What's Changed

Major changes

• Check for needed parameters before constructing an auth failed response. by @thijskh in #1289
• Support overriding StepUp EntityId by @MKodde in #1279
• Do not generate per-keyId metadata links for non-IdP metadata by @thijskh in #1275
• When starting an engine IdP debug authentication, force authentication at the IdP by @thijskh in #1277
• Improve social previews of EB URLs by @thijskh in #1284

Other changes

• Bump @babel/traverse from 7.22.11 to 7.23.2 in /theme by @dependabot in #1276
• Bump browserify-sign from 4.2.1 to 4.2.2 in /theme by @dependabot in #1278
• Bump es5-ext from 0.10.62 to 0.10.64 in /theme by @dependabot in #1287

Full Changelog: 6.13.0...6.14.0

• Move most HTML from translatable strings into Twig templates, where it belongs. This makes the code more robust and predictable, and reduces the chances of cross site scripting injections. Some translatable strings were changed, see upgrade notes.
• Install a NPM package update.

What's Changed

• Feature/move cypress tests by @quartje in #1268
• Substitue NPM for Yarn in makeRelease.sh by @MKodde in #1270
• Option to add ribbon to engineblock pages indication which environmen… by @thijskh in #1269
• Request Access bugfixes by @thijskh in #1271

Full Changelog: 6.12.1...6.12.2

Repair tag-release breakage.

What's Changed

• Display the correct privacy statement url on consent screen by @MKodde in #1246
• Move Socket IO to the devDependencies by @MKodde in #1251
• Show back to SP link on error page by @MKodde in #1240
• Avoid PHP notice logs (when enabled) about session already started by @thijskh in #1228
• Upgrade build tooling by @MKodde in #1252
• Fix WAYF placeholder.png having uninterpolated assetsVersion variable by @thijskh in #1253
• fixed variables in metadata md:organisation not translating by @ArnoutvdKnaap in #1256
• Inject the logger on StepupDecision by @MKodde in #1254
• Bump word-wrap from 1.2.3 to 1.2.4 in /theme by @dependabot in #1258
• Use a prebuilt Docker image from OpenConext-Baseimages for CI by @quartje in #1255
• Bump tough-cookie and @cypress/request in /theme by @dependabot in #1261
• Improve MDUI Logo usage by @MKodde in #1264
• Specify data types of roles columns by @MKodde in #1262

Full Changelog: 6.11.0...6.12.0

What's Changed

• Avoid generating PHP notices when calling metadata API for IdP without SLO by @thijskh in #1229
• If we have a request ID, it's by definition not unsolicited by @thijskh in #1226
• Bump guzzlehttp/psr7 from 1.9.0 to 1.9.1 by @dependabot in #1235
• Support mdui:PrivacyStatementURL in EngineBlock by @MKodde in #1234
• Bump engine.io from 6.4.1 to 6.4.2 in /theme by @dependabot in #1242
• Update regex for URNs by @tvdijen in #1244
• Upgrade dev-dependencies by @tvdijen in #1243
• Show an Unknown SP error page also when invoking the unsolicited endpoint by @thijskh in #1238
• User's displayname is no longer used anywhere by @thijskh in #1237
• Feature: configurable metadata by @tvdijen in #1103
• Bump socket.io-parser from 4.2.2 to 4.2.3 in /theme by @dependabot in #1247
• Refuse to process incoming metadata push with 0 connections in it. by @thijskh in #1249

Full Changelog: 6.10.0...6.11.0

What's Changed

• No longer run security checker as part of integration tests by @thijskh in #1227
• Support ForceAuthn to Stepup Gateway callout by @MKodde in #1230

Full Changelog: 6.9.2...6.10.0

Auto generated release. Please update these release notes manually.

What's Changed

• Bump json5 from 2.2.1 to 2.2.3 in /theme by @dependabot in #1216
• Log in log_logins if IDPList has been used by @thijskh in #1217
• Prefer [] operator for adding one element to an array by @thijskh in #1215
• Remove ini-file leftover by @tvdijen in #1218
• Display no metadata endpoints with key default by @thijskh in #1222
• Clear error unknown keyid by @thijskh in #1221
• Limit value length of metadata fields to max 255 chars. by @thijskh in #1219
• Upgrade cypress logging in CI by @Badlapje in #1158
• Move metadata certificate endpoint to Symfony by @thijskh in #1220
• Uninstall the Sensio distribution bundle by @MKodde in #1206
• Enable skipped MultipleSingleSignOn scenario by @MKodde in #1225
• Bump tar and node-sass in /theme by @dependabot in #1224
• Fix ShibMD scope tests. by @thijskh in #1233
• For stepup callout, force use of EB's default key by @thijskh in #1231

Full Changelog: 6.9.1...6.9.2

What's Changed

• Remove broken sorting code by @tvdijen in #1207
• Bump socket.io-parser from 4.0.4 to 4.0.5 in /theme by @dependabot in #1208
• Bump engine.io from 6.2.0 to 6.2.1 in /theme by @dependabot in #1210
• GHA: Remove xdebug from the FPM images by @quartje in #1213
• Improve logging of RequesterID feature and add tests by @thijskh in #1212
• Set default value on deleted_at column by @MKodde in #1211

Full Changelog: 6.9.0...6.9.1

What's Changed

• Support LoA 1.5 by @MKodde in #1198. This requires renumbering the stepup.loa.mapping indices in parameters.yml from (1,2,3) to (10,15,20,30).
• Make sure rememberChoice is called by @ArnoutvdKnaap in #1199
• Bump twig/twig from 2.14.11 to 2.15.3 by @dependabot in #1200
• Clean up support for 'special' eb entities in service registry by @thijskh in #1205

New Contributors

• @ArnoutvdKnaap made their first contribution in #1199

Full Changelog: 6.8.1...6.9.0