OSIAM 2.1

Changelog

addon-self-administration 1.4 - 2015-05-11

Features

This is a full feature set to handle the expiration of all tokens. For more
information have a look at the configuration.

• expiration of one time passwords
• expiration of confirmation tokens
• expiration of activation tokens
• scavenge expired tokens

Changes

• use latest plugin api release: Version 1.3.2
• switch to latest connector release: Version 1.4
• bump dependencies and cleanup pom
• move documentation from wiki to repo

Fixes

• handle missing extension field gracefully
• client database id may lead to problems with other clients

OSIAM 2.0

Changelog

Breaking changes!

resource-server 2.0, auth-server 2.0 - 2015-04-29

This release introduces breaking changes, due to the introduction of automatic database schema updates powered by Flyway. See the migration notes for further details.

Features

• Support automatic database migrations
• create JAR containing the classes of app

Fixes

• lower constraint index lengths for MySQL
• replace Windows line endings with Unix ones in SQL scripts

Changes

• decrease default verbosity
• bump dependency versions
• move documentation from Wiki to repo
• rename file RELEASE.NOTES to CHANGELOG.md

OSIAM Release 1.3.1

Deb packages (Work in progress)

For your convenience we now provide deb packages of the OSIAM server, addon-self-administration and addon-administration modules. To install, download the files, open a console and enter:

sudo dpkg -i osiam-auth-server_1.3.1_all.deb osiam-addon-administration_1.3.1_all.deb osiam-resource-server_1.3.1_all.deb osiam-addon-self-administration_1.3.1_all.deb osiam-common_1.3.1_all.deb

CHANGES

distribution - 1.3.1

• included smancke's work on deb packages

addon-self-administration - 1.3.1 - 2014-10-27

• [fix] using the already in scim-schema defined email validation (osiam/addon-self-administration#61)
• [fix] fixed passwords-not-equal error-message response (osiam/addon-self-administration#74)
• [fix] return forbidden, if you try to change the password more than one time (osiam/addon-self-administration#63)
• [refactoring] revert the escaping for register a new user

OSIAM Release 1.3

osiam-distribution-1.3.zip contains the osiam-server, addon-self-administration and addon-administration binaries for the OSIAM 1.3 release.

Download osiam-distribution-1.3.zip and unzip. If you want to run OSIAM server, the addon-self-administration and the addon-administration, please have a look at the GitHub Wikis:
https://github.com/osiam/server/wiki
https://github.com/osiam/addon-self-administration/wiki
https://github.com/osiam/addon-administration/wiki

CHANGES

1.3 - 2014-10-17

OSIAM server

• [fix] Umlauts encoding problems
• [fix] Infinite recursion when filtering or sorting by x509certivicates.value
• [fix] Sorting by name sub-attribute breaks the result list
• [fix] Wrong directory name for translations

For a detailed description and migration see:
https://github.com/osiam/server/wiki/Migration#from-12-to-13

OSIAM addon-self-administration

• [fix] translation property files parsed as UTF-8
  Before this fix, the translation messages were parsed as ISO-8859-1
• [cleanup] cleanup logging handling in all controllers
  Before this cleanup JUL was used to log messages, now the slf4j logger will be used.
  The main concept is the following: When an error occurred which happen because of a
  bad request (e.g. missing authorization token) the message will be logged as warn,
  when it occurred because of an internal error (e.g. the mail server is not available
  or the requested template file is missing) the message will be logged as error.
• [fix] fixed osiam/addon-self-administration#63
  When the password reset was already done by the user a FORBIDDEN with an error
  description will be returned. Before an exception occurred and it wasn't caught,
  so an internal error/500 was returned with a servlet container specific HTML error
  page.
• [fix] fixed validation when register a user
  Before this fix, the validation wasn't working for the JSR-330 Bean Validation
  annotations, but only for the custom user validator. So an exception occurred when
  a malformed e-mail-address was send, which response with an internal error and a
  servlet container specific HTML error page. This fix switch to only JSR-330
  Bean Validation annotations and returns with an error message prepared HTML form.

OSIAM addon-administration

• [fix] Styling issues
• [enhancement] Groupname is shown in Edit-User-Membership view
• [enhancement] Username is shown in Edit-Group-Membership view
• [fix] Display of paging meta information
• [enhancement] Check the access token validity foreach request
• [fix] Saving primary flag for multi-value-attributes
  Before: Primary flag will not be saved, if you enter a display value or a new attribute.
  After: Now the primary flag will be saved correctly.
• [refactor] Sorting arrows
  One arrow with a link for ascending or descending depends on the current sort direction.
• [refactor] Unify all success and error messages for all pages

OSIAM Release 1.2

osiam-distribution-1.2.zip contains the osiam-server, addon-self-administration and addon-administration binaries for the OSIAM 1.2 release.

