227 lines
12 KiB
Markdown
227 lines
12 KiB
Markdown
# CHANGELOG
|
|
|
|
## dev
|
|
|
|
- Enh: Changed exception thrown in PasswordRecoveryService from `RuntimeException` to `NotFoundException`. (eseperio)
|
|
- New #553: created Da\User\AuthClient\Microsoft365 auth client (edegaudenzi)
|
|
- Ehh: Added SecurityHelper to the Bootstrap classMap
|
|
- Fix #546: The profile/show page must not be visible by default, implement configurable policy (TonisOrmisson)
|
|
- Fix #397: No more fatal Exceptions when connecting to already taken Social Network (edegaudenzi)
|
|
- Ehh: Added option to pre-fill recovery email via url parameter (TonisOrmisson)
|
|
- Ehh: Fixed pretty-url rules not initialized for console apps (TonisOrmisson)
|
|
|
|
## 1.6.3 Mar 18th, 2024
|
|
|
|
- Fix: Update last_login_at and last_login_ip on social networt authenticate (e.luhr)
|
|
- Enh: Keycloak auth client (e.luhr)
|
|
- Fix: Social Network Auth (eluhr)
|
|
- Enh #532: /user/registration/register now shows form validation errors
|
|
- Enh: Allow/suggest new v3 releases of 2amigos 2fa dependencies: 2fa-library, qrcode-library (TonisOrmisson)
|
|
- Ehh: Added all the classes to the Bootstrap.php classMap
|
|
- Enh: Added option to disable viewing any other user's profile for non-admin users (TonisOrmisson)
|
|
- Ehn: updated Estonian (et) translation by (TonisOrmisson)
|
|
- Ehn: use recaptcha.net instead of google.com (Eseperio)
|
|
|
|
## 1.6.2 Jan 4th, 2024
|
|
|
|
- Fix: Two Factor Authentication - Filter - Blocks even when two factor authentication is enabled
|
|
- Fix: update Dutch (nl) translations (squio)
|
|
- Enh: possibility to limit the depth of the recursion when getting user ids from roles (mp1509)
|
|
- Fix: UserSearch avoid fields name conflict if joined with other tables (liviuk2)
|
|
- Fix: PasswordExpireService return false when user model attribute "password_changed_at" is already set at null.
|
|
- Enh #524: Two Factor - Authenticator App - offer a "Can't scan?" fallback
|
|
- Fix #530: Welcome email: reported Password is now HTML-encoded
|
|
- Ehn: updated french translation by @arollmann
|
|
|
|
## 1.6.1 March 4th, 2023
|
|
|
|
- Fix: use correct password recovery url in welcome mail and add functionality to plain text version of the mail (@eluhr)
|
|
- Fix: correct viewPath error in LoginWidget (niciz)
|
|
- Enh: possibility to call all the api endpoints with either id or username or email (liviuk2)
|
|
- Fix: use configured User model in SecurityController 2FA confirmation (jussiaho)
|
|
- Enh: possibility to get user ids from roles recursively (mp1509)
|
|
|
|
## 1.6.0 January 9, 2023
|
|
|
|
**WARNING**: this release (long time due) makes a step forward in PHP
|
|
compatibility, leaving behind obsolete versions. While yii2-usuario should
|
|
still work without issues on 5.6, from now on testing and development will
|
|
look forward and maintain only >=7.4 versions.
|
|
|
|
There's also a **security issue** for 2FA tokens: `settings/two-factor` route
|
|
wasn't checking for the currently logged in user, so any authenticated account
|
|
could access to all user's 2FA root code. If you cannot upgrade, check
|
|
[24d5d5744fe0](https://github.com/2amigos/yii2-usuario/commit/24d5d5744fe03f3173ea180f106865ffaf4f48a4).
|
|
|
|
There's a change in flash messages handling, please see #391.
