Skip to content

Latest commit

 

History

History
226 lines (191 loc) · 12.5 KB

CHANGELOG.md

File metadata and controls

226 lines (191 loc) · 12.5 KB

CHANGELOG

dev

  • Enh: Changed exception thrown in PasswordRecoveryService from RuntimeException to NotFoundException. (eseperio)
  • New #553: created Da\User\AuthClient\Microsoft365 auth client (edegaudenzi)
  • Ehh: Added SecurityHelper to the Bootstrap classMap
  • Fix #546: The profile/show page must not be visible by default, implement configurable policy (TonisOrmisson)
  • Fix #397: No more fatal Exceptions when connecting to already taken Social Network (edegaudenzi)
  • Ehh: Added option to pre-fill recovery email via url parameter (TonisOrmisson)
  • Ehh: Fixed pretty-url rules not initialized for console apps (TonisOrmisson)

1.6.3 Mar 18th, 2024

  • Fix: Update last_login_at and last_login_ip on social networt authenticate (e.luhr)
  • Enh: Keycloak auth client (e.luhr)
  • Fix: Social Network Auth (eluhr)
  • Enh #532: /user/registration/register now shows form validation errors
  • Enh: Allow/suggest new v3 releases of 2amigos 2fa dependencies: 2fa-library, qrcode-library (TonisOrmisson)
  • Ehh: Added all the classes to the Bootstrap.php classMap
  • Enh: Added option to disable viewing any other user's profile for non-admin users (TonisOrmisson)
  • Ehn: updated Estonian (et) translation by (TonisOrmisson)
  • Ehn: use recaptcha.net instead of google.com (Eseperio)

1.6.2 Jan 4th, 2024

  • Fix: Two Factor Authentication - Filter - Blocks even when two factor authentication is enabled
  • Fix: update Dutch (nl) translations (squio)
  • Enh: possibility to limit the depth of the recursion when getting user ids from roles (mp1509)
  • Fix: UserSearch avoid fields name conflict if joined with other tables (liviuk2)
  • Fix: PasswordExpireService return false when user model attribute "password_changed_at" is already set at null.
  • Enh #524: Two Factor - Authenticator App - offer a "Can't scan?" fallback
  • Fix #530: Welcome email: reported Password is now HTML-encoded
  • Ehn: updated french translation by @arollmann

1.6.1 March 4th, 2023

  • Fix: use correct password recovery url in welcome mail and add functionality to plain text version of the mail (@eluhr)
  • Fix: correct viewPath error in LoginWidget (niciz)
  • Enh: possibility to call all the api endpoints with either id or username or email (liviuk2)
  • Fix: use configured User model in SecurityController 2FA confirmation (jussiaho)
  • Enh: possibility to get user ids from roles recursively (mp1509)

1.6.0 January 9, 2023

WARNING: this release (long time due) makes a step forward in PHP compatibility, leaving behind obsolete versions. While yii2-usuario should still work without issues on 5.6, from now on testing and development will look forward and maintain only >=7.4 versions.

There's also a security issue for 2FA tokens: settings/two-factor route wasn't checking for the currently logged in user, so any authenticated account could access to all user's 2FA root code. If you cannot upgrade, check 24d5d5744fe0.

There's a change in flash messages handling, please see #391.

  • Updated translations: IT (maxxer), PL (bizley)
  • Enh: update welcome and confirmation email ending line (maxxer)
  • Enh #361: Record and manage user session history (maranqz)
  • Fix: replace non-working travis build with working github actions build (TonisOrmisson)
  • Fix: user login events not triggered on ajax requests (TonisOrmisson)
  • Enh: Added minimum requirements when a new password is automatically generated (MatteoF96)
  • Fix #380: Avoid rewriting AccessRule::matchRole (maxxer)
  • Fix #378: Add module attribute 'disableIpLogging' (jkmssoft)
  • Enh #387: Added Persian translation (hadi-aj)
  • Fix #384: Delete flash messages after consuming (cgsmith)
  • Fix #381: Renamed events in UserEvent to avoid conflicts with events in FormEvent (Slayvin)
  • Enh: Added SK translations (snickom)
  • Fix: allow password_changed_at to be saved when reseting password (p4blojf)
  • Fix #430: Moved EVENT_BEFORE_PROFILE_UPDATE to correct place (eluhr)
  • Enh #456: Added filter to allow forcing 2FA for specific user roles (acordeddu)
  • Enh #412: Allow role names to support UTF-8 chars (4khobta)
  • Enh #448: Remove deprecated SwiftMailer, use SymfonyMailer instead (TonisOrmisson)
  • Enh #428: Translations of the placeholders in the login widget (anapaulaxenon)
  • Update PHP-CS-Fixer configuration to new version (maxxer)
  • Fix #391: Always create flash messages, allow enableFlashMessages only to dictate display (ajmedway)
  • Enh #458: Multiple 2FA channels (email, sms) (acordeddu)
  • Fix #432: Fix documentation overlap by shortening page names (cgsmith)
  • Enh #472: implement module viewPath in all views instead of static file reference (tonisormisson)
  • Fix: Clear 2FA auth key when feature is disabled by user
  • Fix: check user before accessing 2FA code
  • Enh: added AdminController REST controller (MatteoF96)
  • Enh: added method setUser for LoginForm model (liviuk2)
  • Enh: user model emailTrim validator only if not empty #486 (liviuk2)
  • Fix #461: TimeZoneHelper: don't use floats for columns that could be array keys (maxxer)

