What's Changed
- [deps]: Pin dependencies by @renovate in #368
- Lowering Admin Page rate limit by @jrmccannon in #371
- Ignore
Datadog.Trace
in Renovate updates by @Tyrrrz in #373 - [deps]: Lock file maintenance by @renovate in #336
- Fix pin reference for HTTP request action by @Tyrrrz in #365
- Move apex charts dependency by @jonashendrickx in #375
- [deps]: Update gh minor by @renovate in #352
- Using existing record to cancel invite by @jrmccannon in #374
- [deps]: Update npm minor by @renovate in #378
- Create workflow-linter.yml by @jonashendrickx in #379
- Attestation (Limit use of authenticators) by @jonashendrickx in #372
- BreadCrumb tests by @jonashendrickx in #380
- Send Magic Link by @jrmccannon in #346
- Create CODEOWNERS by @jonashendrickx in #383
- [deps]: Update System.Configuration.ConfigurationManager to v8 by @renovate in #385
- [deps]: Update Serilog.AspNetCore to v8.0.1 by @renovate in #369
- Fixed Attestation link size to match other "buttons" by @jrmccannon in #381
- UI prompt does not make sense when no plans are shown by @jonashendrickx in #389
- Get Passwordless client library from NPM. by @jonashendrickx in #391
- Rename route parameter 'app' to 'appId' by @jonashendrickx in #388
- Fix FIDO2 MDS3 caching failures on Azure. by @jonashendrickx in #393
- Add security headers by @jonashendrickx in #384
- Bugfix: Whitelist/Blacklist evaluation not happening correctly. by @jonashendrickx in #394
- Merge info alert boxes into one. by @jonashendrickx in #382
- Fix CSP errors related to caching & fix routing errors by @jonashendrickx in #395
- BEEEP: SecureScript & SecureStylesheet (Refactored with tests) by @jonashendrickx in #397
- Fix return url by @jonashendrickx in #398
- BEEEP: Move middleware to maintain readability. by @jonashendrickx in #396
- Active users count charts by @jonashendrickx in #390
- [deps]: Pin @passwordlessdev/passwordless-client to 1.1.2 by @renovate in #399
- [deps]: Update vue to v3.4.18 by @renovate in #400
- Typo in email
You're email is already connected to an organization
by @jonashendrickx in #404 - Update language from black whitelist to block allowlist by @jonashendrickx in #403
- Prepare to kill
EfTenantStorageFactory
by @jonashendrickx in #401 - Update renovate.json - Follow Bitwarden policy by @jonashendrickx in #407
- Charts for Users and Credentials y-axis should be whole numbers by @jonashendrickx in #402
- Sort allowed authenticators alphabetically by @jonashendrickx in #409
- AdminConsole health checks by @jonashendrickx in #405
- Configuring allowlist should expect attestation to be used. by @jonashendrickx in #408
- Remove IDbContextFactory by @jonashendrickx in #411
- Clean up 'Playground - Registration' by @jonashendrickx in #410
- Add quotas and rate limits to magic link emails by @Tyrrrz in #392
- Fix background service by @jonashendrickx in #413
- Throw on expiration by @abergs in #417
- Exclude health checks from event logging by @jonashendrickx in #418
- We don't need these HealthCheck endpoints anymore. by @jonashendrickx in #419
- Fix migration script for production by @jonashendrickx in #425
- [deps]: Update npm minor by @renovate in #427
- [deps]: Lock file maintenance by @renovate in #387
- [deps]: Update gh minor by @renovate in #377
- .NET 8.0.2
IDE0005
dotnet format
issue by @jonashendrickx in #430 - AppId availability check is returning a 500 in admin console. by @jonashendrickx in #415
- PAS 371 - Change token template by @jrmccannon in #424
- API Key Management Confirmation Dialog & Horizontal Scrolling by @jonashendrickx in #412
- PAS 370 - Add TTL by @jrmccannon in #423
- Upgrade Passwordless.AspNetCore to 2.0.0-beta6 by @jrmccannon in #433
- Revert "Upgrade Passwordless.AspNetCore to 2.0.0-beta6" by @jonashendrickx in #434
- [deps]: Update codecov/codecov-action action to v4 by @renovate in #386
- Add
ReportingBackgroundService
again. by @jonashendrickx in #436 - Remove obsolete columns by @jonashendrickx in #435
