v1.25.1

1.25.1 (2025-10-01)

Bug Fixes

• add ca-certificates to other stage-packages (9e8edc9)
• add ca-certificates to other stage-packages (619bf42)
• deps: update dependency @canonical/react-components to v3 (9094942)
• deps: update dependency @canonical/react-components to v3 (a16496a)
• deps: update dependency axios to v1.12.0 [security] (ce4acfb)
• deps: update dependency axios to v1.12.0 [security] (4e0adfc)
• deps: update dependency axios to v1.12.2 (dbb7406)
• deps: update dependency axios to v1.12.2 (22166fe)
• deps: update dependency axios to v1.8.2 [security] (02e1c8a)
• deps: update dependency axios to v1.8.2 [security] (b658986)
• deps: update dependency react-router to v7.5.2 [security] (f35d3b5)
• deps: update dependency react-router to v7.5.2 [security] (8c05297)
• deps: update dependency vanilla-framework to v4.21.2 (b4aefb6)
• deps: update dependency vanilla-framework to v4.21.2 (3423e0b)
• deps: update go deps (e8e212d)
• deps: update go deps (patch) (b3cdd0a)
• deps: update internal ui dependencies (d12ddc6)
• deps: update internal ui dependencies (0bd898c)
• deps: update internal ui dependencies (minor) (bd84141)
• deps: update internal ui dependencies (minor) (38f2a09)
• deps: update module github.com/go-chi/chi/v5 to v5.2.3 (b2248e9)
• deps: update module github.com/go-chi/chi/v5 to v5.2.3 (f684d28)
• deps: update module github.com/jackc/pgx/v5 to v5.7.6 (d71e469)
• deps: update module github.com/jackc/pgx/v5 to v5.7.6 (3ce92db)
• deps: update module github.com/wneessen/go-mail to v0.7.1 [security] (3442ea5)
• deps: update module github.com/wneessen/go-mail to v0.7.1 [security] (9c461af)
• deps: update module github.com/wneessen/go-mail to v0.7.2 (6ac58fd)
• deps: update module github.com/wneessen/go-mail to v0.7.2 (1a28a58)
• deps: update module google.golang.org/protobuf to v1.36.7 (0bda79b)
• deps: update module google.golang.org/protobuf to v1.36.7 (43ec9fd)
• deps: update module google.golang.org/protobuf to v1.36.8 (6dacf61)
• deps: update module google.golang.org/protobuf to v1.36.8 (a752300)
• deps: update module google.golang.org/protobuf to v1.36.9 (0fce9c4)
• deps: update module google.golang.org/protobuf to v1.36.9 (860a590)
• deps: update ui deps (ab0bab1)
• deps: update ui deps (1bfafe8)
• deps: update ui deps (475db41)
• deps: update ui deps (0b10644)
• deps: update ui deps (36b9509)
• deps: update ui deps (minor) (a6e6640)
• deps: update ui deps (minor) (794802f)
• deps: update ui deps (patch) (ffdb9a6)
• deps: update ui deps (patch) (a2ba112)
• deps: update ui deps (patch) (0d94de5)
• invalid JSON in default IDP configuration (ca3aa68)
• kubectl: Include DSN for postgres database (691c299)
• lint: remove unneeded eslint-disable (7de1970)
• test: fix failing test for login state (e3af777)
• tsconfig: set moduleResolution to bundler (f4c9494)
• update Makefile .PHONYs (adb97a0)
• update Makefile .PHONYs (410ec95)
• use providers instead of idps for IDPCONFIG_NAME (6b2c4c9)
• use correct postgres credentials for goose migrations (9585054)
• various startup bugs (#655) (a0e58be)
• wait for nodes in tests (4650556)

v1.25.0

1.25.0 (2025-07-11)