1.5.1 April 5, 2020

  • Fix #370: Extending view fix (effsoft)
  • Fix #306: Add event for failed login (ivan-cc)
  • Fix #347: Only pass fields known to User model in registrationControl->actionRegister() (BillHeaton)
  • Fix #346: Update ReCaptcha guide to not use AJAX (BillHeaton)
  • Fix #345: Update ReCaptcha guide to add scenarios() in recoveryForm (BillHeaton)
  • Fix #307: Fix French translation (arollmann)
  • Fix #316: Fix new response from Google OAuth Api (Julian-B90)
  • Fix #321: Fix new response from LinkedIn OAuth Api (tonydspaniard)
  • Fix #322: Fix boolean values in migrations for SQL server (tsdogs)
  • Enh #325: Added support for sqlite3 (santilin)
  • Fix #326: Fix rule for the user auth_tf_enabled field (santilin)
  • Fix #290: Fix wrong email message for resending confirmation (tonydspaniard)
  • Enh #269: Added help documentation to console commands (tonydspaniard)
  • Fix #244: Fix forced inclusion of a suggested class (tonydspaniard)
  • Fix user event triggering in admin controller (maxxer)
  • Enh #331: Added Ukrainian translations (kwazaro)
  • Enh #324: Added option to restrict user assignments to roles only (CheckeredFlag)
  • Enh #224: Added option to require consent (eseperio)
  • Enh: Added classMap for MailService (necrox87)

1.5.0 April 19, 2019

  • Fix: Fix condition in EmailChangeService (it was always false) (borisaeric)
  • Fix #198: Updated translations by quique, bizley, TonisOrmisson, guogan, Dezinger, maxxer, wautvda, mrbig00, fabiomlferreira, WeeSee
  • Fix #209: Doc fix. allowAccountDelete default value is false (Dezinger)
  • Fix #211: Migration boolean default value set to FALSE instead 0 (Dezinger)
  • Fix #213: Migration sql syntax fix (Dezinger)
  • Enh #131: 2FA libraries now optional (maxxer)
  • Enh #187: Add GDPR features (Eseperio)
  • Enh #184: Add last-login-ip capture capability (kartik-v)
  • Enh: Changed View::render() calls in views to use absolute paths (ajmedway)
  • Fix #169: Fix bug in ReCaptchaComponent (BuTaMuH)
  • Fix #168: Fix spelling in russian language (EvgenyOrekhov)
  • Fix #195: UserCreateService: check if we're from web before setting flash message (maxxer)
  • Enh: Improvements to the admin responsive design (wautvda)
  • Enh: Add controller module class reference (TonisOrmisson)
  • Enh: Replace the deprecated InvalidParamException in ClassMapHelper (TonisOrmisson)
  • Fix #242: Add POST filter for admin/force-password-change action (bscheshirwork)
  • Enh #251: Use asset-packagist instead of fxp-asset if you run it as a module without having a project around (bscheshirwork)
  • Fix #252: Delete check for unexpected property allowPasswordRecovery for resend email by admin (bscheshirwork)
  • Fix #254: Rename GDPR properties to lowerCamelCase style (bscheshirwork)
  • Enh #253: Add PHPDoc for events class (bscheshirwork)
  • Fix #258: Rename GDPR delete action to lowerCamelCase/dash style (bscheshirwork)
  • Fix #271: Add closure support for from email address; Change default sender to supportEmail (bscheshirwork)
  • Fix #276: Fix missing translatable strings
  • Enh #249: Show message email send if possible any time on reset password request (bscheshirwork)
  • Enh #282: Allows customization of controller namespace (maxxer)
  • Enh #303: Added French translation (pde159)
  • Fix #304: Fixed broken regex character class (CheckeredFlag)

1.1.4 - February 19, 2018

  • Enh: Check enableEmailConfirmation on registration (faenir)
  • Fix #154: Fix DateTime constructor with Unix timestamps (tonydspaniard)

