Important note
It has not been followed in the past, but this release clearly drops support for Python < 3.6. Python 2 is EOL since January 2020, and recent distributions (Debian 10/Ubuntu 19) are packaged with Python > 3.7. We encourage you to update your servers/virtualenvs to a modern version.
Features
- OTP can be enforced by a setting (#1051)
- History has been refactored (#1042)
- API Keys can now be associated with accounts, as domains can (#1044)
- API now has a /health endpoint (authenticated) to check the backend's health (at least one domain must exist in the backend) (#1172)
Enhancements
- Use secrets module for generating new API keys and passwords (#1035)
- Oidc Autoprovisioning now allows binding of a user to multiple accounts (#994)
- Replaced Datepicker (#1059)
- The "Admin" button has been added to domain edition page (#1076)
- Unauthentified Dyndns requests are now answered with www-authenticate headers
- Enabling DNSSEC on a domain is now recorded in the history (#1123)
- API's /ping endpoint is not protected by authentication anymore (#1174)
- Improved k8s deployment support (#1216, #1217, #286)
Bug Fixes
- Sort accounts in Domain creation page (#1049)
- Login page is reloaded in background before CSRF token expires to prevent 403 error after a successfull but late login (#1124)
- Domain deletion from API crash (#1101)
- LDAP login in history are now correctly displayed (#1122)
- Active Directory group resolution now uses native AD nested group resolution that prevents infinite loops (#1118)
- HTML entities are now correctly handled in domain edition page (#1159)
- Application/Json content type is now set on all outgoing API calls to enable the use of another PDA instance as a backend (#1154)
- Account deletion via API now dissociates domains to allow the account to be deleted (#1134)
Security Fixes
Documentation
The documentation has been slightly improved in distinct PR and the ones mentioned in this release notes. Further work is planned in summer to add details and more complete examples.