Version 3.1.2

Released 2019-09-27.

Improvements

• [ONEP-1657] - OpenId post-login-redirect script sometimes calls callback twice; added a check to cover some corner cases

Version 3.1.1

Released 2019-09-25

Updated trivore-common utility library to improve text message sending resiliency.

Version 3.1

Released 2019-09-11

After certification, this release got us back to track with both adding new features, improving current ones, and there was also a bug which got fixed. The relevant changes are listed below.

New Features

1. By default, hide Personal ID Code in User Editor, viewing requires confirmation step. This is a requested control to minimise unnecessary viewing of most sensitive personal information. Same hiding will be added to other fields later, if deemed necessary.

2. Artificial API request slowdowns (for account create), configurable per client. This is both an control and a mitigation to prevent excess number of new accounts created by malfunctioning client. Malfunctioning could also happen in certain network error situations.

3. Subscription webhook support. I.e. trigger external application on change. We already had this for Contracts, and now added it for Subscritions. This way any changes are notified instantly to external apps, and they do not have to poll anything.

4. Product Catalog webhook support. I.e. trigger external application on change. Changes are notified nearly instantly. This is related to the optional/external Commerce and Product Management module.

Improvements

1. Webhooks Enable and Lock settings checkboxes to editor. Enable is for easier admin control, if a webhook must be disabled for service or troubleshooting. Lock is to protect from human editing errors.

2. Show default max access token and refresh token validity times in openid connect editor. This is for informational purposes mostly, yet it is an important information for developers.

3. To assist troubleshooting, add test connection button to "suomi.fi valtuudet" settings view

Bug fixes

1. Prevent duplicate emails through SAML IdP if duplicate emails are not allowed in namespace. This was a nasty one to find.