CHANGELOG.md

# Changelog

## Unreleased

- Allow enforcing 2fa.
- Fix logout to include hydra post-logout.

## [0.8.3]

- Introduce backend code for resetting 2FA, and add cli command for that.
- Upgrade Kratos api library `ory-kratos-client` to 1.0.0.
- Patch our usage of Kratos api pagination of identities list.

## [0.8.2]

- End the Kratos session in prelogout. This makes sure that we end the "SSO
  session" also when logging out from an app. We used to rely on hydra's
  post-logout url to get at the kratos logout, but apps sometimes override that
  url via an oidc parameter.

## [0.8.1]

- Add a couple of attributes to our OIDC tokens to support our switch to
  another Nextcloud app for OIDC.

## [0.8.0]

- Add feature to easily edit app permissions for multiple users at once.
- Change the way secrets are created for apps, creating them in the stackspin
  project (using an existing secrets controller). So remove support for
  generating app secrets in the dashboard.
- Fix password reset when 2FA is enabled.
- Fix bug that all Wekan users get admin permissions in Wekan regardless of
  role set in Stackspin.
- Enable "pre-ping" for all database connections managed by sqlalchemy in the
  dashboard backend, hoping to eliminate or reduce dropped database
  connections.
- Fix listing of Velero in app permissions when batch-creating users.

## [0.7.6]

- Add Forgejo metadata for use as custom app.

## [0.7.5]

- Add Jitsi and Mattermost metadata for use as custom apps.

## [0.7.4]

- Make the sign-in UI less wide.

## [0.7.3]

Only changes to the helm chart.

## [0.7.2]

- Apply Stackspin styling to the login component. This covers the login pages,
  recovery page, and profile/authentication settings.

## [0.7.1]

- Load the flask_migrate flask extension in dev/cli mode so we may run `flask
  db` commands from the cli again.

## [0.7.0]

- Improve the UX of the dashboard tiles: adding help texts in modals, add a
  status dropdown with version info, add alerts before and after automatic
  upgrades, show greeting, show tag when logged in as admin user.
- Make sure we run the initialisation code in the backend only once per run,
  both in development and production mode. Also, do not run the init code on
  flask cli runs.
- Remember the active tab in the authentication settings when saving.
- No longer send emails to addresses that do not match an existing account.
  This was fixed by upgrading Kratos; we're happy to see that the default
  Kratos behaviour was changed in this regard.

## [0.6.7]

Only changes to the helm chart.

## [0.6.6]

Only changes to the helm chart.

## [0.6.5]

- Further improve (error) message handling. In particular, show feedback when
  saving profile settings. Some of the previous error message changes have been
  reverted pending further consideration of the design.
- Disable changing the email address as this is not supported right now.

## [0.6.4]

- Fix error messages that were not shown, in particular when providing wrong
  credentials when logging in. We redesigned the error handling, considering
  that these messages may be translated later on.

## [0.6.3]

- Add support for Hedgedoc.
- Add a button for admins for creating a recovery link for a user.
- Automatically log in to dashboard if already authenticated.
- Redirect to dashboard if not redirect login is set, on successful login.
- Fix deletion of apps via the CLI.
- Add special features (sign-up form) for the Stackspin demo instance.
- Show the user UUID in user modal.
- Only show installed apps when configuring roles.

## [0.6.2]

- Fix submit button label in the form for verifying your TOTP code.

## [0.6.1]

- Add TOTP as second factor authentication. Please note that you'll need to set
  a `backend.dashboardUrl` value instead of the old `backend.loginPanelUrl` one
  -- typically dropping the `/web` suffix to get the new value.
- Create a new backend endpoint for providing some environment variables to the
  frontend, with the URLs of the Kratos and Hydra APIs.

## [0.6.0]

- Make it easier to add apps, by reading apps and oauthclients from configmaps
  at startup.
- Reset alembic migration history.

## [0.5.2]

- Fix login welcome message
- Clarify "set new password" button (#94)
- Show error messages when login fails, for example when a wrong password was
  entered (#96)
- Fix access checking for monitoring (#105)

## [0.5.1]

- Fix bug of missing "Monitoring" app access when creating a new user.
- Add Velero to the list of installable apps, but hide it from the dashboard

## [0.5.0]

- Merge dashboard-backend repository into this repository, released as 0.5.0