From 0c2c3d48f0a3c00167cd0a2c04a8b91921f46b3c Mon Sep 17 00:00:00 2001 From: eikek Date: Wed, 22 Sep 2021 23:42:28 +0200 Subject: [PATCH] Update changelog --- Changelog.md | 47 +++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 47 insertions(+) diff --git a/Changelog.md b/Changelog.md index 89fcd1ca..ded01a5b 100644 --- a/Changelog.md +++ b/Changelog.md @@ -1,5 +1,52 @@ # Changelog +## v0.27.0 + +*Sep 23, 2021* + +- Allow external authentication providers via [OpenID + Connect](https://openid.net/connect). Now you can integrate Docspell + into your SSO solution. Using keycloak, for example (or other such + tools) users can be maintained elsewhere, like in an LDAP directory. + (#489) +- Adds two-factor authentication using TOTPs. If you don't want to + setup an external authentication provider (which is another tool to + maintain), you can use the builtin TOTP support to have two-factor + authentication. (#762) +- Improvements when querying documents (#1040) +- Changed the underlying code for storing and loading files. This is a + preparation to allow different storage backends for files in the + future (maybe the filesystem or s3). (#1080) +- The license has changed from GPLv3+ to AGPLv3+ (#1078) +- Fixes a bug in the "check for updates" task that was added in the + last release (#1068) +- Reduces the length of the startup command, which makes tools like + `ps` much more readable and allows now to start docspell on Windows + (untested, though ;-)) (#1062) +- Fixes merging items, where sent mails were not copied to the target + item. (#1055) +- Fixes and improves deleting users. Now all their data is also + removed and it is shown what that would be. (#1060) + +### Rest API Changes + +- The `login` routes now won't return a session token when 2FA is + enabled for an account. The returned token must be used to provide + the TOTP in order to finalize login. +- Added `open/auth/two-factor` endpoint to provide the TOTP for login +- Added `open/auth/openid/{providerId}[/resume]` endpoints to initiate + authentication via an external provider +- Added `sec/user/{username}/deleteData` to retrieve a summary of data + that would be deleted with that user +- Added `sec/user/otp/*` endpoints to manage the TOTP for an account +- Added `admin/user/otp/reserOTP` to reset the 2FA setup for any user + +### Configuration Changes + +- Restserver: Added a section to configure external authentication + provider + + ## v0.26.0 *Aug 28, 2021*