Skip to content
This repository has been archived by the owner on Jul 12, 2023. It is now read-only.

v0.23.0
Compare
Choose a tag to compare
@mikehelmick mikehelmick released this 01 Mar 17:40
· 424 commits to main since this release
v0.23.0
f2b0455
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

Release notes for v0.23.0

Changelog since v0.22.0

Notice

  • Release contains breaking changes for server operators, please see tagged release notes below.
  • This release upgrade to golang version 1.6

Changes by Kind

New Features

  • Allow system administrators to set system notices. See the system admin guide for more information. (#1877, @sethvargo)
  • Introduce configurable Authenticated SMS failure modes. The default behavior is to "fail open" (continue on error). Operators can configure the system to "fail closed" (halt on error) by setting the SMS_FAIL_CLOSED environment variable on the server and adminapi services. We recommend leaving the default configuration. Regardless of the configuration, this also introduces a new non-paging alert to inform operators when an out-of-threshold number of failures occur while signing SMS messages, per realm. See the new playbook for more information. (#1834, @sethvargo)

Documentation

Statistics

  • Clarify naming on code claim charts. Change units on mean claim graph from seconds to minutes. (#1867, @mikehelmick)
  • The tokens claimed/invalid chart has been removed (data is still in exports)
    • Add total publish requests to the codes/issued claim chart (if key server stats are enabled)
    • Separate out revisions and missing onset from TEKs published
    • Add total publish requests and missing onset as overlays on the publish bar chart (#1886, @mikehelmick)

Bug Fixes and Improvements

  • BREAKING Remove backwards-compatibility for TOKEN_SIGNING_KEY. Specifying multiple values has been deprecated since 0.21 and token signing keys have moved into the database. If you are on an older version, you **MUST upgrade to v0.22 for at least 24h before applying this update.*- You should ensure that the value of TOKEN_SIGNING_KEY points to a key (not a key version) in the service environment before applying this upgrade. Since v0.22, TOKEN_SIGNING_KEY accepted a key version or a parent key. This release only accepts a parent key. (#1872, @sethvargo)
  • Link out to Twilio splits calculator for advanced calculations (#1858, @sethvargo)
  • Add and connect recovery middleware (#1827, @sethvargo)
  • Drop support for crypto/dsa in public key parsing. The EN system only supports ecdsa keys, so this will not affect the system. (#1866, @sethvargo)
  • Make per-test timeout a project function (#1826, @sethvargo)
  • Merge e2e tests and integration tests (#1856, @sethvargo)
  • Only return a signer if Authenticated SMS is enabled (#1843, @sethvargo)
  • Only update SMS preview when the textarea is updated (#1840, @sethvargo)
  • Reduce arbitrary sleeps in tests (#1859, @sethvargo)
  • Refactor user tests to use less chromedp (#1852, @sethvargo)
  • Remove shared state from tests (#1888, @sethvargo)
  • Remove unneeded chromedp from realmadmin and realmkeys (#1871, @sethvargo)
  • Simulate sending SMS in e2e-runner and enable authenticated SMS for the e2e test realm. Operators will either need to opt out of the e2e-runner service testing SMS paths by setting E2E_SKIP_SMS (not recommended) or configure the e2e test realm with Twilio Test Credentials. See the updated production guide for screenshots and examples. We recommend configuring the e2e-test-realm before upgrading the service to minimize alerts. (#1839, @sethvargo)
  • Upgrade e2e-runner's HTTP client. This changes the required configuration for KEY_SERVER from the full URL to the /publish endpoint to just the URL to the key server. Where previously you may have configured KEY_SERVER=https://foo.bar/v1/publish, please re-configure with KEY_SERVER=https://foo.bar. The system attempts to maintain backwards compatibility by parsing the URL, but this may be removed at a later date. (#1850, @sethvargo)
  • Upgrade to Firebase Auth version 8.2.9. (#1881, @sethvargo)
  • Upgrade to Go 1.16 (#1865, @sethvargo)
  • Use append instead of inserting at index in e2e test (#1822, @sethvargo)
  • Use less chromedp and less database churn in API key tests (#1857, @sethvargo)
  • Use less chromedp in login controller (#1863, @sethvargo)
  • Use less chromedp on admin controller tests (#1861, @sethvargo)
  • Use less chromedp on codes tests (#1862, @sethvargo)
  • Wrap returned error from decoding form (#1828, @sethvargo)

Infrastructure

Dependencies

Added

  • github.com/magefile/mage: v1.11.0

Changed

Removed

Nothing has changed.

Assets 2
Loading