Features

• add Close method on dbclient (acec456)
• add DataSourceName config for the DB (20fa02f)
• add embedded migrations (ace047a)
• add goose migration sql file + makefile targets (8d743da)
• add migrate CLI command (3542a1a)
• add RoleRepositoryInterface, DBClientInterface and TxInterface (fde0984)
• disable kratos session on logout (5121f0d)
• disable kratos session on logout (e0cb058)
• implement CRUD ops for Groups (76be9de)
• introduce DBClient for database support (911f345)
• introduce the roleRepository implementation (b0ab7d1)
• porting clients API (aec21db)
• porting clients API (f4b408f)
• porting IDP API (bbe8b8c)
• porting IDP API (54d942c)
• porting schemas API (6558694)
• porting schemas API (21ff190)

Bug Fixes

• deps: update module github.com/go-chi/chi/v5 to v5.2.2 [security] (e6ac61a)
• deps: update module github.com/go-chi/chi/v5 to v5.2.2 [security] (4ae33de)
• fix the idp k8s configmap name to align with kratos charm (16ec9ed)
• fix the idp mapper (f7c8703)
• fix the pagination field (b500304)
• fix the pagination field (34884f6)
• sql: reorder statements to avoid dependency error (1a77d82)
• upgrade to 1.24.4 to patch CVE-2025-22874 (a24b5ec), closes #585

v1.24.1

1.24.1 (2025-05-21)

Bug Fixes

• address CVE-2025-30153 (c6e97e5), closes #565

v1.24.0

1.24.0 (2025-04-15)

Features

• add LoadFromGRPCContext for tokenpaginator (f53cfbe)
• add necessary functions for all API porting (41bd6eb)
• port Identities API to protobuf based models/services (b4ab649)
• port Roles API to gRPC-gateway implementation (bc9dc63)
• port Roles API to gRPC-gateway implementation (789e24f)
• port Status API (6bddd15)

Bug Fixes

• godoc for embedded interface (3f1d03e)
• typo (9c88b07)

v1.23.0

1.23.0 (2025-03-10)

Features

• add ListUsers to OpenFGA noop client (ba161ee)
• implement ListUsers in our OpenFGA client (1b3a436)
• pass label when creating idps (48b2193)
• pass label when creating idps (9b31198)
• update go version to 1.24.0 + adapt code to changes (6ee7af2)
• upgrade Go to 1.23.6 + refactor to adapt (fbeb718)
• upgrade Go to 1.24.0 + adapt code + rockcraft.yaml update (4492b5e)

Bug Fixes

• add pr permission after last config change (d875280)
• add pr permission after last config change (32626e7)
• add required label (empty string won't do) (45fd8c0)
• deps: update dependency vanilla-framework to v4.9.1 (6d6730f)
• deps: update dependency vanilla-framework to v4.9.1 (f4e68ca)
• deps: update internal ui dependencies (f59e5ba)
• deps: update internal ui dependencies (minor) (48c3c5f)
• deps: update ui deps (7f7d627)
• deps: update ui deps (5b2f8b1)
• deps: update ui deps (7e93c6e)
• deps: update ui deps (minor) (23587a3)
• deps: update ui deps (patch) (76353c1)
• lower update frequency to avoid spamming (46857a6)

v1.22.1

1.22.1 (2024-12-12)

Bug Fixes

• addressing CVE-2024-45337 (a53fc20), closes #505

v1.22.0

1.22.0 (2024-12-04)

