2.9.4 (2019-05-09)
2.9.3 (2019-05-09)
- config: add FeedbackManager role (3ef54eb)
2.9.2 (2019-04-02)
- emails: Fix bug with email configuration (0670950)
2.9.1 (2019-04-01)
2.9.0 (2019-03-25)
- api: Fix security problem with non encrypted CSRF token (#8) (3498b79)
- app: Support Safari browser (#10) (9f1f975)
- config: Fix CORS config (70d996c)
2.8.0 (2019-03-08)
- api: auth was partially broken (b77a120)
- config: add Lead role (a04ff23)
2.7.0 (2019-03-05)
2.6.3 (2019-03-01)
- app: Add search on apps and partners lists (e399390)
2.6.2 (2019-02-22)
- config: Add new talent role (7f1ce44)
- config: Remove cookie secret for production environment (404707a)
2.6.1 (2019-02-21)
- docs: Update readme following to review. (4a8682c)
- hooks: Fix mutliple issues with hooks configuration (5d58297)
- app: Allow to unset any field (cb2143c)
- app: Allow to unset user job in case of mistake (ece6c05)
- hooks: Avoid timing attacks in hooks usage JS examples, and add the php ones (452931b)
- hooks: Better hook triggers informations (a120374)
2.6.0 (2019-02-14)
2.5.0 (2019-01-28)
- global: Remove entirely old interface (c57d503)
2.4.1 (2019-01-28)
- api: Fix issues with POST /oauth/tokens (c855df7)
2.4.0 (2019-01-25)
- api: Add new marketing job (31d79d5)
- api: Authenticate token endpoint via payload optionally (aee7c4a)
2.3.0 (2019-01-03)
- api: Add new marketing job (31d79d5)
2.2.2 (2018-12-07)
2.2.1 (2018-12-07)
- api: Fix type in projectManager role (6b220b0)
- app: Remove mandatory field job in partner form (71b0cd7)
2.2.0 (2018-11-28)
- app: Add a link to point to new interface (8ca50c0)
2.1.1 (2018-09-20)
- api: Fix missing stylesheets for OAuth button (e1dea9c)
2.1.0 (2018-09-13)
- api: Fixed issues with old application (b84e9b2)
2.0.0 (2018-08-28)
- app: Fix some issues with permissions (8c7bc68)
- app: Add applications managment screens (44b47ce)
- app: Add partners create and edit to new app (2ba9123)
- app: Add React app to replace old dashboard (7498ca4)
- app: Better auto login handling (d949d18)
1.8.0 (2018-07-16)
- 'users': Sort users consistently when several returned. (f2681ed)
- tests: Take always the good user from fixtures. (3066902)
- users: Fix error 500 when no user in credentials (#68). (1ee8921)
- users: Fix users search and normalize user lastName (b0924af)
- dev: Add docker dev env. (6ab0a7b)
- user: Format properly the phone numbers. (d3fc946)
- users: Add custom validation for phone numbers (ebaa696)
- users: Add new fields (316b3ab)
- users: Add tests for new fields. (b25fdcb)
- users: Add the abilities to set and delete a profile picture url (ca75166)
- users: fix tests for Lastname normalization (9f8f152)
1.7.7 (2018-06-07)
- mailjet: Fix disabled mailjet on production (5a85962)
- roles: Fixed hr role which was named rh in most places (29ff35a)
1.7.6 (2018-05-29)
- config: Fix mongo url config (f71b455)
1.7.5 (2018-05-29)
- config: Fix configuration for production (a5f0bd2)
1.7.4 (2018-05-29)
- oauth: Fix OAuth authorization update (206bfac)
1.7.3 (2018-05-24)
- oauth: Better support of client credentials grant (30ad699)
1.7.2 (2018-04-19)
- oauth: Fix client credentials grant (7e42071)
- app: Add basic login in frontend app (0a18eb4)
- app: Add workspaces for frontend (f3c805f)
- monitoring: Add more metrics to monitoring (ad0d35c)
- oauth: Better design of oauth authorization pipe (12bf21c)
1.7.1 (2018-02-20)
- oauth: fix lint error (60bb840)
- oauth: fixed bad usage of Hapi reply interface (ccb8a82)
- oauth: fixed oauth login error message and HTTP codes (d8586e9)
1.7.0 (2018-02-02)
- dashboard: Add possibility to have multiple redirect uris for apps (165f883)
- oauth: Add forgot password link in oauth modal (63289aa)
- oauth: Add response type token for authorization pipeline (919db16)
1.6.2 (2017-11-27)
- oauth: fixed issue with not found application by client_id (b20cf47)
- dashboard: Add possibility to edit the email address (6dc9685)
1.6.1 (2017-11-27)
