.test-retry from 1.6.2 to 1.6.4

Patch releases​

8.15.10​

Features​
  • auth : Expose notify-based MFA status on ALL_USERS
Fixes​
  • auth : Only send a notify MFA code when the user asks for one
  • USER_PROFILE_AMEND event fix for right consolidation

8.15.9​

Fixes​
  • auth-manager : read product details per LoginProcessor instance
  • auth-manager : separate password validation prefix from errors
  • auth-saml : pin SAML Destination validation to configured ACS URL

8.15.8​

Fixes​
  • Bump seed-utils to 15.6.2 to unblock FoundationUI 15 apps

8.15.7​

Features​
  • auth : Add events to toggle notify-based MFA
Fixes​
  • Add icons to pbc routes

8.15.6​

Features​
  • auth : Support numeric one-time codes for notify-based MFA

8.15.5​

Breaking changes​
  • auth-sso-endpoint : Implement private_key_JWT authentication for OIDC when SSO is enabled

8.15.4​

Features​
  • Implement private_key_JWT authentication for OIDC when SSO is enabled (AUTH-457)
Dependency changes​
  • Add JFrog dev-repo to Gradle configs to mitigate Maven Central throttling (GSF-007)

8.15.3​

Fixes​
  • Resolve version from the first @genesislcap/* dependency
Dependency changes​
  • Bump WireMock from wiremock-jre8:3.0.1 to wiremock-jetty12:3.13.2
  • Bump genesisVersion from 8.15.0 to 8.15.14

8.15.2​

  • This release was unintentionally published during our deployment process. It contains no new features, bug fixes, or changes from the previous version. Please use the latest patch release for this minor version.

8.15.1​

  • This release was unintentionally published during our deployment process. It contains no new features, bug fixes, or changes from the previous version. Please use the latest patch release for this minor version.