- New configuration options available (none mandatory). See #895 #900 #869
- Support HEAD requests for
/sso/initiate-bind(#878)
- Do not send conversation delete events to team members upon team deletion (#897)
- Support SNI for bot registrations (by bumping http-client version) (#899)
- Make gundeck handle AWS outages better. (#869, #890, #892)
- Improve performance by avoiding unbounded intra-service traffic spikes on team deletions (#900)
- Add optional native push connection throttling (#895)
- New backoffice/stern endpoint (#896)
- SAML: Store raw idp metadata with typed details in c* (#872)
- documentation/script updates
- More information is logged about user actions (#856)
- Make team member property size configurable (#867)
- Fix bugs related to metrics (#853, #866)
- Sneak up on flaky test. (#863)
- Derive Generic everywhere (#864)
- Add issue templates (#862)
- Cleanup stern (#845)
- Log warnings only when users are suspended (#854)
- Documentation update for restund and smoketester (#855)
- Documentation changes for Twilio configurations and TURN setup. (#775)
- Better events for deletion of team conversations (also send
conversation.deleteto team members) (#849) - Add a new type of authorization tokens for legalhold (for details on legalhold, see https://github.com/wireapp/wire-server/blob/develop/docs/reference/team/legalhold.md) (#761)
- Fix swagger docs. (#852)
- Fix intra call in stern (aka customer support, aka backoffice) (#844)
- Change feature flags from boolean to custom enum types. (#850)
- Fix flaky integration test. (#848)
- Cleanup: incoherent functions for response body parsing. (#847)
- add route for consistency (#851)
- Option for limiting login retries (#830)
- Option for suspending inactive users (#831)
- Add json logging (#828) (#836)
- Feature Flags in galley options. (#825)
- Specialize the error cases on conversation lookup. (#841)
- Fix is-team-owner logic (don't require email in all cases) (#833)
- Typos in swagger (#826)
- Fix flaky integration test. (#834)
- Remove
exposed-modulessections from all package.yaml files. (#832) - Remove Debug.Trace from Imports. (#838)
- Cleanup integration tests (#839)
- legalhold (#802), but block feature activation (#823)
- a few shell scripts for self-hosters (#805, #801)
- Release nginz_disco (#759)
- SSO is disabled by default now; but enabled for all teams that already have an IdP.
- feature flags (starting with legalhold, sso) (#813, #818)
- new public end-points (#813, #818):
- get "/teams/:tid/features/legalhold"
- get "/teams/:tid/features/sso"
- new internal end-points:
- get "/i/teams/:tid/features/legalhold"
- get "/i/teams/:tid/features/sso"
- put "/i/teams/:tid/features/legalhold"
- put "/i/teams/:tid/features/sso"
- new backoffice end-points:
- get "/teams/:tid/features/legalhold"
- get "/teams/:tid/features/sso"
- put "/teams/:tid/features/legalhold"
- put "/teams/:tid/features/sso"
- new public end-points (#813, #818):
- Always throw json errors, never plaintext (#722, #814)
- Register IdP: allow json bodies with xml strings (#722)
- [stern aka backoffice] allow galeb returning a 404 (#820)
- Cleanup logging (#816, #819)
- Canonicalize http request path capture names (#808, #809)
- Galley depends on libsodium too now (#807)
- Add generics instances to common, brig, galley types. (#804)
- Upgrade CQL protocol version to V4 (#763)
- Log last prekey used only at debug level (#785)
- Cleanup (#799)
- restund: add EXTRA_CFLAGS to work on ubuntu 16 (#788)
- Fix flaky unit test. (#770)
- Add upstream references in stack.yaml deps (wai-middleware-prometheus). (#760)
- Cannon analytics (2) (#750)
- fix this file.
