v2024.12.13

What's Changed

• Upgrade sqlparse based on dependabot security warning by @tznamena in #606
• Upgrade django based on dependabot security alerts by @tznamena in #605
• Adding requirements file for resource_registry by @john-westcott-iv in #633
• Adding help_text_check application by @john-westcott-iv in #631
• Auto start/stop postgres w/ tox by @bhavenst in #632
• 📦 Implement tokenless publishing to PyPI by @webknjaz in #598
• Remove social-auth-app-django from requirements/requirements_resource……_registry.in by @djyasin in #643
• Alter permission on fallback cache temp file and variablize path by @john-westcott-iv in #627
• [Low Priority] Add previous awx doc for oauth2_provider by @john-westcott-iv in #383
• More robust trust proxy header handling by @chrismeyersfsu in #454
• Fixing the logger for googla_oath authenticator by @john-westcott-iv in #621
• AAP-30325 Downgrade reverse-sync log to debug by @AlanCoding in #645
• Fix release.yml, redefinition of top-level "env" by @relrod in #644
• [oauth2_provider] Hash access and refresh tokens by @relrod in #641
• [Low Priority] View documentation by @john-westcott-iv in #374
• Fix issue where RADIUS auth logged to root logger by @AlanCoding in #637
• Docs(authentication): Mention the case sensitivity of authenticator_map definitions by @BrennanPaciorek in #649
• fix: handle missing RESOURCE_SERVICE_PATH in sync task by @Alex-Izquierdo in #624
• Add example svc to service_type by @TheRealHaoLiu in #651
• Allow role assignment queries to use .only by @AlanCoding in #482
• feat(oauth2_provider): check for OAuth2ScopePermission on all APIViews by @BrennanPaciorek in #636
• Support modifying groups claim for social auth by @markafarrell in #640
• Alter how we detect username from a social authenticator by @john-westcott-iv in #622
• Only trust last entry in x-forwarded-for by default by @john-westcott-iv in #575
• Only allow x-trusted-proxy header to be valid for so long by @john-westcott-iv in #574
• Model import fix by @Kuppjaerk in #646
• Handle authenticator slug collision by @bhavenst in #489
• fix(lib.validation): properly validate ca-signed keypairs by @BrennanPaciorek in #652
• Apply service_id for user if creating from JWT data by @AlanCoding in #612
• Help text cleanup by @dmzoneill in #638
• Enable/Disable authentication maps by @dmzoneill in #530
• SAML fixes by @relrod in #654
• Allow registering models via a setting by @AlanCoding in #533
• Adding missing help_text and check by @john-westcott-iv in #647
• Fix(lib.cache): apply fallback cache fix, fix tests by @BrennanPaciorek in #656
• Do not error when missing some JWT item by @AlanCoding in #659
• Migrate AWX utility for slow method logging to DAB by @AlanCoding in #660
• AAP-36569 📦 Always compute version while releasing by @webknjaz in #663
• AAP-35559 Change logging level from info to debug when JWT token header is not present in the request. by @tyraziel in #668
• AAP-36328 Remove DAB validation of service type by @bhavenst in #669
• Load migration modules very python-like, handle replaces by @AlanCoding in #670
• AAP-35609 Allow for ServiceTokenAuth in IsSuperUserOrAuditor by @john-westcott-iv in #665
• Restrict DAB RBAC post-migrate to finished migrations by @AlanCoding in #662
• fix(authenticator.utils): get ID_KEY from authenticator configuration, not defaults by @BrennanPaciorek in #672
• AAP-36315, docs: Add GitHub PR Template by @art-tapin in #673
• Avoid running migration check multiple times in tests by @AlanCoding in #671
• update dependencies by @jctanner in #667
• AAP-37490 fix id key by @john-westcott-iv in #675
• Convert to CommandError by @Kuppjaerk in #666
• Add the checkout action to the release job so it can access the playbook by @jctanner in #677
• Add the python and deps setup steps to the final release job. by @jctanner in #678

New Contributors

• @webknjaz made their first contribution in #598
• @markafarrell made their first contribution in #640
• @Kuppjaerk made their first contribution in #646
• @dmzoneill made their first contribution in #638
• @tyraziel made their first contribution in #668
• @art-tapin made their first contribution in #673

Full Changelog: 2024.10.17...2024.12.13

v2024.10.17

What's Changed

• Bump upload-artifact to v4 by @mabashian in #610
• Remove is_superuser from resource API by @fosterseth in #596
• Add authentication backend for renamed user accounts by @newswangerd in #611
• [RR] Send auth backend in auth_code payload by @relrod in #609
• Add option to automatically move users to a new authenticator by @newswangerd in #601
• format string missing f by @kdelee in #608
• Force social-auth-app-django to 5.4.1 by @bhavenst in #615
• Pass requesting user into validate role assignment by @fosterseth in #614
• Only return entries for local service_id by @AlanCoding in #616
• Redis flushdb by @john-westcott-iv in #617
• JWT Auth ignore is_superuser value if False by @fosterseth in #623
• Update LDAP user search test by @bhavenst in #620
• [Alt 1] Flip default of reverse sync to True by @AlanCoding in #618
• They say sometimes I don't give an f. Fix that. by @relrod in #629
• Groundwork for better DRF pages for services by @relrod in #628

