# [18.5.0](v18.4.0...v18.5.0) (2024-05-15)

### Features

*  filtering of assigned resource groups in entitlements ([7f1cf4c5](7f1cf4c5))
*  filtering of groups in access control filter ([76ce6903](76ce6903))

feat+refactor: filtering of assigned resource groups in entitlements,  filtering of groups in access control filter, refactor PerunRPC Adapter

See merge request !396

AccessControl filter (PerunAuthorizationFilter) now support specifying
a resource attribute, which if set and non-null on Resource object,
groups from this resource will not be considered for controlling access.

Entitlements claim sources now support specifying a resource attribute,
which if set and non-null on Resource object, groups from this resource
will not be considered for producing group-based entitlements.

refactor:  Refactor endsession endpoint

See merge request !395

# [18.4.0](v18.3.1...v18.4.0) (2024-04-23)

### Bug Fixes

*  add console log appender for docker pruposes ([709abd4f](709abd4f))

### Features

*  VoBasedEdupersonScopedAffiliationsClaimSource impl ([adae8542](adae8542))

feat:  VoBasedEdupersonScopedAffiliationsClaimSource impl

See merge request !394

Implementation of a claim source to generate EPSA values based on vo
membership. ClaimSource requires congiruation option 'valueMap', in the
format of 'voId:aff,aff|voId:aff,aff'. If the user is a valid member of
a VO with id 'voId', all affiliation values are added into the claim
value.

## [18.3.1](v18.3.0...v18.3.1) (2024-04-10)

### Bug Fixes

* empty release ([ba49134e](ba49134e))

# [18.3.0](v18.2.0...v18.3.0) (2024-04-09)

### Features

*  allow claimModifier to replace old value (configurable) ([c6153460](c6153460))

feat:  allow claimModifier to replace old value (configurable)

See merge request !392

# [18.2.0](v18.1.0...v18.2.0) (2024-04-08)

### Features

*  Add ERIC jurisdiction as EU_EAA ([42c78848](42c78848))

feat:  Add ERIC jurisdiction as EU_EAA

See merge request !391

# [18.1.0](v18.0.2...v18.1.0) (2024-04-03)

### Features

*  Pretty print GA4GH in consent ([a249addd](a249addd))

feat:  Pretty print GA4GH in consent

See merge request !390

pretty print GA4GH Visas in consent screen

## [18.0.2](v18.0.1...v18.0.2) (2024-03-25)

### Bug Fixes

*  Jurisdiction in LS AAI consents ([b000b8e4](b000b8e4))

## [18.0.1](v18.0.0...v18.0.1) (2024-03-25)

### Bug Fixes

*  Fix jurisdiction in consent ([b2514dfb](b2514dfb))

fix:  Fix jurisdiction in consent

See merge request !388

# [18.0.0](v17.3.3...v18.0.0) (2024-03-19)

### Bug Fixes

*  update LS AAI theme ([702c58ce](702c58ce))

### Features

*  Pass in ACRs onlyAllowed and blocked IdPs ([ec6662b6](ec6662b6))

### BREAKING CHANGES

* requires database update (see v18.0.0.sql script)

LS AAI template, passing IdP filters via ACRs

See merge request !387

Lists are read from client entry int DB. Also need to set
`proxy.blocked_idps_enabled=true` and/or
`proxy.only_allowed_idps_enabled=true` in the main config file to enable
passing these alists to proxyIdP

BREAKING CHANGE: requires database update (see v18.0.0.sql script)

## [17.3.3](v17.3.2...v17.3.3) (2024-03-18)

### Bug Fixes

*  Throw correct error when no auth_code found ([1105142f](1105142f))

fix:  Throw correct error when no auth_code found

See merge request !386

## [17.3.2](v17.3.1...v17.3.2) (2024-03-18)

### Bug Fixes

*  Improve request logging format ([a493770f](a493770f))

- provide correct error instead of internal server error when no
authorization code has been found (probably already consumed or expired)

fix:  Improve request logging format

See merge request !385

## [17.3.1](v17.3.0...v17.3.1) (2024-03-13)

### Bug Fixes

*  Add switch for LogRequests filter ([a2d190ae](a2d190ae))

fix:  Add switch for LogRequests filter

See merge request !384