CHANGELOG.md

# Changelog

## 0.11.1

- Fix password reset form in case no email address is pre-filled.

## 0.11.0

- Allow pre-filling user's email address in a link to the password (re)set
  form. This is useful when creating new user accounts.
- Fix user provisioning after installing new apps.

## 0.10.5

- Look up users from Kratos by email address using the proper (new) API
  mechanism for that, instead of iterating over all users.
- Compare email addresses case insensitively to deal with Stackspin apps
  changing case of email address strings.
- Fix broken user accounts when created via the flask CLI.
- Replace slightly off-spec usage of `__repr__` by `__str__`.

## 0.10.4

- Disable Zulip accounts when deleting users, because Zulip doesn't allow
  deleting accounts via SCIM.

## 0.10.3

- Fix setting successful provisioning status.

## 0.10.2

- Fine-tune logging levels, and introduce a new environment variable
  `LOG_LEVEL` to set the log level at runtime.
- Track when a user's full name has been changed, and only include the name in
  the SCIM provisioning call when it has changed, or for newly provisioned
  users.

## 0.10.1

- Watch dashboard configmaps with lists of apps and oauthclients, and
  reload config on changes. This also makes sure that we always load the config
  at dashboard start-up, even when there are no (SCIM-supporting) apps
  installed.

## 0.10.0

- Include new "System resources" module with basic stats.
- Implement basic (manual/static) SCIM functionality for automatic user provisioning.
- Implement dynamic (i.e., arbitrary apps) SCIM functionality, tested and
  tailored for Nextcloud and Zulip.
- Upgrade to tailwind v3, and update several other javascript dependencies.
- Make info modals slightly wider, to make sure you can see the full contents
  also for slightly larger fonts. In particular, this fixes a partially
  invisible reset link.
- Add a CLI command for deleting older unused accounts.
- Add logo for Gitea.

## 0.9.2

- Fix saving user properties, which was broken because of the partial tags
  implementation.

## 0.9.1

- Do not autocomplete totp input field.
- Allow removing user app roles from CLI.

## 0.9.0

- Improve user listing: show label for admin users, show last login and
  password reset times, improved layout.
- Fix rare bug in frontend's idea of admin status in the face of custom apps.
- Prepare backend for user tags.

## 0.8.4

- Allow enforcing 2fa.
- Add button for admin users to reset 2FA of users. Also improve UX of this and
  other dangerous operations in the user edit screen.
- Fix logout to include hydra post-logout.
- Do not show link to recovery on TOTP form.
- Fix css of demo sign-up.
- Upgrade to python 3.12.

## 0.8.3

- Introduce backend code for resetting 2FA, and add cli command for that.
- Upgrade Kratos api library `ory-kratos-client` to 1.0.0.
- Patch our usage of Kratos api pagination of identities list.

## 0.8.2

- End the Kratos session in prelogout. This makes sure that we end the "SSO
  session" also when logging out from an app. We used to rely on hydra's
  post-logout url to get at the kratos logout, but apps sometimes override that
  url via an oidc parameter.

## 0.8.1

- Add a couple of attributes to our OIDC tokens to support our switch to
  another Nextcloud app for OIDC.

## 0.8.0

- Add feature to easily edit app permissions for multiple users at once.
- Change the way secrets are created for apps, creating them in the stackspin
  project (using an existing secrets controller). So remove support for
  generating app secrets in the dashboard.
- Fix password reset when 2FA is enabled.
- Fix bug that all Wekan users get admin permissions in Wekan regardless of
  role set in Stackspin.
- Enable "pre-ping" for all database connections managed by sqlalchemy in the
  dashboard backend, hoping to eliminate or reduce dropped database
  connections.
- Fix listing of Velero in app permissions when batch-creating users.

## 0.7.6

- Add Forgejo metadata for use as custom app.

## 0.7.5

- Add Jitsi and Mattermost metadata for use as custom apps.

## 0.7.4

- Make the sign-in UI less wide.

## 0.7.3

Only changes to the helm chart.

## 0.7.2

- Apply Stackspin styling to the login component. This covers the login pages,
  recovery page, and profile/authentication settings.

## 0.7.1

- Load the flask_migrate flask extension in dev/cli mode so we may run `flask
  db` commands from the cli again.

## 0.7.0

- Improve the UX of the dashboard tiles: adding help texts in modals, add a
  status dropdown with version info, add alerts before and after automatic
  upgrades, show greeting, show tag when logged in as admin user.
- Make sure we run the initialisation code in the backend only once per run,
  both in development and production mode. Also, do not run the init code on
  flask cli runs.
- Remember the active tab in the authentication settings when saving.
- No longer send emails to addresses that do not match an existing account.
  This was fixed by upgrading Kratos; we're happy to see that the default
  Kratos behaviour was changed in this regard.

## 0.6.7

Only changes to the helm chart.

## 0.6.6

Only changes to the helm chart.

## 0.6.5

- Further improve (error) message handling. In particular, show feedback when
  saving profile settings. Some of the previous error message changes have been
  reverted pending further consideration of the design.
- Disable changing the email address as this is not supported right now.

## 0.6.4

- Fix error messages that were not shown, in particular when providing wrong
  credentials when logging in. We redesigned the error handling, considering
  that these messages may be translated later on.

## 0.6.3

- Add support for Hedgedoc.
- Add a button for admins for creating a recovery link for a user.
- Automatically log in to dashboard if already authenticated.
- Redirect to dashboard if not redirect login is set, on successful login.
- Fix deletion of apps via the CLI.
- Add special features (sign-up form) for the Stackspin demo instance.
- Show the user UUID in user modal.
- Only show installed apps when configuring roles.

## 0.6.2

- Fix submit button label in the form for verifying your TOTP code.

## 0.6.1

- Add TOTP as second factor authentication. Please note that you'll need to set
  a `backend.dashboardUrl` value instead of the old `backend.loginPanelUrl` one
  -- typically dropping the `/web` suffix to get the new value.
- Create a new backend endpoint for providing some environment variables to the
  frontend, with the URLs of the Kratos and Hydra APIs.

## 0.6.0

- Make it easier to add apps, by reading apps and oauthclients from configmaps
  at startup.
- Reset alembic migration history.

## 0.5.2

- Fix login welcome message
- Clarify "set new password" button (#94)
- Show error messages when login fails, for example when a wrong password was
  entered (#96)
- Fix access checking for monitoring (#105)

## 0.5.1

- Fix bug of missing "Monitoring" app access when creating a new user.
- Add Velero to the list of installable apps, but hide it from the dashboard

## 0.5.0

- Merge dashboard-backend repository into this repository, released as 0.5.0