This release primarily addresses new issues that were brought about with the 0.4.0 release last month such as issues with session expiration and OAuth functionality. Additionally, this release provides some enhancements to existing features such as the authentication settings editor.
Hopefully, this release will provide some stability to the recent OAuth issues that have been popping up since the release of 0.4.0. I have updated the OAuth providers to make exclusive use of either the metadata URL setting OR the token and authorize URL settings. The UI has been updated in such a way that this change becomes much more obvious. I have personally tested the GitHub and Azure OAuth implementations for basic authentication (not including the additional provider specific features) and can assure that it is functioning with the most basic use cases. It was also discovered that logout was failing for the Azure (and possibly OIDC) providers as the session tokens were not being properly cleared. This would result in an instant re-authentication after logging out due to the tokens still be present in the session.
In general, the authentication settings editor should be a much more enjoyable experience as I pulled out all of the existing client-side code that was a mess and implemented the KnockoutJS and jQuery Validation libraries to improve the UI and UX here. The tabs now provide proper deep-linking so browser history / navigation works very well when changing from tab to tab. One can also reload the page without starting back at the first tab every time. Furthermore, data is both loaded and saved with XHR calls instead of full page loads. This change facilitate the ability to switch to a single save button for all tabs of the editor as opposed to the independent forms that were previously present.
What's Changed
- Feature: Add OAuth Setting for Server Metadata URL by @AzorianMatt in #1436
- Added custom header to be used in the created_by column. by @benshalev849 in #1440
- Make the OTP label the same as the site_name #1237 by @subbink in #1444
- Upgrade lxml & python3-saml dependencies with workaround by @nkukard in #1451
- Fix user confirmed column migration issue by @nkukard in #1452
- Basic Auth Exception Handling Improvement by @nkukard in #1453
- PostgreSQL Support Improvement by @subbink in #1434
- Finish Updating Zone Nomenclature From Domain by @subbink in #1441
- Basic Auth Exception Handling Improvement Update by @nkukard in #1454
- Implement password strength & complexity checking by @nkukard in #1457
- Fix LDAP user group search for nested groups by @melck in #1238
- Fix manual session clearing that triggered session expiration bug by @nkukard in #1461
- Fix LDAP group restrictions by allowing the use of any combination of groups. by @nkukard in #1463
- Improve exception handling for invalid UTF-8 encoded X-API-KEY header by @nkukard in #1479
- Fix activity search invalid form markup causing submission failures by @raunz in #1481
- OAuth Settings Updates by @AzorianMatt in #1500
- Fix Zone Type can not be changed from "native" when adding or modifying zones by @subbink in #1502
- Feature Update: OAuth Settings Management / Dual-Schema Support by @AzorianMatt in #1515
- Show the current zone type and soa-edit-api settings on the zone settings page by @subbink in #1504
- Feature Update: Allow more than 100 rows in the zone list view. by @JanKoppe in #1491
- Zone rrset changelog display improvement by @raunz in #1507
- Added support for building
ARM64based Docker images. by @AzorianMatt in #1520 - Updated default value of
SERVER_EXTERNAL_SSLenvironment setting by @AzorianMatt in #1522
New Contributors
- @subbink made their first contribution in #1444
- @nkukard made their first contribution in #1451
- @melck made their first contribution in #1238
- @JanKoppe made their first contribution in #1491
Full Changelog: v0.4.0...v0.4.1
As always, thank you all for being loyal users and contributors of the PDA project! Hopefully it won't be too long until the 0.4.2 release is out!