Skip to content
This repository has been archived by the owner on Jul 12, 2023. It is now read-only.

v0.26.0
Compare
Choose a tag to compare
@sethvargo sethvargo released this 12 Apr 14:30
· 320 commits to main since this release
v0.26.0
58e6cd4
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

Changes since v0.25.0

Upgrade notes

Enhancements

  • Enable Authenticated SMS by default. To disable this functionality, set ENABLE_AUTHENTICATED_SMS to false. The ability to disable this feature may be removed in a future release. (#1983, @mikehelmick)
  • Add Arabic translations for case worker UI. (#1969, @mikehelmick)
  • Add translations for email verify pages. (#1999, @sethvargo)
  • Add translations for signout and realm selection pages. (#1997, @sethvargo)
  • Add translations for the login and password reset pages (#1978, @sethvargo)
  • Add translations to change/select password pages. (#1996, @sethvargo)
  • Add a warning on realm settings page that when user report is enabled, authenticated SMS should be enabled too. (#1991, @mikehelmick)
  • Add guidance for user report SMS template (#1971, @mikehelmick)
  • Add middleware to make OS present in request context (#1973, @mikehelmick)
  • Don't let greyed out fields be changed in signing keys. Alert when creating a user that already exists. Fix ENX upgrade SMS template text when user-report is enabled. (#1989, @mikehelmick)
  • Drop UPDATE privileges on audits table. This makes audit entries immutable (but still deletable). (#1966, @sethvargo)
  • In the mobile apps screen, provides a user hint that AppStore redirect should be disabled if there is a custom app and iOS ENX in the same region. (#1977, @mikehelmick)
  • Lower data-layer TTLs on background jobs (#1962, @sethvargo)
  • Mention links should be clicked on mobile devices and internationalize 404 pages. (#2002, @sethvargo)
  • Minify js and css assets on build. (#1992, @sethvargo)
  • Move CSRF implementation into session. (#1963, @sethvargo)
  • Remove XSS header. This is deprecated by most modern browsers and can cause client-side security issues. (#1961, @sethvargo)
  • Return gzipped responses if the client supports gzipped responses. (#1998, @sethvargo)
  • Set cache headers on static assets, do not apply middlewares. (#1990, @sethvargo)
  • Switch to loading javascript using defer to minimize load times. (#1988, @sethvargo)
  • Switch to using dir="rtl" for right-to-left languages. (#1979, @sethvargo)
  • Use min versions of intl-tel-input script. (#2000, @sethvargo)
  • When invalid codes are attempted to be used, the OS is captured in the realm stats [unknown, ios, android] (#1975, @mikehelmick)

Infrastructure

  • Change load balancer https redirect rules to only match known host names, otherwise redirect to UI server. (#1982, @mikehelmick)
  • Generates specific host name matches for all ENX redirect subdomains. For anything not matching on the http port, the user set sent to an information page at g.co/ens (#1984, @mikehelmick)

Statistics

  • New chart on the realm admin stats page showing the invalid codes entered by operating system. (#1976, @mikehelmick)

Operations

Misc

  • Check password validity on page load to reduce code duplication. (#1980, @sethvargo)
  • Experimental: Adds an optional Web UI that can be launched as an embedded Webview for requesting user initiated verification codes (#2011, @mikehelmick)

Dependencies

Added

  • github.com/Masterminds/semver/v3: v3.1.1
  • github.com/NYTimes/gziphandler: v1.1.1

Changed

Removed

  • github.com/agext/levenshtein: v1.2.3
  • github.com/apparentlymart/go-dump: 23540a0
  • github.com/apparentlymart/go-textseg/v13: v13.0.0
  • github.com/apparentlymart/go-textseg: v1.0.0
  • github.com/chris-ramon/douceur: v0.2.0
  • github.com/gorilla/csrf: v1.7.0
  • github.com/hashicorp/hcl/v2: v2.9.1
  • github.com/kylelemons/godebug: d65d576
  • github.com/nxadm/tail: v1.4.4
  • github.com/sergi/go-diff: v1.0.0
  • github.com/vmihailenco/msgpack/v4: v4.3.12
  • github.com/vmihailenco/msgpack: v3.3.3+incompatible
  • github.com/vmihailenco/tagparser: v0.1.1
  • github.com/zclconf/go-cty-debug: b22d67c
  • github.com/zclconf/go-cty: v1.8.0
Assets 2
Loading