Skip to content

Latest commit

 

History

History
198 lines (120 loc) · 5.15 KB

CHANGELOG.md

File metadata and controls

198 lines (120 loc) · 5.15 KB
Raw

Unreleased

  • Change the link on the 'unauthorised' page to point to modern GOV.UK.

14.3.0

  • Set a user agent for the Omniauth OAuth2 client.

14.2.0

  • Allow further customising the OAuth2 Faraday connection_opts.
  • Reduce the default open_timeout to 5 seconds.

14.1.1

  • Add missing require 'gds-sso/version'.

14.1.0

  • Set a user agent for the OAuth client.

14.0.0

  • Remove the deprecated require_signin_permission! method.

13.6.0

  • Provide option to allow applications to specify extra permissions that the mock api user needs. The functionality updates the dummy api user to include the permissions if they do not currently have those permissions.
  • Update README to include instructions on how to set up the extra permissions for the mock api user.

13.5.1

  • Update the deprecation warning for require_signin_permission!.

13.5.0

  • Provide option to run in an api_only mode, which happens implicitly if you are using Rails 5 in api_only mode. This disables the routes and parts of this gem used in the oauth redirect dance.

13.4.0

  • Use the name of signon instead of signonotron2 since it was renamed.
  • Allow running a mock sso session in a Rails production environment via ENV var - to make it easier to test apps in Rails production environment.

13.3.0

  • Deprecate require_signin_permission!. The signin permission is no longer optional, and signon itself manages this during oauth handshake (see: RFC 78)
  • README fix

13.2.0

  • Remove Rails 3 specific cruft #114

13.1.0

  • Permit one or more permissions #112

13.0.0

  • Breaking: Drop support for Ruby 2.1, Rails 4.1 #104
  • Breaking: Identify API calls via the presence of a bearer token #107
  • Support Rails 5 #105

12.1.0

  • Add support for caching the bearer token request to Signon

12.0.0

Breaking changes introduced in #95:

  • Drop support for Ruby 1.9.3
  • Drop support for Rails 4.0
  • Add support for Ruby 2.3.0

11.2.1

  • Use test for maximum compatibility of test-unit/minitest User linter

11.2.0

  • Add a test-unit/minitest compatible linter for validating that the User model is compatible with GDS SSO
  • Add disabled attribute expectation to the existing RSpec shared example

11.1.0

  • Pin dependencies to prevent updating to non-compatible versions

11.0.0

  • Rerelease of 10.1.0

10.1.0 (includes a breaking change)

  • Breaking change: Add support for organisation_content_id on the user model

10.0.1

  • Fix the user model linter to work with a uid column defined as NOT NULL
  • Strengthen lint specs around user update_attributes method

10.0.0

  • Add a disabled field to GDS::SSO::User to reflect Signon user state. Breaking change: Requires consuming apps to add a disabled field to their user model

9.4.0

  • Add an RSpec shared example for validating that the User model in the app does enough to work with GDS SSO. To use it:

    require 'gds-sso/lint/user_spec'

describe User do
  it_behaves_like "a gds-sso user class"
end

9.3.0

  • Include oauth client_id when requesting user details from signon. This allows signon to verify that the token used belongs to the app making the request. Sending this id will become mandatory in future.

9.2.7

  • update/reauth requests get a content-type of 'text/plain' in responses

9.2.6

  • Adds support for string timestamps in serialized sessions (Rails 4.1).
  • New sessions are created using ISO 8601 string timestamps.

9.2.5

  • Change find_for_gds_oauth to find by UID then fall-back to email This fixes an issue when users logging into preview are duplicated as UIDs are not synced.

9.2.4

  • Fix bug in creation of dummy API user in test mode

9.2.3

  • Minor bugfix to allow building of gems such as govuk_content_models which do not load rails.

9.2.2

  • Includes fix to get the mock_gds_sso_api_access strategy working in development for apps that don't have a role attribute on User.

9.2.1

  • Using User#where instead of User#find_by_email in mock gds api user warden strategy, to make it compatible with apps using mongoid.

9.2.0

  • UX fix to check whether remotely signed out user signed-in again to let them continue. otherwise, ask them to login again.

8.0.0

  • The controllers provided by gds-sso no longer inherit from an application's ApplicationController, and instead inherit directly from ActionController::Base.

7.0.0

  • Changed "organisation" to "organisation_slug"

6.0.0 (Not recommended, see version 7.0.0)

  • Changed "organisations" (array) to "organisation" (string)

5.0.0 (Not recommended, see version 7.0.0)

4.0.0