- Group provisioning (#748)
- Instructions for running load tests (#738)
- Twilio configuration (#733)
Cannon no longer reports 500s in the prometheus metrics when establishing websocket connections. (#751, #754)
Per-installation flag: Allow displaying emails of users in a team (code from #724, see description in #719)
Docker image building improvements (#755)
Config value setEmailVisibility must be set in brig's config file (if you're not sure, visible_to_self is the preferred default)
- Improved Cassandra documentation in
docs/README.md - Improved documentation on SCIM storage in
docs/README.md - Improved documentation on SCIM Tokens in
docs/reference/provisioning/scim-token.md
- Sanitize metric names to be valid prometheus names in metrics-core
- Add missing a
.gitsuffix on gitlab dependencies in stack.yaml - Time bounds checks now allow 60s of tolerance; this is helpful in cases of drifting clocks (#730)
- Services now provide Prometheus metrics on
/i/metrics - Garbage Collection and memory statistics are available alongside other prometheus metrics
- Alpine Builder is no longer built with
--profile - SCIM users now have an additional wire-specific schema attached.
/i/monitoringis DEPRECATED. Please use prometheus metrics provided by/i/metricsinstead.- On password reset the new password must be different than the old one
- Stern is now available as a new tool for performing adminstrative tasks via API (#720)
- SCIM handler errors are now reported according to SCIM error schema (#575)
- Do not allow provisioning saml users if SCIM is configured (#706)
- Docs for user deletion via SCIM. (#691)
- Docs for jump-to-definition with Emacs (#693)
- Add missing config options in demo (#694)
- Move the connections doc, add haddocks (#695)
- Fix templating in outgoing SMSs. (#696)
- Saml implicit user creation no longer chokes on odd but legal names. (#702)
- Fix: user deletion via scim (#698)
- Remove redundant cassandra write in renewCookie (#676)
- Add Prometheus middleware for wire-services (#672)
- Improve logging of spar errors (#654)
- Upgrade cql-io-1.1.0 (#697)
- Switch metrics-core to be backed by Prometheus (#704)
- Refactorings:
- #665, #687, #685, #686
- Switch proxy to use YAML-only config (#684)
- SCIM delete user endpoint (#660)
- Require reauthentication when creating a SCIM token (#639)
- Disallow duplicate external ids via SCIM update user (#657)
- Make an index for the docs/ (#662)
- Docs: using scim with curl. (#659)
- Add spar to the arch diagram. (#650)
- ADFS-workaround for SAML2 authn response signature validation. (#670)
- Fix: empty objects
{}are valid TeamMemberDeleteData. (#652) - Better logo rendering in emails (#649)
- Remove some unused instances (#671)
- Reusable wai middleware for prometheus (for Galley only for now) (#669)
- Bump cql-io dep from merge request to latest release. (#661)
- docker image building for all of the docker images our integration tests require. (#622, #668)
- Checking for 404 is flaky; depends on deletion succeeding (#667)
- Refactor Galley Tests to use Reader Pattern (#666)
- Switch Cargohold to YAML-only config (#653)
- Filter newlines in log output. (#642)
- Support for SCIM based rich profiles (#645)
PUT /scim/v2/Users/:idsupports rich profileGET /users/:id/rich-infoto get the rich profile id
- Gundeck now uses YAML based config
- Brig templates can now be easily customized and have been updated too
- Misc improvements to our docs and build processes
- n/a
- SAML input sanitization (#636)
- helper script for starting services only without integration tests (#641)
- Scim error handling (#640)
- Gundeck: cleanup, improve logging (#628)
- Support for SCIM (#559, #608, #602, #613, #617, #614, #620, #621, #627)
- several new end-points under
/scim(see hscim package or the standards for the details; no swagger docs). - new end-point
put "/i/users/:uid/managed-by"for marking scim-managed users (no swagger docs)
- several new end-points under
- Add support for excluding certain phone number prefixes (#593)
- several new end-points under
/i/users/phone-prefixes/(no swagger docs)
- several new end-points under
- Fix SAML2.0 compatibility issues in Spar (#607, #623)
- Update swagger docs (#598)
- Architecture independence, better use of make features, more docs. (#594)
- Fix nginz docker image building (#605)
- Enable journaling locally and fix integration tests (#606)
