Still on track with both adding new features, improving current ones, and fixing any bugs found. The relevant changes are listed below.
This list below is for the next, still unreleased release.
New Features
Added auto-generated authorisation types for suomi.fi-valtuudet YPA in use in Finland.
Improvements
Log new user account creation time initial data for easier troubleshooting. We got bit by this in one site. With this improvement, we have this seldom needed, but necessary data point. Sensitive data is not saved, of course.
Datastorage to and UI in Management UI to review existing datastorages. This is an important toold for troubleshooting, and auditing purposes.
Added more Lock settings boxes to protect from human errors.
Internal code refactoring to gain more speed.
Center all views under OpenID authorisation endpoint (incl. user creation, password forgotten view, error views etc.).
Add support for forced authentication for SAML user directories. This ensures that autentication is performed every time user uses SAML user directory authentication and no previous session information is used. Previous behaviour was to cache authentications for a while (time is dependent on external user directory).
Bug fixes
Related to JWKS servlet, some duplicate and unnecessary dependencies (code regression) were removed. This bug never reached production, as it was catched in-flight during development cycle.
Integrated feature: Product management
Refactoring end-points before feature launch. This was the last time we could do it. Practically /sales was just changed to more descriptive /products. Note, /products is primarily for those who want to define their own WebUI to the product management engine we provide.
Added filtering and data searchabilty.
Added /sales end-point to better support web-shops to quickly retrieve all permitted products and prices.