Releases: Erudika/para
v1.49.0
⚠️ BREAKING: Use this migration script to migrate the H2 database from 2.1.214 to 2.2.220 before using this version!
440f9d1 Merge pull request #223 from Erudika/dependabot/maven/para-server/org.springframework.security-spring-security-config-5.8.5
e91017f Bump spring-security-config from 5.8.3 to 5.8.5 in /para-server
d894cc2 updated H2 migration script
32c32e3 fixed annotation data in ParaConfig
93b807f allow dots and commas in user names
b0bee32 updated dependencies
7accd8b fixed user names should be allowed to contain dashes and apostrophes
d401a47 fixed user name should not contain special symbols
ae657b8 update Jackson
3a64cbc updated dependencies
b32be05 fixed global tables not deleted in AWSDynamoUtils due to missing global table exception
1877440 fixed PasswordlessAuthFilter exception and allowed it to return the auth JWT directly with a new request parameter
7e96d39 updated Spring Boot
09ac0a8 Merge pull request #215 from Erudika/snyk-fix-c1035ab963e379f00bc30bb916e58064
30a018d fix: para-server/pom.xml to reduce vulnerabilities
📦 Download JAR
📦 Download WAR
v1.48.2
f546f4e updated maven plugins
83c2b59 updated dependencies
3b353bc updated dependencies
fd5fd86 updated dependencies
5569bb1 updated dependencies
a2eb43a updated dependencies
0848eb4 updated SnakeYaml
📦 Download JAR
📦 Download WAR
v1.48.1
b69d0a3 updated dependencies
cfd5116 fixed SAML Metadata filter not being registered after Spring Boot update
5dbb875 fixed access log not disabled when scoold.file_logger_level=OFF
2228a93 fixed minor logback configuration issue
📦 Download JAR
📦 Download WAR
v1.48.0
5a3d5b7 added new utility methods to ParaClient for reading and updating all objects using search-after pagination logic
7c9eb1b fixed exception when working with the new http-client API
e7e62e3 fixed deprecations
f66ddc5 fixed bug where auth requests would fail when Para is deployed under a context path
42b7cac fixed custom identifier prefix should not be added to all identifiers
1439e5f added user identifier validation and error message, custom: identifier prefix now mandatory for passwordless auth
faa0e7f added option to disable logging to file para.file_logger_level = 'OFF'
37862b5 fixed verbose logging message when user account is locked out
bb87205 fixed appid parameter used by Oauth2 filter should have precedence over state parameter
📦 Download JAR
📦 Download WAR
v1.47.2
44656f5 fixed LDAP auth filter group assignment from LDAP attributes not working with memberOf authorities/groups, fixes Erudika/scoold#351
bb032c9 fixed error caused by using ?appid={appid} params in OAuth2 requests, as alternative to ?state={appid}
e3d92db updated Jose JWT
d5c3b31 Merge pull request #180 from Erudika/snyk-fix-5509f06781021ec78eef6ffec512a65f
e06847b fix: para-server/pom.xml to reduce vulnerabilities
a48f3df fixed bug preventing admin/mod groups auto assignment for LDAP requests
1e6bb6b added plugin profiles to para-jar/pom.xml
ed2a1c7 fixed crash on startup when JavaMail implementation is selected
📦 Download JAR
📦 Download WAR
v1.47.1
e98473e Release v1.47.1.
e05442e fixed tests
8f53755 updated Jackson
59796b2 Merge pull request #177 from Erudika/dependabot/maven/para-server/com.fasterxml.woodstox-woodstox-core-6.4.0
5f0a44f updated Spring Boot
cf95d87 Bump woodstox-core from 6.3.1 to 6.4.0 in /para-server
e182330 updated dependency
c23d99b updated SnakeYAML
18a1103 added support for a few special chars in tags
a6f876c updated Spring Security
📦 Download JAR
📦 Download WAR
v1.47.0
b2febf0 Release v1.47.0.
a456b87 fixed flaky test
714f631 fixed para.security.protected.* resources should be optional and not crash the server when omitted
18bb536 added method overload for setting HttpOnly and SameSite cookie flags
316cd8d removed commons-text dependency and the deprecated RememberMe services
📦 Download JAR
📦 Download WAR
v1.46.3
ff8fda6 Release v1.46.3.
4e68267 added a new RateLimiter class for simple rate limiting
f2176b7 updated dependencies
ea37a04 updated Spring Boot to 2.7.4
1cc568c updated SnakeYAML
d123b49 updated AWS SDK
d7cd7c6 updated AWS SDK
171f827 updated ClassGraph
886f944 updated Jackson
📦 Download JAR
📦 Download WAR
v1.46.2
c9d084b added support for SAML option for turning off NameID requirement
6717368 updated JSoup
0905ccf Merge pull request #142 from kobus-v-schoor/master
7d2a2c5 don't strip username domain if ad domain is not provided
02ee9e4 fixed auth cookie missing secure flag
b8d78a9 moved logback configuration to para-server; updated dependencies
020d3e3 minor formatting fix and changed description for the new markdown option
6ddd129 Ignore domains for nofollow (#137)
3279645 [maven-release-plugin] prepare for next development iteration
📦 Download JAR
📦 Download WAR
v1.46.1
f1c4b7e added rate limiting for password matching attempts, 20 attempts per hour default
893f160 updated dependencies
f8ad4bb updated dependencies
ee8f4e0 updated Caffeine to 3.1.1
e3b8515 updated Dockerfile to set 'loader.path=lib' as a system property on startup
1743e3c updated Caffeine cache to 3.1.0
037d7eb updated SSLContext library