1.1.2-3 - February 9, 2018

  • Bug: Bugfix for Model events UserEvent::EVENT_BEFORE_CONFIRMATION and UserEvent::EVENT_AFTER_CONFIRMATION (ajmedway)
  • Bug: Bugfix for Model events UserEvent::EVENT_BEFORE_CREATE and UserEvent::EVENT_AFTER_CREATE (ajmedway)
  • Enh #137: Added the ability to make enableAutologin configurable (pappfer)
  • Enh #135: Added Estonian translation (tonisormisson)
  • Bug #133: Fix user search returning no results in admin page (phiurs)
  • Bug #125: Fix validation in non-ajax requests (faenir)
  • Bug #122: Fix wrong email message for email address change (liviuk2)
  • Bug #102: Implemented password expiration feature (maxxer)
  • Enh #143: Introduced "conflict" configuration in composer.json (maxxer)
  • Enh #145: Allowed the + sign in username (maxxer)
  • Bug #9: Documentation about migration from Dektrium tools (maxxer)
  • Bug #110: Honor enableFlashMessages in PasswordRecoveryService (maxxer)

1.1.1 - November 27, 2017

  • Bug #115: Convert client_id to string because pgsql fail with type convertion (Dezinger)
  • Bug #119: Security fix: add AccessControl to RuleController (Dezinger)
  • Enh #120: 2FA i18n russian translation (Dezinger)
  • Bug #111: Fix migration for PostgreSQL DBMS (MKiselev)
  • Bug #106: Correct exception value returned in MailEvent::getException (kartik-v)
  • Enh #99: Added German translation (jkmssoft)
  • Enh #100: Added pt-BR translation (gugoan)
  • Enh #105: Consolidate 2fa messages (maxxer)
  • Fix #108: Use main logger app (tonydspaniard)
  • Enh #109: Make use of better classes names (tonydspaniard)

1.1.0 - October 22, 2017

  • Enh #91: Documentation for Mail events (kartik-v)
  • Enh #79: Enhancements to Mailer exception handling and events (kartik-v)
  • Fix #85: External links should open in a new tab|window (eseperio)
  • Enh #23: Provide administrator with an option to reset user password (tonydspaniard)
  • Enh #55: Provide google recaptcha mechanism (tonydspaniard)
  • Fix #20: Allow the assignment of a role on user creation via console (tonydspaniard)
  • Fix #59: Add instructions to add rbac migration path (tonydspaniard)
  • Fix #68: Fix user events documentation and events raised from User model (tonydspaniard)
  • Fix #69: Log level when user can't register should be L_ERROR (tonydspaniard)
  • Enh #81: Update AccessRuleFilter to evaluate roleParams (kartik-v)
  • Enh #56: Added two factor authentication (tonydspaniard)
  • Fix #63: Fix selectize version (tonydspaniard)
  • Enh #65: Updated Romanian translation (mrbig00)
  • Enh #61: Updated Russian translation (faenir)
  • Enh #70: Allow permission-permission parent-child relationship (Philosoft)
  • Enh #82: Updated Polish translation (bizley)
  • Enh #83: Updated Russian translation (Katenkka)
  • Fix #87: Fix wrong documentation info (tonydspaniard)
  • Fix #86: Fix view location bug (tonydspaniard)

1.0.13 - August 12, 2017

  • Fix #49: Fix wrong call of method make() for set attributes (MKiselev)
  • Enh #46: Use safeUp()/safeDown() instead up()/down() in migrations (MKiselev)
  • Fix #51: Typo fix rememberLoginLifeSpan to rememberLoginLifespan (MKiselev)
  • Fix #58: Last login fix (pappfer)

1.0.12 - August 6, 2017

  • Bug Fix: Modify ResetPasswordService to forcely update password_hash field (tonydspaniard)
  • Bug Fix: Fixed wrong routing misspell (tonydspaniard)
  • Enh #41: Remove deprecated package yii2-codeception (tonydspaniard)
  • Enh #45: Added option to display the password to the welcome email (tonydspaniard)
  • Fix #44: Check if the password is empty instead for null value (tonydspaniard)
  • Fix #43: Added Table options according to driver type (tonydspaniard)
  • Fix #42: Allow setting permissions as children to roles (kurounin)

1.0.10-11 - July 25, 2017

  • Fix #37: Fix bower alias in test environment (tekord)
  • Enh #32: Added Italian Translation (maxxer)
  • Fix #30: Prefill username and email in SettingsForm (mattheobjornson)
  • Enh #39: Added last_login_at field to user table (pappfer)

1.0.9 - July 19, 2017

  • Enh #22: Added impersonation feature (tonydspaniard)

1.0.8 - July 16, 2017

  • Enh #25: Added option to manage rules (tonydspaniard)
  • Enh #25: Added SelectizeDropDownList widget to Role and Permission forms (tonydspaniard)