Features

• actual link authentication users to authorization model + tests (8063b73)
• add /auth/me endpoint handler to return json with principal info (9fa92a3)
• add github.com/wneessen/go-mail v0.4.4 dependency (5182270)
• add HTTPClientFromContext + improved OtelHTTPClientFromContext func (fa1b3e8)
• add payload_validation_enabled config key (419b042)
• add 2 implementations of token verifier + tests (1d1c5f9)
• add AuthCookieManager implementation (ed18cf5)
• add authn middleware for disabled authentication (c232cfe)
• add built verification email (5a43aef)
• add constructor for validator + use json tags for validation errors (44d7223)
• add context path spec to correctly handle redirect (71aef28)
• add custom axios instance (722a331)
• add encrypt implementation (1a88aad)
• add entitlements service by Rebac (64b8326)
• add env vars for mail client (3ab1acb)
• add externalized Kube config file env var (9a63fe3)
• add full validation implementation for schemas (45993ed)
• add granular checks method to interface + expose BatchCheck from client (645a9fd)
• add hydra admin url to config + add comment for env var expectation (b36e498)
• add hydra clients to OAuth2Context struct (0072078)
• add interfaces + implement emailservice (b2f0ae9)
• add interfaces for oauth2 integration (684abac)
• add log tailing to skaffold run (a9725da)
• add login screen (1befe87)
• add Logout function and HTTPClientInterface (98e4ec3)
• add logout handler (5ea5742)
• add logout implementation (3c435d4)
• add NextTo cookie handling to cookie manager and interface (5a5cc30)
• add OAuth2 and OIDC related env vars to the Spec struct (b900cc4)
• add OAuth2 authentication middleware + tests (e054552)
• add oauth2 context to manage oauth2/oidc operations + tests (62bff44)
• add OAuth2 login handler + tests (88c29e6)
• add OAuth2Helper implementation (00c5bc1)
• add pagination to clients, schemas and identity lists in ui. Add identity creation form WD-10253 (5f55463)
• add ResourcesService (f5a2008)
• add SendUserCreationEmail method (0cc1d3f)
• add template loading + test + TEMPORARY mail template (6c95a25)
• add the cli command for compensating user invitation email failure (55f557e)
• add the create-identity CLI (464c697)
• add URL param validation for groups handlers (24c8d99)
• add user invite email template (64743cf)
• add user session cookies ttl external config (b4da23d)
• add validation implementation for clients (549d985)
• add validation implementation for groups (700cf04)
• add validation middlewareonly if payload validation is enabled + reorder middleware and endpoints registration (32814e8)
• add validation setup for groups endpoint (06fb9f4)
• add validation setup for identities endpoint (b4178c9)
• add validation setup for schemas endpoint (8c5e173)
• adjust identity api to accept page token (beb0d42), closes #256
• adjust pagination for schemas endpoints (e2a2df3), closes #44
• adopt new oauth2 integration (912029c)
• cookie + refresh token support for middleware (cab3f84)
• create-group: allow creator user to view group (efcaeec)
• delete-group: delete all relation for group to delete (883b513)
• dependencies: add coreos/go-oidc v3 dependency (fe20b2f)
• display login on 401 responses (5031b32)
• drop LOG_FILE support (1618b13)
• enable authorization by default (6f61651)
• enhance ValidationRegistry with PayloadValidator and adjust in handlers + enhance Middleware + add func for ApiKey retrieval from endpoint ([313617a](https://github.com/canonical/ident...

v1.21.0

1.21.0 (2024-10-18)

Features

• add authn middleware for disabled authentication (c232cfe)
• add granular checks method to interface + expose BatchCheck from client (645a9fd)
• groups: add CanAssignRoles and CanAssignIdentities implementation (b5e551a)
• groups: add granular CanAssign{Identities,Roles} checks in handlers (d25b430)

Bug Fixes

• adopt disabledAuthnMiddleware to not break app when authentication disabled (963f07a)
• api base path (d83e0ab)
• avoid escaping when passing URL to template (0702053)

v1.19.0

1.19.0 (2024-09-20)

Features

• introduce hierarchy for can_relations (596b448)
• wire up all the rebac handlers (f23cc1f)

Bug Fixes

• add uri permissions converters for v1 (9e59915)
• drop ctx param from NewV1Service creation (972bef4)

v1.20.0

1.20.0 (2024-10-09)

Features

• add built verification email (5a43aef)
• add the cli command for compensating user invitation email failure (55f557e)
• add user invite email template (64743cf)
• switch to html/template for rendering context path dynamically for index.html (81f8a9c)

Bug Fixes

• local dev env for OIDC provider discovery (03f5499)
• update email template to fix issues in email clients (3f9726b)