2019-03-25

API changes

• SCIM delete user endpoint (#660)
• Require reauthentication when creating a SCIM token (#639)
• Disallow duplicate external ids via SCIM update user (#657)

Documentation changes

• Make an index for the docs/ (#662)
• Docs: using scim with curl. (#659)
• Add spar to the arch diagram. (#650)

Bug fixes

• ADFS-workaround for SAML2 authn response signature validation. (#670)
• Fix: empty objects {} are valid TeamMemberDeleteData. (#652)
• Better logo rendering in emails (#649)

Internal changes

• Remove some unused instances (#671)
• Reusable wai middleware for prometheus (for Galley only for now) (#669)
• Bump cql-io dep from merge request to latest release. (#661)
• docker image building for all of the docker images our integration tests require. (#622, #668)
• Checking for 404 is flaky; depends on deletion succeeding (#667)
• Refactor Galley Tests to use Reader Pattern (#666)
• Switch Cargohold to YAML-only config (#653)
• Filter newlines in log output. (#642)

2019-02-28

API changes

• Support for SCIM based rich profiles (#645)
  * PUT /scim/v2/Users/:id supports rich profile
  * GET /users/:id/rich-info to get the rich profile id

Internal changes

• Gundeck now uses YAML based config
• Brig templates can now be easily customized and have been updated too
• Misc improvements to our docs and build processes

2019-02-22

API changes

• n/a

Bug fixes

• SAML input sanitization (#636)

Internal changes

• helper script for starting services only without integration tests (#641)
• Scim error handling (#640)
• Gundeck: cleanup, improve logging (#628)

2019-02-18

API changes

• Support for SCIM (#559, #608, #602, #613, #617, #614, #620, #621, #627)
  • several new end-points under /scim (see hscim package or the standards for the details; no swagger docs).
  • new end-point put "/i/users/:uid/managed-by" for marking scim-managed users (no swagger docs)
• Add support for excluding certain phone number prefixes (#593)
  • several new end-points under /i/users/phone-prefixes/ (no swagger docs)
• Fix SAML2.0 compatibility issues in Spar (#607, #623)

Bug fixes

• Update swagger docs (#598)

Internal changes

• Architecture independence, better use of make features, more docs. (#594)
• Fix nginz docker image building (#605)
• Enable journaling locally and fix integration tests (#606)
• Use network-2.7 for more informative "connection failed" errors (#586)
• Use custom snapshots (#597)
• Add module documentation for all Spar modules (#611)
• Change the bot port in integration tests to something less common (#618)
• Spar metrics (#604, #633)
• Extend the list of default language extensions (#619)
• Fix: do not have newlines in log messages. (#625)

2019-01-24

API changes

• Track inviters of team members (#566)
• New partner role. (#569, #572, #573, #576, #579, #584, #577, #592)
• App-level websocket pongs. (#561)

Bug fixes

• Spar re-login deleted sso users; fix handling of brig errors. (#588)
• Gundeck: lost push notifications with push-all enabled. (#554)
• Gundeck: do not push natively to devices if they are not on the whitelist. (#554)
• Gundeck: link gundeck unit tests with -threaded. (#554)

Internal changes

• Get rid of async-pool (unliftio now provides the same functionality) (#568)
• Fix: log multi-line error messages on one line. (#595)
• Whitelist all wire.com email addresses (#578)
• SCIM -> Scim (#581)
• Changes to make the demo runnable from Docker (#571)
• Feature/docker image consistency (#570)
• add a readme, for how to build libzauth. (#591)
• better support debian style machines of different architecturs (#582, #587, #583, #585, #590, #580)

2019-01-10

API changes

• sigkeys attribute on POST|PUT to /clients is now deprecated and ignored (clients can stop sending it)
• cancel_callback parameter on GET /notifications is now deprecated and ignored (clients can stop sending it)
• deprecated POST /push/fallback/<notif>/cancel is removed
• deprecated tokenFallback field returned on GET /push/tokens is removed

Bug fixes

• Size-restrict SSO subject identities (#557)
• Propagate team deletions to spar (#519)
• allow using $arg_name in nginz (#538)

Internal changes

• Version upgrades to GHC 8.4 (LTS-12), nginx 14.2, alpine 3.8 (#527, #540)
• Code refactoring, consitency with Imports.hs (#543, #553, #552)
• improved test coverage on spar (#539)
• Use yaml configuration in cannon (#555)

Others

• Docs and local dev/demo improvements

2018-12-06

API changes

• New API endpoint (/properties-values) to get all properties keys and values

Bug Fixes

• Proper JSON object encapsulation for conversation.receipt-mode-update events (#535)
• Misc Makefile related changes to improve dev workflow

Internal Changes

• Gundeck now pushes events asynchronously after writing to Cassandra (#530)

Others

• Improved docs (yes!) with (#528)

2018-11-28

Bug Fixes

• spar now handles base64 input more leniently (#526)

• More lenient IdP metadata parsing (#522)

Internal Changes

• Refactor Haskell module imports (#524, #521, #520)

• Switch Galley, Brig to YAML-only config (#517, #510)

• Better SAML error types (#522)

• Fix: gundeck bulkpush option. (#511)

2018-11-16

Bug Fixes

• Fix: spar session cookie (#512)

• SSO: fix cookie handling around binding users (#505)

Internal Changes

• partial implementation of SCIM (without exposure to the spar routing table)

• Always build benchmarks (#486)

• Fix: gundeck compilation (#506)

• Fix: use available env var for docker tag in dev make rule. (#509)

• Use Imports.hs in Brig, Spar, Galley (#507)

• update dependencies docs (#514)

2018-10-25

See #500 for all the details.

New Features

• SSO: team member deletion, team deletion do not require
  the user to have chosen a password. (Needed for
  SAML-authenticated team co-admins.) #497

• SSO: sso-initiate-bind end-point for inviting ("binding")
  existing users to SAML auth. #496

• SSO: shell script for registering IdPs in wire-teams.
  (/deploy/services-demo/register_idp.sh) #489

• Allow setting a different endpoint for generating download links.
  #480

• Allow setting specific ports for SMTP and use different image for
  SMTP. #481

• Route calls/config in the demo to brig. #487

Internal Changes

• Metrics for spar (service for SSO). #498

• Upgrade to stackage lts-11. #478

• Upgrade cql-io library. #495

• Allow easily running tests against AWS. #482