Full Changelog: 2024.9.4...2024.10.17

v2024.9.4

What's Changed

• HUB is removing org.users and team.users by @jctanner in #591
• Dont require service path by @fosterseth in #597
• Several bug fixes for reverse sync by @relrod in #589
• Attempt to lock down dependencies by @relrod in #585
• Revert #585 by @relrod in #600
• Update social_auth.py to move log to debug by @kdelee in #604
• Add upload of Junit XML test result files by @tznamena in #599
• Add some nuance to the on-off logic for RESOURCE_SERVER by @AlanCoding in #603

New Contributors

• @tznamena made their first contribution in #599

Full Changelog: 2024.8.28...2024.9.4

v2024.8.28

What's Changed

• Add oidc_alt_key to auth code by @newswangerd in #586
• Add fallback cache by @bhavenst in #572
• Ignore permissions given twice in migrations by @AlanCoding in #584
• Do not run resource registry stuff if migrations are not finished by @AlanCoding in #557
• [AAP-27692] Add middleware that apps can use to handle graceful timeout signal by @kdelee in #581
• Adding additional unit tests by @john-westcott-iv in #590
• [RR] Do not try to redirect to null resource server by @relrod in #592

New Contributors

• @kdelee made their first contribution in #581

Full Changelog: 2024.8.26...2024.8.28

v2024.8.26

What's Changed

• [resource registry] Allow for obtaining an auth code given username/password payload by @relrod in #580
• Revert "Pin versions for all optional dependencies" by @john-westcott-iv in #588

Full Changelog: 2024.8.22...2024.8.26

v2024.8.22

What's Changed

• fix: coerce reading saml request as via https if REDIRECT_IS_HTTPS by @BrennanPaciorek in #570
• RBAC content filter should consider the app_label. by @jctanner in #573
• Give 400 respones when roles violate RBAC validators by @AlanCoding in #563
• Delete resources so reverse migrations will work by @AlanCoding in #576
• Add tests for more than 1 team and org member roles by @AlanCoding in #577
• Add service backed SSO by @newswangerd in #565
• Use updated heuristic for identifying locally managed roles by @AlanCoding in #562

Full Changelog: 2024.8.19...2024.8.22

v2024.8.19

What's Changed

• Allow turning off role view requirement with setting by @AlanCoding in #566
• Switch service auth class to custom header by @newswangerd in #567
• Manage team memberships in hub jwt consumer. by @jctanner in #568
• Reverse-syncing of resources to a resource server by @relrod in #548
• Add method to get status from redis by @john-westcott-iv in #545
• fix: Replace warning with info/debug messages on jwt.common.auth by @rochacbruno in #569
• Removing CODEOWNERS by @john-westcott-iv in #571
• Add SSO and partially migrated flag to Resource API by @newswangerd in #564

Full Changelog: 2024.8.9...2024.8.19

v2024.8.9

What's Changed

• Skip further validation on team parent model if it has no parent model. by @jctanner in #558
• Allow removing permissions even when they are invalid by @AlanCoding in #559
• resource_registry: sync organization and team descriptions across services by @BrennanPaciorek in #447
• Fix bug where is_registered did not consider app_label by @AlanCoding in #560

Full Changelog: 2024.8.8...2024.8.9

v2024.8.8

What's Changed

• Fixing issue when unsetting redis client ssl files by @john-westcott-iv in #539
• Nest the dynamic settings inclusion into a method by @AlanCoding in #531
• Altering Redis client to be able to get access directly to a Redis or RedisCluster object by @john-westcott-iv in #546
• Fix validation bug creating invalid custom system roles by @AlanCoding in #532
• Returning a DABRedis instead of a raw Redis by @john-westcott-iv in #550
• Fix bug with reference to id as opposed to pk by @AlanCoding in #538
• fix: Settings logic rebind installed_apps when adding new items. by @rochacbruno in #552
• Fix auto-creation of CALLBACK_URL for AzureAD by @AparnaKarve in #544
• Fix auto-creation of CALLBACK_URL for Google OAuth2 by @AparnaKarve in #547
• Test concrete inheritance and fix error with nested inheritance by @AlanCoding in #551
• Ensure that LDAP User Search field can be set to null or an empty list by @AparnaKarve in #554
• Make stop-postgres target remove the container as before by @AlanCoding in #549
• Altering redis client - breaking change by @john-westcott-iv in #535
• Send post_migrate signal from DAB RBAC by @AlanCoding in #556

New Contributors

• @AparnaKarve made their first contribution in #544

Full Changelog: 2024.8.1...2024.8.8

v2024.8.1

What's Changed

• Adding setting to prevent modification of settings in AoC environment by @john-westcott-iv in #519
• [Low Prio] Add uwsgi + nginx + ssl to the compose stack by @jctanner in #508
• Error if Delete permission is issued without Change permission by @thedoubl3j in #520
• fix: Skip _system user when syncing resources by @rochacbruno in #521
• Prepare 2 User managers to exclude _system user by default by @slemrmartin in #522
• Adding get_relative_url and get_fully_qualified_url by @john-westcott-iv in #505
• Fix new user getting created at every login by @john-westcott-iv in #523
• Fix SAML authenticator to set ACS url as CALLBACK_URL by @john-westcott-iv in #525
• Re-enable black and blacken files that got missed in later PRs by @relrod in #529
• [get_fully_qualified_url] Fallback to crum request by @relrod in #528
• Handle unsupported media type in django-oauth-toolkit by @cutwater in #537
• Add bits necessary to satiate pulpcore's openapi generator. by @jctanner in #542
• Fix authenticator order by @trucdg in #541

Full Changelog: 2024.7.17...2024.8.1