- Use network-2.7 for more informative "connection failed" errors (#586)
- Use custom snapshots (#597)
- Add module documentation for all Spar modules (#611)
- Change the bot port in integration tests to something less common (#618)
- Spar metrics (#604, #633)
- Extend the list of default language extensions (#619)
- Fix: do not have newlines in log messages. (#625)
- Track inviters of team members (#566)
- New partner role. (#569, #572, #573, #576, #579, #584, #577, #592)
- App-level websocket pongs. (#561)
- Spar re-login deleted sso users; fix handling of brig errors. (#588)
- Gundeck: lost push notifications with push-all enabled. (#554)
- Gundeck: do not push natively to devices if they are not on the whitelist. (#554)
- Gundeck: link gundeck unit tests with -threaded. (#554)
- Get rid of async-pool (unliftio now provides the same functionality) (#568)
- Fix: log multi-line error messages on one line. (#595)
- Whitelist all wire.com email addresses (#578)
- SCIM -> Scim (#581)
- Changes to make the demo runnable from Docker (#571)
- Feature/docker image consistency (#570)
- add a readme, for how to build libzauth. (#591)
- better support debian style machines of different architecturs (#582, #587, #583, #585, #590, #580)
sigkeysattribute on POST|PUT to/clientsis now deprecated and ignored (clients can stop sending it)cancel_callbackparameter on GET/notificationsis now deprecated and ignored (clients can stop sending it)- The deprecated
POST /push/fallback/<notif>/cancelis now removed. - The deprecated
tokenFallbackfield returned onGET /push/tokensis now removed.
- Size-restrict SSO subject identities (#557)
- Propagate team deletions to spar (#519)
- Allow using
$arg_namein nginz (#538)
- Version upgrades to GHC 8.4 (LTS-12), nginx 14.2, alpine 3.8 (#527, #540)
- Code refactoring, consitency with Imports.hs (#543, #553, #552)
- Improved test coverage on spar (#539)
- Use yaml configuration in cannon (#555)
- Docs and local dev/demo improvements
- New API endpoint (
/properties-values) to get all properties keys and values
- Proper JSON object encapsulation for
conversation.receipt-mode-updateevents (#535) - Misc Makefile related changes to improve dev workflow
- Gundeck now pushes events asynchronously after writing to Cassandra (#530)
- Improved docs (yes!) with (#528)
-
Spar now handles base64 input more leniently (#526)
-
More lenient IdP metadata parsing (#522)
-
Refactor Haskell module imports (#524, #521, #520)
-
Switch Galley, Brig to YAML-only config (#517, #510)
-
Better SAML error types (#522)
-
Fix: gundeck bulkpush option. (#511)
-
Fix: spar session cookie (#512)
-
SSO: fix cookie handling around binding users (#505)
-
partial implementation of SCIM (without exposure to the spar routing table)
-
Always build benchmarks (#486)
-
Fix: gundeck compilation (#506)
-
Fix: use available env var for docker tag in dev make rule. (#509)
-
Use Imports.hs in Brig, Spar, Galley (#507)
-
update dependencies docs (#514)
-
SSO: team member deletion, team deletion do not require the user to have chosen a password. (Needed for SAML-authenticated team co-admins.) #497
-
SSO:
sso-initiate-bindend-point for inviting ("binding") existing users to SAML auth. #496 -
SSO: shell script for registering IdPs in wire-teams. (
/deploy/services-demo/register_idp.sh) #489 -
Allow setting a different endpoint for generating download links. #480
-
Allow setting specific ports for SMTP and use different image for SMTP. #481
-
Route calls/config in the demo to brig. #487
-
Metrics for spar (service for SSO). #498
-
Upgrade to stackage lts-11. #478
-
Upgrade cql-io library. #495
-
Allow easily running tests against AWS. #482
-
We now store the
otr_muted_statusfield per conversation, suitable for supporting more notifications options than just "muted/not muted". The exact meaning of this field is client-dependent. #469 -
Our schema migration tools (which you are probably using if you're doing self-hosting) are more resilient now. They have longer timeouts and they wait for schema consistency across peers before reporting success. #467
-
Building from scratch on macOS is now a tiny bit easier. #474
-
Various Spar fixes, breaking changes, refactorings, and what-not. Please refer to the commit log, in particular commits c173f42b and 80d06c9a.
-
Spar now only accepts a subset of available TLS ciphers. See af8299d4.