CHANGELOG.rst

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

Unreleased

Fixed

• Small files could fail to upload to S3 storage due to MemoryFileUploadHandler

`2.3`_ – 2021-12-15

Added

• [OAuth] Allow apps to fill in their own claim data matching their scopes

Fixed

• View for assigning permissions didn't work with some global permissions.
• PDFs generated in background didn't contain logo or site title.
• Admins were redirected to their user preferences while they wanted to edit the preferences of another user.
• Some CharFields were using NULL values in database when field is empty
• Optional dependecy sentry-sdk was not optional

Changed

• Docker base image ships PostgreSQL 14 client binaries for maximum compatibility
• Docker base image contains Sentry client by default (disabled in config by default)

Removed

• Remove impersonation page. Use the impersonation button on the person detail view instead.

`2.2.1`_ – 2021-12-02

Fixed

• [Docker] Stop initialisation if migrations fail
• [OAuth] Register groups scope and fix claim
• [OAuth] Fix OAuth claims for follow-up requests (e.g. UserInfo)
• [OAuth] Fix grant types checking failing on wrong types under some circumstances
• [OAuth] Re-introduce missing algorithm field in application form
• Remove errornous backup folder check for S3

2.2 - 2021-11-29

Added

• Support config files in sub-directories
• Provide views for assigning/managing permissions in frontend
• Support (icon) tabs in the top navbar.

Changed

• Update German translations.

Fixed

• Use new MaterializeCSS fork because the old version is no longer maintained.
• Sender wasn't displayed for notifications on dashboard.
• Notifications and activities on dashboard weren't sorted from old to new.

2.1.1 - 2021-11-14

Added

• Provide SITE_PREFERENCES template variable for easier and request-independent access on all site preferences.

Fixed

• Make style.css and favicons cachable.
• Import model extensions from other apps before form extensions.
• Recreate backwards compatiblity for OAuth URLs by using oauth/ again.
• Show correct logo and school title in print template if created in the background.

Removed

• Remove fallback code from optional Celery as it's now non-optional.

2.1 - 2021-11-05

Added

• Provide an ExtensiblePolymorphicModel to support the features of extensible models for polymorphic models and vice-versa.
• Implement optional Sentry integration for error and performance tracing.
• Option to limit allowed scopes per application, including mixin to enforce that limit on OAuth resource views
• Support trusted OAuth applications that leave out the authorisation screen.
• Add birthplace to Person model.

Changed

• Replace dev.sh helper script with tox environments.
• OAuth Grant Flows are now configured system-wide instead of per app.
• Refactor OAuth2 application management views.

Fixed

• Fix default admin contacts

Credits

• We welcome new contributor 🐧 Jonathan Krüger!
• We welcome new contributor 🐭 Lukas Weichelt!

2.0 - 2021-10-29

Changed

• Refactor views/forms for creating/editing persons.

Fixed

• Fix order of submit buttons in login form and restructure login template to make 2FA work correctly.
• Fix page title bug on the impersonate page.
• Users were able to edit the linked user if self-editing was activated.
• Users weren't able to edit the allowed fields although they were configured correctly.
• Provide style.css and icon files without any authentication to avoid caching issues.

Removed

• Remove mass linking of persons to accounts, bevcause the view had performance issues, but was practically unused.

2.0rc7 - 2021-10-18

Fixed

• Configuration mechanisms for OpenID Connect were broken.
• Set a fixed version for django-sass-processor to avoid a bug with searching style.css in the wrong storage.
• Correct the z-index of the navbar to display the main title again on mobile devices.

Removed

• Leftovers from a functionality already dropped in the development process (custom authentication backends and alternative login views).

2.0rc6 - 2021-10-11

Added

• OpenID Connect scope and accompanying claim groups
• Support config files in JSON format
• Allow apps to dynamically generate OAuth scopes

Changed

• Do not log or e-mail ALLOWED_HOSTS violations
• Update translations.
• Use initial superuser settings as default contact and from addresses

Fixed

• Show link to imprint in footer
• Fix API for adding OAuth scopes in AppConfigs
• Deleting persons is possible again.
• Removed wrong changelog section

Removed

• Dropped data anonymization (django-hattori) support for now
• OAUTH2_SCOPES setting in apps is not supported anymore. Use get_all_scopes method on AppConfig class instead.

2.0rc5 - 2021-08-25

Fixed

• The view for getting the progress of celery tasks didn't respect that there can be anonymous users.
• Updated django to latest 3.2.x

2.0rc4 - 2021-08-01

Added

• Allow to configure port for prometheus metrics endpoint.

Fixed

• Correctly deliver server errors to user
• Use text HTTP response for serviceworker.js insteas of binary stream
• Use Django permission instead of rule to prevent performance issues.

2.0rc3 - 2021-07-26

Added

• Support PDF generation without available request object (started completely from background).
• Display a loading animation while fetching search results in the sidebar.

Fixed

• Make search suggestions selectable using the arrow keys.

Fixed

• Use correct HTML 5 elements for the search frontend and fix CSS accordingly.

2.0rc2 - 2021-06-24

Added

• Allow to install system and build dependencies in docker build

2.0rc1 - 2021-06-23

Added

• Add option to disable dashboard auto updating as a user and sitewide.

Changed

• Use semantically correct html elements for headings and alerts.