v.1.3.0 - Package Updates, Security Improvements and Improvements to User Management
Notes on breaking changes and functionality updates
This release mainly focused on updating outdated npm packages for security reasons, bugfixing and a revamp to who can update users.
Feature changes
- Only a user administrator on the proper organization can see and update a users details
- Better error descriptions when using the KOMBIT sign up flow
- An additonal ADR algorithm has been added by Sensade
- User administrators can now change the email of a KOMBIT user
Breaking changes
KOMBIT integration
After updating the passport-saml package, the backend now requires the property "KOMBIT_CERTIFICATEPUBLICKEY" for the KOMBIT integration to function.
typeorm update
Typeorm has been updated to a new version. This has changed the way Typeorm is initialized, mainly:
ormconfig.jshas been deleted- Configuration previously found in
ormconfig.jsis moved tosrc/repositories/os2iot.repository.ts
What's Changed
- Introduce GitHub actions for push and PR by @AramAlsabti in #188
- Added "get adr algorithms" endpoint by @MStenkaer in #192
- Fix CVE–2021–44906 by @debricked in #187
- bug: set ssl from env by @AramAlsabti in #197
- Updated passport-saml package by @GufCab in #202
- Updated several outdated packages by @GufCab and @AramAlsabti
- Updated User Management flow by @GufCab
New Contributors
- @MStenkaer made their first contribution in #192
- @debricked made their first contribution in #187
Full Changelog: v1.2.0...v.1.3.0