Version 2023.3.15-1

• Added new GUI parameter to both --password-prompt and --secure-token-admin-password-prompt options to be able to accept passwords via AppleScript dialog prompt instead of only a command line prompt in the Terminal. Passing CLI or no parameter does a command line prompt like previous versions. Also improved command line prompts with better username display, better error handling and allowing reattempts without the script exiting.
• Added new command line installation technique by running curl mkuser.sh | sh which downloads and runs the new download-and-install-mkuser.sh script. This new technique is fully explained in the new INSTALLATION section of the README.
• Added new technique to download and run mkuser from a temporary location without fully installing it by running sh <(curl run.mkuser.sh) [MKUSER OPTIONS AND PARAMETERS] which downloads and runs the new download-and-run-mkuser.sh script. This new technique is fully explained in the new INSTALLATION section of the README.
• Added undocumented --only-check-locally-for-conflicting-names option for special and rare cases described in #7.
• Improved behavior to not prompt for confirmation when run from a non-interactive script (--do-not-confirm no longer needs to be specified). Now, confirmation will only be prompted when run in an interactive Terminal.
• Improved short option parsing when a parameter is required and the short option and parameter are combined with no delimiter.
• Improved --help output to use less to display a scrolling view that starts at the top instead of outputting the full help in the Terminal all at once which left you at the bottom.
• Improved package installation to preserve the mkuser scripts code signature when installed on macOS 10.15 Catalina and older.
• Lots of other bug fixes, improvements, and typos corrected throughout.

Previous Release Notes from Version 2022.9.30-1

• Improved security when deobfuscating passwords within a user creation package while it's being installed by using native Objective-C methods rather than external binary commands for more steps of the deobfuscation process to reduce the possible attack surface of a MITM/spoofing-type attack and also by validating the Code Signing Requirements of more external binary commands used throughout the entire user creation process.
• Fixed possible sporadic and inconsistent bug when deobfuscating passwords within a user creation package while it's being installed which was previously worked around by doing multiple re-attempts. The root cause of this issue has now been found and fixed to avoid the issue altogether rather than just working around it when it happened. Password deobfuscation should now be more reliable and faster in some cases.
• Other bug fixes, improvements, and typos corrected throughout.