# [18.6.0](v18.5.5...v18.6.0) (2024-07-17)

### Features

* set x-frame-options to sameorigin instead to deny ([f1da5522](f1da5522))

feat: set x-frame-options to sameorigin instead to deny

See merge request !404

## [18.5.5](v18.5.4...v18.5.5) (2024-07-16)

### Bug Fixes

*  More clear rext for regs into groups and VOS ([4393828c](4393828c))

fix:  More clear rext for regs into groups and VOS

See merge request !403

## [18.5.4](v18.5.3...v18.5.4) (2024-06-19)

### Bug Fixes

*  Typo in device_code approve translation ([4920958d](4920958d))

fix:  Typo in device_code approve translation

See merge request !402

refactor:  Great refactor of redirects

See merge request !400

USe session attributes for passing data across redirects to have safe
passing mechanism

## [18.5.3](v18.5.2...v18.5.3) (2024-05-30)

### Bug Fixes

*  Losing AUD in GA4GH AT modifier ([a4656c67](a4656c67))

fix:  Losing AUD in GA4GH AT modifier

See merge request !399

Audiences previously set in the token were lost as the current
implementation just placed ClientID over it. The fix maintains set
audiences

## [18.5.2](v18.5.1...v18.5.2) (2024-05-17)

### Bug Fixes

*  Entitlements sources - do not ignore res. capabilities ([f14c85e9](f14c85e9))

fix:  Entitlements sources - do not ignore res. capabilities

See merge request !398

## [18.5.1](v18.5.0...v18.5.1) (2024-05-15)

### Bug Fixes

*  claim modifiers in arrays retain only unique values ([5d2750d5](5d2750d5))

fix:  claim modifiers in arrays retain only unique values

See merge request !397

# [18.5.0](v18.4.0...v18.5.0) (2024-05-15)

### Features

*  filtering of assigned resource groups in entitlements ([7f1cf4c5](7f1cf4c5))
*  filtering of groups in access control filter ([76ce6903](76ce6903))

feat+refactor: filtering of assigned resource groups in entitlements,  filtering of groups in access control filter, refactor PerunRPC Adapter

See merge request !396

AccessControl filter (PerunAuthorizationFilter) now support specifying
a resource attribute, which if set and non-null on Resource object,
groups from this resource will not be considered for controlling access.

Entitlements claim sources now support specifying a resource attribute,
which if set and non-null on Resource object, groups from this resource
will not be considered for producing group-based entitlements.

refactor:  Refactor endsession endpoint

See merge request !395

# [18.4.0](v18.3.1...v18.4.0) (2024-04-23)

### Bug Fixes

*  add console log appender for docker pruposes ([709abd4f](709abd4f))

### Features

*  VoBasedEdupersonScopedAffiliationsClaimSource impl ([adae8542](adae8542))

feat:  VoBasedEdupersonScopedAffiliationsClaimSource impl

See merge request !394

Implementation of a claim source to generate EPSA values based on vo
membership. ClaimSource requires congiruation option 'valueMap', in the
format of 'voId:aff,aff|voId:aff,aff'. If the user is a valid member of
a VO with id 'voId', all affiliation values are added into the claim
value.

## [18.3.1](v18.3.0...v18.3.1) (2024-04-10)

### Bug Fixes

* empty release ([ba49134e](ba49134e))

# [18.3.0](v18.2.0...v18.3.0) (2024-04-09)

### Features

*  allow claimModifier to replace old value (configurable) ([c6153460](c6153460))

feat:  allow claimModifier to replace old value (configurable)

See merge request !392

# [18.2.0](v18.1.0...v18.2.0) (2024-04-08)

### Features

*  Add ERIC jurisdiction as EU_EAA ([42c78848](42c78848))

feat:  Add ERIC jurisdiction as EU_EAA

See merge request !391