v1.5.0

1.5.0 (2025-04-04)

⚠ BREAKING CHANGES

• jans-cedarling: move TOKEN_CONFIGS into the token_metadata schema (#10972)

Features

• Refactor Link Interception Script ([#11144])(15a44bc)
• add ability to decode token jwt so that users can check claims in payload (#10930) (a88aab3)
• add ability to show decision, system and metric logs in tarp based on user selection (#10917) (4df25f0)
• add ability to to use cedarling authorize_unsigned in tarp (#11147) (3185a89)
• add tolerations (03ae383)
• add tolerations to helm charts (#11100) (03ae383)
• admin-ui should only make monthly request agama-lab to validate license (#10966) (3647fe8)
• apply password policy to set/reset password (#11149) (52f0f47)
• charts: cloudtools integration with Helm charts (#11102) (5739aa3)
• cloud-native: create utility image to run commands for cluster (#10987) (51e175c)
• code refactoring for UI improvement in tarp (#11151) (123e62f)
• docs: session management (#11098) (d3fcf8b)
• jans-auth-server: do not return claim in introspection response if it's null. #10865 (#10877) (eb3de16)
• jans-auth-server: introduce rate limit support for DCR (#10991) (6a1ccce)
• jans-auth-server: make all ssa attributes optional during creation #10858 (#10896) (a01b1ca)
• jans-auth-server: rate limit - use guava cache to auto-expire buckets during high load #11054 (#11059) (01a0a9f)
• jans-auth-server: removed CleanerTimer from AS (replaced by independent clean service) (#11096) (bb51848)
• jans-auth-server: requirePkce configuration property on client level (#10962) (4cda61c)
• jans-auth-server: set expiration to the past (to clean up) on SSA revoke #10916 (#10939) (8c460ca)
• jans-cedarling: add alias to load key policy_store_version` (#10893) (21e4acc)
• jans-cedarling: add an example that runs profiling (#10979) (dc38e10)
• jans-cedarling: Add bootstrap properties of memory logger max_items and max_item_size (#10924) (2189094)
• jans-cedarling: create uniffi binding for cedarling with sample ios app using it (#10816) (026ed0b)
• jans-cedarling: implement loading types from other namespace (#10807) (da05595)
• jans-cedarling: include a sample android app in cedarling uniffi binding (#10994) (5b74f9d)
• jans-cedarling: New interface: authorizeUnverified - send Principal as Object v. JWT (#11035) (37b72ad)
• jans-cedarling: Support JSON logic for principal boolean operations (#10956) (cbe4dbc)
• jans-cli-tui: add hints to fido configuration screen (#10864) (39ffa8a)
• jans-cli-tui: SSA custom attributes 10855 (#10870) (6f2cb6b)
• jans-linux-setup: data cleaning cron job task (#10946) (33d5eb2)
• jans-linux-setup: LDAP Link installation is optional (#10964) (673d7fb)
• jans-linux-setup: link jans script to /usr/local/bin (#11125) (d8c7a17)
• jans-linux-setup: link jans script to /usr/localbin (d8c7a17)
• jans-linux-setup: ubuntu24 support (#10949) (481fdca)
• jans-lock: configure maven to update OpenAPI lock-server.yaml (#10952) (11c2249)
• jans-lock: configure maven to update OpenAPI lock-server.yaml (#10953) (a8f09f2)

Bug Fixes

• admin UI unable to fetch MAU _threshold on restart of config-api (b4cfaa2)
• charts: broken istio integration (#11041) (8b536ab)
• core: remove jansAlias from jansDocument (#11085) (a3a9bb2)
• docs: add Cedarling quick start guide and binding type documents (#10906) (bc0686f)
• docs: Cedarling docs updates (#10998) (903e29f)
• docs: Cedarling documentation reorganisation (#10900) (33920c2)
• docs: incorrect package name in rhel document (#10890) (1d98a9c)
• docs: moving contributor license agreement to GitHub (#11034) (6ce100a)
• docs: remove agama lab quick start guide (7a7ae38)
• docs: remove agama lab quick start guide from Jans docs (#11132) (7a7ae38)
• docs: review and update Cedarling WASM document (#10988) (2136bdf)
• docs: update cedarling docs navigation (#11001) (4da085f)
• docs: update document titles for better search results (#11105) (6b6815d)
• docs: update titles for better docs search results (#11131) (b9cb65e)
• error when deselect one of the tokens in the cedarling authz form (#10986) (8444271)
• fox docs formatting (3da3644)
• ignore null authz input tokens (56af565)
• jans-auth-server: correction after removing CleanerTimer from AS (replaced by independent clean service) #10935 (#11108) (13b5ea6)
• jans-cedarling: fix CEDARLING_TOKEN_CONFIGS to have namespace (66dd8a7)
• jans-cedarling: fix documentation CEDARLING_POLICY_STORE_LOCAL can hold only string (#11015) (2c6a112)
• jans-cedarling: fix log workload authz info (87672d8)
• jans-cedarling: ignore null authz input tokens and improve error message (#11063) (56af565)
• jans-cedarling: reason missing from decision log (#10895) (87672d8)
• jans-cli-tui: Catch errors when changing user password (#11154) (9fc36c3)
• jans-cli-tui: multivalued claims for users (#11011) (159b512)
• jans-cli-tui: null value in client grantTypes (#10872) (a609f8c)
• jans-cli-tui: properties acrMappings (#11048) (f025083)
• jans-cli-tui: typo in editing attribute (#11152) (f42dd4a)
• jans-config-api: admin UI unable to fetch MAU _threshold on restart of config-api (#10969) (b4cfaa2)
• jans-core: reverted back CleanerEvent (used by fido2) #11113 (#11115) (266583f)
• jans-fido2: #10244 + docs (#11057) (3912551)
• jans-fido2: #10947 syncing configuration parameters in docs and … (#10948) (b635cbc)
• jans-fido2: #10947 syncing configuration parameters in docs and templates (b635cbc)
• jans-fido2: fixes to downloading mds3 blob #11126 (#11127) (3776c0c)
• jans-fido2: U2F attestation and corrected auth_cert link #10911 (#10912) (b47ca75)
• jans-linux-setup: lock client creation with setup.properties (#10929) (f374ed2)
• jans-linux-setup: owner of service status script (#11122) (aad24a3)
• jans-linux-setup: rename permission to role in attribute inum=6049 (#10915) (359dc75)
• jans-tarp: unsigned authorization form not working (#11159) (cc9c7fd)
• logging: improve detail formatting (#10955) (9334d61)
• return 500 instead of 404 on lookup error (#11156) (ecc1eac)
• scope not getting added if dropdown is not used (#10908) (63bc735)
• show proper error message for when MAU threshold absent when checking flex license (#11110) (40f9d09)
• show proper error message for when MAU threshold absent when checking flex license #11093 (40f9d09)
• ssaCustomAttributes is missing in response from Auth server Configuration endpoint (#11120) (b4a4cf6)

Code Refactoring

• jans-cedarling: move TOKEN_CONFIGS into the token_metadata schema (#10972) (533236a)