- Show Magic Link Setting by @jrmccannon in #432
- Open documentation link in new tab by @jonashendrickx in #437
- HTML encode strings in e-mails by @jonashendrickx in #442
- Fix app deletion by @jonashendrickx in #441
- Replace
deploy
with a workflow dispatcher by @Tyrrrz in #414 - Remove nuget-minor by @jrmccannon in #431
- Fix variable substitution in deployment job by @Tyrrrz in #446
- PAS-378 | Create pull request template by @merissaacosta in #445
- Add 'Async' suffix to async methods by @pooya1380m in #444
- Switch from
DateTimeOffest
toDateTime
in EF models by @Tyrrrz in #451 - Dynamic matrix cases for the
deploy
job by @Tyrrrz in #447 - No forbidden content validation by @jonashendrickx in #449
- [PAS289][Defect] Feedback no longer a confirmation step when deleting user credentials by @jonashendrickx in #439
- PAS-378 | PR Template: change template dir and add spaces by @merissaacosta in #452
- Get started, fixed link by @abergs in #453
- PAS-379 | Event logging wording allow list & block list by @jonashendrickx in #457
- PAS-318 | Horizontal scrolling for organization events by @jonashendrickx in #456
- Clean up
DefaultMailService
by @Tyrrrz in #461 - PAS-262 | Display icons for authenticators by @jonashendrickx in #462
- PAS-382 | Fix
/account/useronboarding
by @jonashendrickx in #466 - PAS-382 | Refactor import maps by @jonashendrickx in #467
- PAS-384 | Fix delete passkey bug once and for all by @jonashendrickx in #469
- Element references may not exist when not logged in. by @jonashendrickx in #468
- PAS-381 | Partition rate limits by tenant for the magic link endpoint by @Tyrrrz in #464
- Run
EventDeletionBackgroundWorker
at fixed time. by @jonashendrickx in #471 - PAS-262 | Icon for authenticators without icon in MDS by @jonashendrickx in #470
- Make onboarding cleanup faster by @jonashendrickx in #472
- Use
ExecuteDeleteAsync
to delete an organization. by @jonashendrickx in #473 - Application logs table refactoring by @jonashendrickx in #459
- PAS-330 | Charts: Filenames for export by @jonashendrickx in #460
- Implement value comparers for the array conversions by @jonashendrickx in #474
- Remove dead code by @jonashendrickx in #475
- Temporarily disable rate limiting in magic links endpoint by @Tyrrrz in #463
- Track
Client-Version
header by @jonashendrickx in #477 - Fix monthly quotas not applied directly on app creation by @Tyrrrz in #480
- Delete expired organization events at midnight UTC. by @jonashendrickx in #478
- Refactor validation for registering tokens, setting alias and magic links by @jonashendrickx in #479
- PAS-202 | OpenAPI by @jonashendrickx in #481
- Don't use caching in quota checks by @Tyrrrz in #483
- Update pull_request_template.md by @abergs in #476
- PAS-393 | AppId availability check is not displayed in the UI correctly by @jonashendrickx in #485
- Revert "Temporarily disable rate limiting in magic links endpoint (#463)" by @abergs in #484
- Use Magic Links in AdminConsole by @abergs in #421
- Upgrade vue from 3.4.19 to 3.4.20 by @jonashendrickx in #493
- fix-magic-link-redirect by @jrmccannon in #494
- PAS-202 | OpenAPI: Users by @jonashendrickx in #488
- PAS-202 | OpenAPI: Event logging by @jonashendrickx in #486
- [deps]: Update Postmark to v4.7.12 by @renovate in #491
- CVE-2024-0057 by @jonashendrickx in #498
- CVE-2024-0056 by @jonashendrickx in #499
- CVE-2022-26907 by @jonashendrickx in #500
- PAS-202 | Prevent Swagger from crashing with duplicate authorization policies. by @jonashendrickx in #495
- PAS-202 | OpenAPI: Magic links by @jonashendrickx in #487
- PAS-375 | Self-hosting magic links bootstrap fix by @jonashendrickx in #492
- Initialize AC Quota by @jrmccannon in #503
- Allow AC to send magic links by @jrmccannon in #507
New Contributors
- @merissaacosta made their first contribution in #445
- @pooya1380m made their first contribution in #444
Full Changelog: 1.0.59...1.0.66