1.6.0 (2017-11-27)
- oauth: Add missing state when canceling authorization pipe (190a630)
- oauth: Add missing query params to authorization endpoint (7438ad4)
- oauth: Fix client_id query param on authorization endpoint (00a8a97)
1.5.0 (2017-10-17)
- login: Fix cookie SameSite property (454ed1e)
- config: Extend refresh token TTL to 1 month (32631d2)
- users: Additional GET /users query params (fd8ede1)
1.4.2 (2017-06-26)
- oauth: Fix displaying permissions already accepted (834518f)
- oauth: Fix multiple bugs with the SSO button (5f4c920)
1.4.1 (2017-06-26)
- oauth: Fix invalid cookie in authorization popup (9e6cb4a)
1.4.0 (2017-06-23)
- login: Fix reset password address (697c9f5)
- monitoring: Fix monitoring event timing (62102d7)
- monitoring: Fix monitoring labels (adc646c)
- login: Add password reset (882018b)
- monitoring: Add http basic auth for /metrics (2af12d1)
- monitoring: Add metrics endpoint for Prometheus (d00a744)
- oauth: Add sso button route (c0f1dd1)
1.3.1 (2017-05-19)
- user: Add email checking to prevent 500 errors (e393f4a)
1.3.0 (2017-05-18)
- login: Add Lax cookie policy (1207f28)
1.2.4 (2017-05-18)
- login: fix secure cookie (a51bf01)
1.2.3 (2017-05-18)
- login: Secure cookie (7edd0c7)
1.2.2 (2017-05-18)
- cli: Fix cli mail send (2993758)
1.2.1 (2017-05-18)
1.2.0 (2017-05-18)
1.1.0 (2017-05-16)
- dashboard: Add quick login for password change (9f65562)
- dashboard: Invalidate all sessions when changing password (0657744)
- mailjet: Add mailjet API integration for account creation (bcd9b86)
- oauth: Cleanup tokens and authorizations on user delete (991461c)
- security: Improved security (bf71743)
1.0.0 (2017-05-12)
- apps: Allow single value for allowed scopes (c4c421f)
- config: Fixed configuration for Heroku (0db2953)
- config: Fixed scripts for Heroku (7624823)
- cors: Add wildcard CORS (b47e377)
- heroku: Fix procfile (b4150c3)
- oauth: Fix issue with auth code expireAt (8702f4f)
- scopes: Use default application scopes if not specified (16dff67)
- user: add scope checking on GET /users/{id} (461762b)
- apps: Add redirect URI and allowed scopes in app forms (#72) (3985d95)
- config: Configuration for Heroku (806038b)
- dashboard: Force password change on user (bd3554a)
- deploy: Add Heroku config (#68) (a72674f)
- global: Add / route redirecting to dashboard (53cf5e5)
- heroku: Add procfile for heroku (951fa95)
- oauth: Disable unit tests (3b7e163)
- oauth: Force password change on user (5135b06)
- user: Add user city and removed user fallbackEmail (64b4329)
- user: Stabilize partner administration (e0d6450)
0.6.0 (2017-02-06)
- login: Redirect to dashboard if already logged in (#65) (4802aed)
- oauth: Add tests for authorize endpoint (#66) (f68ec1f)
- oauth: Added OAuth authorization process endpoint (#60) (c323844)
- security: Add CSRF token protection on every form (#64) (f31f3f8), closes #62
- tasks: Add workers for Slack, Trello and GitHub (#67) (e5f29b7)
- templates: Add page titles to every templates (f2e6849)
- users: Add third party services calls (cb76c8f)
- users: Added user description and profilePictureUrl (#63) (185fd53), closes #59
0.5.1 (2017-01-20)
0.5.0 (2017-01-20)
0.4.0 (2016-12-16)
- deps: Updated dependencies (#44) (680d451)
- lint: Bumped eslint config version (#45) (384c7f1)
- oauth: Add handling of scopes (#49) (3d120dd)
- tests: Add tests for /users endpoint (#46) (05288de)
- users: Add query params handling to GET /users (#48) (7c8a833)
- users: Add user roles handling (#41) (c2b400f)
0.3.0 (2016-12-09)
- oauth: Improved OAuth errors of token endpoint and docs (#38) (25f7ff6)
- users: Add GET /users/me route (#40) (dfdda6b)
0.2.5 (2016-11-24)
0.2.4 (2016-10-21)
0.2.3 (2016-10-21)
- login: Keep email when login fails (49e5bdf)
0.2.2 (2016-10-21)
0.2.1 (2016-10-21)
0.2.0 (2016-10-21)
- cli: Added a CLI to build super user (e4b78d3)
- login: Update design with MDL (558a4c1)
- workers: Added some logs for workers and status in user (9f6114e)