v1.4.39

• oauth2: add nextcloud configuration provider #227
• Strip login hint from redirect URL when present #219
• Allow a login_hint parameter to be passed on to the OAuth2 provider #219

v1.4.38

• update Google OAuth 2.0 integration (see #218)

v1.4.37

• feature: add api key auth
• feature: add user api key handling
• upgrade to github.com/greenpau/caddy-authorize v1.3.24
• upgrade to github.com/greenpau/go-identity v1.1.6

v1.4.36

• fix: require mfa breaks mfa onbording for non-mfa enabled users
• fix: require mfa user transform causes multiple prompts (#209)

v1.4.34

• allow custom claims in the tokens issued by the portal
• upgrage to github.com/greenpau/caddy-authorize v1.3.22

Resolves: #151

v1.4.33

• ui: update username and passcode input styles
• fix: oauth/saml claim transformation
• fix: ldap auth in sandbox

v1.4.32

• feature: move password-based auth into sandbox

  More info: At the login screen, a user inputs username or email,
  without providing a password. Next, the portal redirects the
  user into a sandbox. The sandbox supports password and mfa
  authentication types. In the future, it will support email-based
  OTP. Further, it will allow dropping the password and authenticating
  with HOTP/TOTP only.

  Partial Resolution: #173

v1.4.31

• settings: implement webauthn authentication tests

Demo: https://www.youtube.com/watch?v=JtVqFjqRu7o

v1.4.30

• fix: user transform roles serialization (#203)

v1.4.29

• feature: allow non-TLS LDAP connections and POSIX groups (#125, #202)