|
|
|
|
- Updated translations: IT (maxxer), PL (bizley)
|
|
- Enh: update welcome and confirmation email ending line (maxxer)
|
|
- Enh #361: Record and manage user session history (maranqz)
|
|
- Fix: replace non-working travis build with working github actions build (TonisOrmisson)
|
|
- Fix: user login events not triggered on ajax requests (TonisOrmisson)
|
|
- Enh: Added minimum requirements when a new password is automatically generated (MatteoF96)
|
|
- Fix #380: Avoid rewriting AccessRule::matchRole (maxxer)
|
|
- Fix #378: Add module attribute 'disableIpLogging' (jkmssoft)
|
|
- Enh #387: Added Persian translation (hadi-aj)
|
|
- Fix #384: Delete flash messages after consuming (cgsmith)
|
|
- Fix #381: Renamed events in `UserEvent` to avoid conflicts with events in `FormEvent` (Slayvin)
|
|
- Enh: Added SK translations (snickom)
|
|
- Fix: allow `password_changed_at` to be saved when reseting password (p4blojf)
|
|
- Fix #430: Moved `EVENT_BEFORE_PROFILE_UPDATE` to correct place (eluhr)
|
|
- Enh #456: Added filter to allow forcing 2FA for specific user roles (acordeddu)
|
|
- Enh #412: Allow role names to support UTF-8 chars (4khobta)
|
|
- Enh #448: Remove deprecated SwiftMailer, use SymfonyMailer instead (TonisOrmisson)
|
|
- Enh #428: Translations of the placeholders in the login widget (anapaulaxenon)
|
|
- Update PHP-CS-Fixer configuration to new version (maxxer)
|
|
- Fix #391: Always create flash messages, allow `enableFlashMessages` only to dictate display (ajmedway)
|
|
- Enh #458: Multiple 2FA channels (email, sms) (acordeddu)
|
|
- Fix #432: Fix documentation overlap by shortening page names (cgsmith)
|
|
- Enh #472: implement module viewPath in all views instead of static file reference (tonisormisson)
|
|
- Fix: Clear 2FA auth key when feature is disabled by user
|
|
- Fix: check user before accessing 2FA code
|
|
- Enh: added `AdminController` REST controller (MatteoF96)
|
|
- Enh: added method `setUser` for LoginForm model (liviuk2)
|
|
- Enh: user model emailTrim validator only if not empty #486 (liviuk2)
|
|
- Fix #461: TimeZoneHelper: don't use floats for columns that could be array keys (maxxer)
|
|
|
|
## 1.5.1 April 5, 2020
|
|
|
|
- Fix #370: Extending view fix (effsoft)
|
|
- Fix #306: Add event for failed login (ivan-cc)
|
|
- Fix #347: Only pass fields known to User model in registrationControl->actionRegister() (BillHeaton)
|
|
- Fix #346: Update ReCaptcha guide to not use AJAX (BillHeaton)
|
|
- Fix #345: Update ReCaptcha guide to add scenarios() in recoveryForm (BillHeaton)
|
|
- Fix #307: Fix French translation (arollmann)
|
|
- Fix #316: Fix new response from Google OAuth Api (Julian-B90)
|
|
- Fix #321: Fix new response from LinkedIn OAuth Api (tonydspaniard)
|
|
- Fix #322: Fix boolean values in migrations for SQL server (tsdogs)
|
|
- Enh #325: Added support for sqlite3 (santilin)
|
|
- Fix #326: Fix rule for the user auth_tf_enabled field (santilin)
|
|
- Fix #290: Fix wrong email message for resending confirmation (tonydspaniard)
|
|
- Enh #269: Added help documentation to console commands (tonydspaniard)
|
|
- Fix #244: Fix forced inclusion of a suggested class (tonydspaniard)
|
|
- Fix user event triggering in admin controller (maxxer)
|
|
- Enh #331: Added Ukrainian translations (kwazaro)
|
|
- Enh #324: Added option to restrict user assignments to roles only (CheckeredFlag)
|
|
- Enh #224: Added option to require consent (eseperio)
|
|