Download osiam-distribution-1.2.zip and unzip. If you want to run OSIAM server, the addon-self-administration and the addon-administration, please have a look at the GitHub Wikis:
https://github.com/osiam/server/wiki
https://github.com/osiam/addon-self-administration/wiki
https://github.com/osiam/addon-administration/wiki

CHANGES

1.2 - 2014-09-30

OSIAM server

• release because of fixes in addon-self-administration
• [feature] Introduced an interface to get the extension definitions (/osiam/extension-definition)

OSIAM addon-self-administration

• [feature] the users password can also changed by clients
  Before this feature, the password can only changed with the users access token.
  Now it's also possible to use the addon-self-administrations as an oauth client
  to change the password of a specified user.
• [fix] the plugin api don't need to be configured
  Before this fix, the system fails on startup, because the properties for the
  plugin api need to configured also if no plugin is provided

OSIAM addon-administration

• new page for add group to users
• new page for add user to groups
• revive the logout button

OSIAM Release 1.1

osiam-distribution-1.1.zip contains the osiam-server, addon-self-administration and addon-administration binaries for the OSIAM 1.1 release.

Download osiam-distribution-1.1.zip and unzip. If you want to run OSIAM server, the addon-self-administration and the addon-administration, please have a look at the GitHub Wikis:
https://github.com/osiam/server/wiki
https://github.com/osiam/addon-self-administration/wiki
https://github.com/osiam/addon-administration/wiki

CHANGES

1.1 - 2014-09-19

OSIAM server

• [feature] support for mysql as database
• [feature] prevent users from login after N failed attempts
• [feature] revocation of access tokens
  It is now possible to revoke access tokens by using the following service
  endpoints:
  • auth-server/token/revocation
    For revocation of the access token sent as bearer token in the
    Authorization header
  • auth-server/token/revocation/
    For revocation of all access tokens that were issued to or in behalf of a
    given user. This endpoint is protected.
• [feature] revoke all access tokens of a deactivated/deleted user
• [enhancement] Force UTF-8 encoding of requests and responses
• [enhancement] better error message on search
  When searching for resources and forgetting the surrounding double quotes for
  values, a non-understandable error message was responded. the error message
  was changed to explicitly tell that the error occurred due to missing
  double quotes.
• [enhancement] updated dependencies: Spring 4.1.0, Spring Security 3.2.5,
  Spring Metrics 3.0.2, Jackson 2.4.2, Hibernate 4.3.6, AspectJ 1.8.2,
  Joda Time 2.4, Joda Convert 1.7, Apache Commons Logging 1.2, Guava 18.0,
  Postgres JDBC Driver 9.3-1102-jdbc41

OSIAM addon-self-administration

• introduced the plugin-api: https://github.com/osiam/addon-self-administration-plugin-api
• introduced AccountManagement: Added account deletion and deactivation action
• added sql example script to import a client for the self-administration
• cleanup properties
• fixed BT-52: https://jira.osiam.org/browse/BT-52
• fixed BT-53: https://jira.osiam.org/browse/BT-53

OSIAM addon-administration

• first release of the addon-administration

OSIAM Release 1.0.2

osiam-distribution-1.0.2.zip contains the osiam-server and addon-self-administration binaries for the OSIAM 1.0.2 release.

Download osiam-distribution-1.0.2.zip and unzip. If you want to run OSIAM server, the addon-self-administration and the addon-administration, please have a look at the GitHub Wikis:
https://github.com/osiam/server/wiki
https://github.com/osiam/addon-self-administration/wiki

CHANGES

• [fix] memory leak in HttpClient library fixed

OSIAM Release 1.0

First official release of OSIAM!

osiam-distribution-1.0.zip contains the osiam-server and addon-self-administration binaries for the OSIAM 1.0 release.

Download osiam-distribution-1.0.zip and unzip. If you want to run OSIAM server and the addon-self-administration, please have a look at the GitHub Wikis:
https://github.com/osiam/server/wiki
https://github.com/osiam/addon-self-administration/wiki

CHANGES

OSIAM server

1.0 - 2014-05-15

• [refactore] The token validation REST endpoint changed. If you want to validate an token,
  you need to send the token directly in the header instead of putting in the URL.
• [fix] The client secret and the redirect uri is not unique anymore
  For a detailed description and migration please click here:
  https://github.com/osiam/server/wiki/migration#from-021-to-10

0.20 - 2014-04-02

• [refactoring] The auth-server has a new interface with bootstrap, which could be customize.
  For a detailed description and migration please click here:
  https://github.com/osiam/server/wiki/Migration#from-019-to-020
• [fix] BT-45 - https://jira.osiam.org/browse/BT-45

0.19 - 2014-03-17

• [refactoring] The registration module has been moved to his own github repository:
  https://github.com/osiam/addon-self-administration

0.18 - 2014-03-04

• [fix] BT-41 - Attribute filtering removes "schemas" attribute
• [feature] OSNG-322 - Placeholder for registration emails
  Added new template engine for emails, see how you could add your own email template files:
  https://github.com/osiam/server/wiki/OSIAM-Registration-Module
  For migration see: https://github.com/osiam/server/wiki/Migration#wiki-from-016-to-017

0.17 - 2014-02-17

• [fix] BT-36 - Query with NOT clause on extension fields returns wrong results
• [feature] OSNG-215 - Develop PATCH "Delete" support on extensions
  For migration see: https://github.com/osiam/server/wiki/Migration#wiki-from-016-to-017
• [enhancement] OSNG-323 - Optimize Performance
  For migration see: https://github.com/osiam/server/wiki/Migration#wiki-from-016-to-017

OSIAM addon-administration

1.0 - 2014-05-13

• finally released version 1.0 of the addon-self-administration together with the OSIAM server!