Tags

# Version 24.06

Jun 14, 2024

## Changelog

* Updated and refactored the user roles

Rework user roles.

Users now must provide access to their name when logging in through OIDC.

/users/ids endpoint now anonymizes the returned users if the logged-in user does not have the necessary roles and other public endpoints now throw an exception in that case.

Removed stacktrace from errors, changed authorization for getUserById

Endpoint to get user credentials from local OIDC provider. Endpoint to import new users.

Migrate the project to Java 17.

Fix YAML message converter.

Fix default file for exported OIDC users.

Get initial users from local OIDC provider.

Added missing flyway dependency to migrate database at startup.

Updated dependencies to the latest versions. Code cleanup. Configured multi-stage docker build to decrease the resulting image size. Internal change of security configuration using security filters. Change multi-module project to single-module.

Update log4j2 dependency to 2.15.0 to avoid CVE-2021-44228 vulnerability.

Rename OIDC properties and added validation of the OIDC configuration.

OIDC implementation and configuration supporting Microsoft ecosystem