- Enh: Added classMap for MailService (necrox87)
|
|
|
|
## 1.5.0 April 19, 2019
|
|
|
|
- Fix: Fix condition in EmailChangeService (it was always false) (borisaeric)
|
|
- Fix #198: Updated translations by quique, bizley, TonisOrmisson, guogan, Dezinger, maxxer, wautvda, mrbig00, fabiomlferreira, WeeSee
|
|
- Fix #209: Doc fix. allowAccountDelete default value is false (Dezinger)
|
|
- Fix #211: Migration boolean default value set to FALSE instead 0 (Dezinger)
|
|
- Fix #213: Migration sql syntax fix (Dezinger)
|
|
- Enh #131: 2FA libraries now optional (maxxer)
|
|
- Enh #187: Add GDPR features (Eseperio)
|
|
- Enh #184: Add `last-login-ip` capture capability (kartik-v)
|
|
- Enh: Changed `View::render()` calls in views to use absolute paths (ajmedway)
|
|
- Fix #169: Fix bug in ReCaptchaComponent (BuTaMuH)
|
|
- Fix #168: Fix spelling in russian language (EvgenyOrekhov)
|
|
- Fix #195: UserCreateService: check if we're from web before setting flash message (maxxer)
|
|
- Enh: Improvements to the admin responsive design (wautvda)
|
|
- Enh: Add controller module class reference (TonisOrmisson)
|
|
- Enh: Replace the deprecated InvalidParamException in ClassMapHelper (TonisOrmisson)
|
|
- Fix #242: Add POST filter for `admin/force-password-change` action (bscheshirwork)
|
|
- Enh #251: Use `asset-packagist` instead of `fxp-asset` if you run it as a module without having a project around (bscheshirwork)
|
|
- Fix #252: Delete check for unexpected property `allowPasswordRecovery` for resend email by admin (bscheshirwork)
|
|
- Fix #254: Rename `GDPR` properties to `lowerCamelCase` style (bscheshirwork)
|
|
- Enh #253: Add PHPDoc for events class (bscheshirwork)
|
|
- Fix #258: Rename `GDPR` delete action to `lowerCamelCase`/`dash` style (bscheshirwork)
|
|
- Fix #271: Add closure support for `from` email address; Change default sender to `supportEmail` (bscheshirwork)
|
|
- Fix #276: Fix missing translatable strings
|
|
- Enh #249: Show message `email send if possible` any time on reset password request (bscheshirwork)
|
|
- Enh #282: Allows customization of controller namespace (maxxer)
|
|
- Enh #303: Added French translation (pde159)
|
|
- Fix #304: Fixed broken regex character class (CheckeredFlag)
|
|
|
|
## 1.1.4 - February 19, 2018
|
|
|
|
- Enh: Check enableEmailConfirmation on registration (faenir)
|
|
- Fix #154: Fix DateTime constructor with Unix timestamps (tonydspaniard)
|
|
|
|
## 1.1.2-3 - February 9, 2018
|
|
|
|
- Bug: Bugfix for Model events UserEvent::EVENT_BEFORE_CONFIRMATION and UserEvent::EVENT_AFTER_CONFIRMATION (ajmedway)
|
|
- Bug: Bugfix for Model events UserEvent::EVENT_BEFORE_CREATE and UserEvent::EVENT_AFTER_CREATE (ajmedway)
|
|
- Enh #137: Added the ability to make `enableAutologin` configurable (pappfer)
|
|
- Enh #135: Added Estonian translation (tonisormisson)
|
|
- Bug #133: Fix user search returning no results in admin page (phiurs)
|
|
- Bug #125: Fix validation in non-ajax requests (faenir)
|
|
- Bug #122: Fix wrong email message for email address change (liviuk2)
|
|
- Bug #102: Implemented password expiration feature (maxxer)
|
|
- Enh #143: Introduced "conflict" configuration in composer.json (maxxer)
|
|
- Enh #145: Allowed the `+` sign in username (maxxer)
|
|
- Bug #9: Documentation about migration from Dektrium tools (maxxer)
|
|
- Bug #110: Honor `enableFlashMessages` in `PasswordRecoveryService` (maxxer)
|
|
|
|
## 1.1.1 - November 27, 2017
|
|
|
|
