mirror of
https://github.com/0rangebananaspy/authelia.git
synced 2024-09-14 22:47:21 +07:00
152 lines
5.2 KiB
Markdown
152 lines
5.2 KiB
Markdown
Release Notes - Version 4.0.0
|
|
------------------------------
|
|
* Authelia is rewritten in Go.
|
|
* config.yml should include a secret for jwt issuance and verification.
|
|
* Models in database have been updated to better fit with the Go library.
|
|
* The local storage has been replaced by a good old sqlite3 database.
|
|
* The "secure" flag from the SMTP notifier configuration has been removed as TLS is used by default when available.
|
|
* authelia-scripts tool has been rewritten in Go.
|
|
* Use pure implementation of crypt to avoid CGO and dependency to libc.
|
|
|
|
Release Notes - Version 3.16.3
|
|
------------------------------
|
|
* Update changelog of previous versions.
|
|
|
|
Release Notes - Version 3.16.2
|
|
------------------------------
|
|
* Update email footer to inform user of actions to take if she is receiving an unexpected email from Authelia.
|
|
|
|
Release Notes - Version 3.16.1
|
|
------------------------------
|
|
* Update NPM API key.
|
|
|
|
Release Notes - Version 3.16.0
|
|
------------------------------
|
|
* Configure a CA for LDAPS.
|
|
* Password could be provided as env variables to avoid exposing them in a file (also simpler to use and protect in Kubernetes).
|
|
|
|
Release Notes - Version 3.15.0
|
|
------------------------------
|
|
* Change license from MIT to Apache 2.0.
|
|
|
|
Release Notes - Version 3.14.0
|
|
------------------------------
|
|
* [BREAKING] Add official support for Traefik with a dedicated suite.
|
|
* Add support for network-based ACL rules allowing to apply different authorization strategies on different networks.
|
|
* Several bug fixes (unusual error message when using U2F, X-Forwarded-User and X-Forwarded-Groups was not propagated on bypassed endpoints).
|
|
|
|
Release Notes - Version 3.13.0
|
|
------------------------------
|
|
* Rewrite Authelia portal in Typescript.
|
|
* Intoduce concept of suites and authelia-scripts.
|
|
* Add official support for Kubernetes and a suite.
|
|
* Improve documentation for nginx.
|
|
* Fix bypass policy not properly handled.
|
|
* Implement Duo push notification as a second factor.
|
|
* Display only available 2FA options (U2F if supported in browser, Duo push if configured).
|
|
|
|
Release Notes - Version 3.12.0
|
|
------------------------------
|
|
* Add logs to troubleshoot LDAP sanitizer.
|
|
* Add {uid} placeholder for LDAP search queries for groups.
|
|
|
|
Release Notes - Version 3.11.0
|
|
------------------------------
|
|
* [BREAKING] Flatten ACL rules to enable some use cases. Configuration of ACLs
|
|
must be updated.
|
|
* Fix open redirection threat.
|
|
* Define minimum level of authentication required for a resource in ACL to be
|
|
authorized.
|
|
* Allow Authelia to be built with different themes.
|
|
* Fix bug in hash matching when using file-based users database.
|
|
* Fix dead link in documentation.
|
|
|
|
Release Notes - Version 3.10.0
|
|
------------------------------
|
|
* Add docker-compose for deploying Authelia on Swarm*.
|
|
* Add "keep me logged in" checkbox in first factor page.
|
|
* Fix U2F compatiblity with Firefox.
|
|
* Bump dependencies to fix vulnerabilities reported by snyk.
|
|
* Improve documentation for dev setup.
|
|
|
|
Release Notes - Version 3.9.5
|
|
-----------------------------
|
|
* Fix images in README in NPM.
|
|
|
|
Release Notes - Version 3.9.4
|
|
-----------------------------
|
|
* Update Authelia icon & add documentation image.
|
|
* Add snyk badge
|
|
|
|
Release Notes - Version 3.9.3
|
|
-----------------------------
|
|
* Fix npm publication.
|
|
* Use IP coming from X-Forwarded-For header in logs.
|
|
* Fix CONTRIBUTORS.md.
|
|
|
|
Release Notes - Version 3.9.2
|
|
-----------------------------
|
|
* Put back link to Gitter instead of Slack.
|
|
|
|
Release Notes - Version 3.9.1
|
|
-----------------------------
|
|
* Split the README in several parts.
|
|
* Fix Kubernetes configuration file for Authelia.
|
|
|
|
Release Notes - Version 3.9.0
|
|
-----------------------------
|
|
Features:
|
|
* Add support for file users database to replace LDAP in development
|
|
environments.
|
|
* Add authentication configuration options for mongo and redis.
|
|
|
|
Configuration changes:
|
|
* [BREAKING] `ldap` key has been nested in `authentication_backend`.
|
|
* New `username` and `password` options for mongo storage.
|
|
* New `password` option for redis.
|
|
|
|
Release Notes - Version 3.8.3
|
|
-----------------------------
|
|
* Fix ECONNRESET issues when LDAP queries failed. (#261).
|
|
|
|
Release Notes - Version 3.8.2
|
|
-----------------------------
|
|
* Fix publication to NPM.
|
|
|
|
Release Notes - Version 3.8.1
|
|
-----------------------------
|
|
* Fix publication to NPM.
|
|
|
|
Release Notes - Version 3.8.0
|
|
-----------------------------
|
|
Features:
|
|
* Add support for Kubernetes nginx ingress controller.
|
|
* Add example configuration for kubernetes.
|
|
* Disable forms when authentication is in progress.
|
|
* Make most of configuration options optional and create a minimal configuration.
|
|
* Introduce helmet package to improve security.
|
|
|
|
Configuration changes:
|
|
* [Breaking] `redirect=` in nginx configuration has been replaced by `rd=` to be
|
|
be compatible with Kubernetes ingress controller.
|
|
|
|
Release Notes - Version 3.7.1
|
|
-----------------------------
|
|
Configuration change:
|
|
* storage.mongo now contains two keys: `url` and `database`.
|
|
|
|
Release Notes - Version 3.7.0
|
|
-----------------------------
|
|
Features:
|
|
* Support basic authorization for single factor endpoints.
|
|
* Add issuer and label in TOTP otp url.
|
|
* Improve UI of second factor page.
|
|
* Use SHA512 password encryption algorithm of LDAP.
|
|
* Improve security of Authelia website.
|
|
* Support for default redirection url.
|
|
* Support for session inactivity timeout.
|
|
|
|
Bugs:
|
|
* Fix U2F factor not working in Firefox
|
|
|