CHANGELOG.rst



To find the state of this project's repository at the time of any of these versions, check out the tags.


Changelog
All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog,
and this project adheres to Semantic Versioning.

Unreleased

Added

Add option to open entry in new tab for sidebar navigation menu.
Add preference for configuring the default phone number country code.
Persons and groups now have two image fields: official photo and public avatar
Admins recieve an mail for celery tasks with status "FAILURE"
OpenID Connect RSA keys can now be passed as string in config files
Views filtering for person names now also search the username of a linked user
OAuth2 applications now take an icon which is shown in the authorization progress.
Add support for hiding the main side nav in base.html.


Fixed

Changing the favicon did not result in all icons being replaced in some cases
GroupManager.get_queryset() returned an incomplete QuerySet
OAuth was broken by a non-semver-adhering django-oauth-toolkit update
Too long texts in chips didn't result in a larger chip.
The Person model had an is_active flag that was used in unclear ways; it is now removed
The data check results list view didn't work if a related object had been deleted in the meanwhile.
Socialaccount login template was not overriden


Changed

Configuration files are now deep merged by default
Improvements for shell_plus module loading
core.Group model now takes precedence over auth.Group
Name collisions are resolved by prefixing with the app label
Apps can extend SHELL_PLUS_APP_PREFIXES and SHELL_PLUS_DONT_LOAD


[Docker] Base image now contains curl, grep, less, sed, and pspg
Views raising a 404 error can now customise the message that is displayed on the error page
OpenID Connect is enabled by default now, without RSA support
Login and authorization pages for OAuth2/OpenID Connect now indicate that the user is in progress
to authorize an external application.
Tables can be scrolled horizontally.
Overhauled person detail page


2.5 – 2022-01-02

Added

Recursive helper methods for group hierarchies


Fixed

Remove left-over reference to preferences in a form definition that caused
form extensions in downstream apps to break
Allow non-LDAP users to authenticate if LDAP is used with password handling
Additional button on progress page for background tasks was shown even if the task failed.
Register preference for available allowed oauth grants.


2.4 – 2021-12-24

Added

Allow configuration of database options
User invitations with invite codes and targeted invites for existing
persons


Fixed

Correctly update theme colours on change again
Use correct favicon as default AlekSIS favicon
Show all years in a 200 year range around the current year in date pickers
Imprint is now called "Imprint" and not "Impress".
Logo files weren't uploaded to public namespace.
Limit LDAP network timeouts to not hang indefinitely on login if LDAP
server is unreachable


Changed

Modified the appearance of tables for mobile users to be more user friendly
[Dev] Remove lock file; locking dependencies is the distribution's
responsibility


Removed

Remove old generated AlekSIS icons


2.3.1 – 2021-12-17
Fixed

Small files could fail to upload to S3 storage due to MemoryFileUploadHandler
Corrected typos in previous changelog


2.3 – 2021-12-15

Added

[OAuth] Allow apps to fill in their own claim data matching their scopes


Fixed

View for assigning permissions didn't work with some global permissions.
PDFs generated in background didn't contain logo or site title.
Admins were redirected to their user preferences
while they wanted to edit the preferences of another user.
Some CharFields were using NULL values in database when field is empty
Optional dependecy sentry-sdk was not optional


Changed

Docker base image ships PostgreSQL 14 client binaries for maximum compatibility
Docker base image contains Sentry client by default (disabled in config by default)


Removed

Remove impersonation page. Use the impersonation button on the person
detail view instead.


2.2.1 – 2021-12-02
Fixed

[Docker] Stop initialisation if migrations fail
[OAuth] Register groups scope and fix claim
[OAuth] Fix OAuth claims for follow-up requests (e.g. UserInfo)
[OAuth] Fix grant types checking failing on wrong types under some circumstances
[OAuth] Re-introduce missing algorithm field in application form
Remove errornous backup folder check for S3


2.2 - 2021-11-29

Added

Support config files in sub-directories
Provide views for assigning/managing permissions in frontend
Support (icon) tabs in the top navbar.


Changed

Update German translations.


Fixed

Use new MaterializeCSS fork because the old version is no longer maintained.
Sender wasn't displayed for notifications on dashboard.
Notifications and activities on dashboard weren't sorted from old to new.


2.1.1 - 2021-11-14

Added

Provide SITE_PREFERENCES template variable for easier and request-independent access on all site preferences.


Fixed

Make style.css and favicons cachable.
Import model extensions from other apps before form extensions.
Recreate backwards compatiblity for OAuth URLs by using oauth/ again.
Show correct logo and school title in print template if created in the background.


Removed

Remove fallback code from optional Celery as it's now non-optional.


2.1 - 2021-11-05

Added

Provide an ExtensiblePolymorphicModel to support the features of extensible models for polymorphic models and vice-versa.
Implement optional Sentry integration for error and performance tracing.
Option to limit allowed scopes per application, including mixin to enforce that limit on OAuth resource views
Support trusted OAuth applications that leave out the authorisation screen.
Add birthplace to Person model.


Changed

Replace dev.sh helper script with tox environments.
OAuth Grant Flows are now configured system-wide instead of per app.
Refactor OAuth2 application management views.


Fixed

Fix default admin contacts


Credits

We welcome new contributor 🐧 Jonathan Krüger!
We welcome new contributor 🐭 Lukas Weichelt!


2.0 - 2021-10-29

Changed

Refactor views/forms for creating/editing persons.


Fixed

Fix order of submit buttons in login form and restructure login template
to make 2FA work correctly.
Fix page title bug on the impersonate page.
Users were able to edit the linked user if self-editing was activated.
Users weren't able to edit the allowed fields although they were configured correctly.
Provide style.css and icon files without any authentication to avoid caching issues.


Removed

Remove mass linking of persons to accounts, bevcause the view had performance issues,
but was practically unused.


2.0rc7 - 2021-10-18

Fixed

Configuration mechanisms for OpenID Connect were broken.
Set a fixed version for django-sass-processor to avoid a bug with searching style.css in the wrong storage.
Correct the z-index of the navbar to display the main title again on mobile devices.


Removed

Leftovers from a functionality already dropped in the development process
(custom authentication backends and alternative login views).


2.0rc6 - 2021-10-11

Added

OpenID Connect scope and accompanying claim groups

Support config files in JSON format
Allow apps to dynamically generate OAuth scopes


Changed

Do not log or e-mail ALLOWED_HOSTS violations
Update translations.
Use initial superuser settings as default contact and from addresses


Fixed

Show link to imprint in footer
Fix API for adding OAuth scopes in AppConfigs
Deleting persons is possible again.
Removed wrong changelog section


Removed

Dropped data anonymization (django-hattori) support for now

OAUTH2_SCOPES setting in apps is not supported anymore. Use get_all_scopes method
on AppConfig class instead.


2.0rc5 - 2021-08-25
Fixed

The view for getting the progress of celery tasks didn't respect that there can be anonymous users.
Updated django to latest 3.2.x


2.0rc4 - 2021-08-01

Added

Allow to configure port for prometheus metrics endpoint.


Fixed

Correctly deliver server errors to user
Use text HTTP response for serviceworker.js insteas of binary stream
Use Django permission instead of rule to prevent performance issues.