- Bug #115: Convert client_id to string because pgsql fail with type convertion (Dezinger)
|
|
- Bug #119: Security fix: add AccessControl to RuleController (Dezinger)
|
|
- Enh #120: 2FA i18n russian translation (Dezinger)
|
|
- Bug #111: Fix migration for PostgreSQL DBMS (MKiselev)
|
|
- Bug #106: Correct exception value returned in `MailEvent::getException` (kartik-v)
|
|
- Enh #99: Added German translation (jkmssoft)
|
|
- Enh #100: Added pt-BR translation (gugoan)
|
|
- Enh #105: Consolidate 2fa messages (maxxer)
|
|
- Fix #108: Use main logger app (tonydspaniard)
|
|
- Enh #109: Make use of better classes names (tonydspaniard)
|
|
|
|
## 1.1.0 - October 22, 2017
|
|
|
|
- Enh #91: Documentation for Mail events (kartik-v)
|
|
- Enh #79: Enhancements to Mailer exception handling and events (kartik-v)
|
|
- Fix #85: External links should open in a new tab|window (eseperio)
|
|
- Enh #23: Provide administrator with an option to reset user password (tonydspaniard)
|
|
- Enh #55: Provide google recaptcha mechanism (tonydspaniard)
|
|
- Fix #20: Allow the assignment of a role on user creation via console (tonydspaniard)
|
|
- Fix #59: Add instructions to add rbac migration path (tonydspaniard)
|
|
- Fix #68: Fix user events documentation and events raised from User model (tonydspaniard)
|
|
- Fix #69: Log level when user can't register should be L_ERROR (tonydspaniard)
|
|
- Enh #81: Update `AccessRuleFilter` to evaluate `roleParams` (kartik-v)
|
|
- Enh #56: Added two factor authentication (tonydspaniard)
|
|
- Fix #63: Fix selectize version (tonydspaniard)
|
|
- Enh #65: Updated Romanian translation (mrbig00)
|
|
- Enh #61: Updated Russian translation (faenir)
|
|
- Enh #70: Allow permission-permission parent-child relationship (Philosoft)
|
|
- Enh #82: Updated Polish translation (bizley)
|
|
- Enh #83: Updated Russian translation (Katenkka)
|
|
- Fix #87: Fix wrong documentation info (tonydspaniard)
|
|
- Fix #86: Fix view location bug (tonydspaniard)
|
|
|
|
## 1.0.13 - August 12, 2017
|
|
|
|
- Fix #49: Fix wrong call of method make() for set attributes (MKiselev)
|
|
- Enh #46: Use safeUp()/safeDown() instead up()/down() in migrations (MKiselev)
|
|
- Fix #51: Typo fix rememberLoginLifeSpan to rememberLoginLifespan (MKiselev)
|
|
- Fix #58: Last login fix (pappfer)
|
|
|
|
## 1.0.12 - August 6, 2017
|
|
|
|
- Bug Fix: Modify ResetPasswordService to forcely update password_hash field (tonydspaniard)
|
|
- Bug Fix: Fixed wrong routing misspell (tonydspaniard)
|
|
- Enh #41: Remove deprecated package yii2-codeception (tonydspaniard)
|
|
- Enh #45: Added option to display the password to the welcome email (tonydspaniard)
|
|
- Fix #44: Check if the password is empty instead for null value (tonydspaniard)
|
|
- Fix #43: Added Table options according to driver type (tonydspaniard)
|
|
- Fix #42: Allow setting permissions as children to roles (kurounin)
|
|
|
|
## 1.0.10-11 - July 25, 2017
|
|
|
|
- Fix #37: Fix bower alias in test environment (tekord)
|
|
- Enh #32: Added Italian Translation (maxxer)
|
|
- Fix #30: Prefill username and email in SettingsForm (mattheobjornson)
|
|
- Enh #39: Added `last_login_at` field to user table (pappfer)
|
|
|
|
## 1.0.9 - July 19, 2017
|
|
|
|
- Enh #22: Added impersonation feature (tonydspaniard)
|
|
|
|
## 1.0.8 - July 16, 2017
|
|
|
|
- Enh #25: Added option to manage rules (tonydspaniard)
|
|
- Enh #25: Added SelectizeDropDownList widget to Role and Permission forms (tonydspaniard)
|