v4.35.1

4.35.1 (2022-04-25)

Bug Fixes

• commands: invalid opaque id service name (#3235) (06ba312)
• oidc: subject generated for anonymous users (#3238) (abf1c86)
• suites: add missing traefik routes (#3217) (92e219b)

Docker Container

• docker pull authelia/authelia:4.35.1
• docker pull ghcr.io/authelia/authelia:4.35.1

v4.35.0

4.35.0 (2022-04-18)

Important Change: OpenID Connect subject identifiers have changed as per ad84c8c. You may be required by relying parties to remap/relink users to the new subject identifiers which are now opaque id's rather than the username in order to comply with the OpenID Connect standard. While we aim to keep changes like this to a minimum, OpenID Connect is still in beta as we iron out all the important functionality.

Bug Fixes

• configuration: missing valid keys (#3207) (5aa25ec)
• configuration: remove unused password policy option (#3149) (9d5ac45)
• configuration: sector identifier not parsed correctly (#3142) (44bd707)
• oidc: missing amr claim supported in discovery (#3147) (148ec1e)
• oidc: show detailed error reasons (#3175) (f97474f)
• server: incorrect remote ip logged in error handler (#3139) (ce6bf74)
• server: locale format incorrect (#3154) (79935c7)
• server: respond with 404/405 appropriately (#3087) (2502d89)
• web: description of profile scope is not accurate (#3146) (f9da940)
• web: lowercase locales are not consistent with localization platforms (#3141) (4503ac0)
• web: update client rendering method (#3106) (fa143ea)

Features

• authentication: password policy (#2723) (8659ba3)
• authorization: domain regex match with named groups (#2789) (3c1bb3e)
• commands: user opaque identifiers commands (#3144) (5a0a15f)
• configuration: allow rfc4918 http verbs in acl (#2988) (b2d35d8)
• configuration: configurable default second factor method (#3081) (e99fb7a)
• implement mutual tls in the web server (#3065) (3ca438e), closes #3041
• notification: password reset notification custom templates (#2828) (bfd5d66), closes #2755 #2756
• oidc: client id claims (#3150) (e7112bf)
• oidc: implement amr claim (#2969) (0116506)
• oidc: opaque subject identifiers (#3129) (ad84c8c)
• oidc: pairwise subject identifiers (#3116) (8bb8207)
• oidc: persistent storage (#2965) (0a970ae)
• oidc: pre-configured consent (#3118) (66a450e), closes #2598
• oidc: provide cors config including options handlers (#3005) (4ebd8fd)
• server: zxcvbn password policy server side (#3151) (92aba8e)
• templates: display link in mails sent by authelia (#2785) (1bae65a)
• totp: secret customization (#2681) (9b6bcca)
• web: add de i18n translation (#3043) (c3faa38)
• web: add user display name to oidc consent view (#3138) (90edf11), closes #2595
• web: i18n asset overrides (#3040) (aac4c47)
• web: password reset custom url (#3111) (a2eb031), closes #1934 #2854

Docker Container

• docker pull authelia/authelia:4.35.0
• docker pull ghcr.io/authelia/authelia:4.35.0

v4.34.6

4.34.6 (2022-03-28)

Bug Fixes

• configuration: expvars and pprof mapped incorrectly (#3068) (a0bffe3)
• disable healthcheck in systemd unit file (#3066) (e96459f)
• server: healthcheck ipv6 format is invalid (#3055) (2f31db2)
• web: show appropriate default and available methods (#2999) (70ab8aa)

Docker Container

• docker pull authelia/authelia:4.34.6
• docker pull ghcr.io/authelia/authelia:4.34.6

v4.34.5

4.34.5 (2022-03-18)

Bug Fixes

• commands: explicitly close files (#3031) (17eef2c)
• configuration: incorrect key validation names (#3033) (05b8caa)
• configuration: missing sentinel_username key in validator (#3027) (e65a64c)
• configuration: remember me duration disabled impossible (#2997) (b43ee50)
• oidc: add detailed trace/debug logs (#3012) (9b77956)
• oidc: userinfo jti claim potential panic (#3017) (14ad07f)

Docker Container

• docker pull authelia/authelia:4.34.5
• docker pull ghcr.io/authelia/authelia:4.34.5

v4.34.4

4.34.4 (2022-03-10)

Bug Fixes

• configuration: cannot disable remember me (#2985) (db6dd32)
• configuration: invalid password algorithm tag (#2972) (6a1c5ed)

Docker Container

• docker pull authelia/authelia:4.34.4
• docker pull ghcr.io/authelia/authelia:4.34.4

v4.34.3

4.34.3 (2022-03-05)

Bug Fixes

• configuration: time duration decode hook panic (#2960) (1c1030c)

Docker Container

• docker pull authelia/authelia:4.34.3
• docker pull ghcr.io/authelia/authelia:4.34.3

v4.34.2

4.34.2 (2022-03-04)

Bug Fixes

• storage: webauthn kid too short for some devices (#2957) (204cef4)

Docker Container

• docker pull authelia/authelia:4.34.2
• docker pull ghcr.io/authelia/authelia:4.34.2

v4.34.1

4.34.1 (2022-03-04)

Bug Fixes

• configuration: pkce config keys not allowed (#2954) (fd3a2bb)

Docker Container

• docker pull authelia/authelia:4.34.1
• docker pull ghcr.io/authelia/authelia:4.34.1

v4.34.0

4.34.0 (2022-03-04)

Bug Fixes

• commands: use consistent config file name (#2952) (a5c400c)
• docker: fix bootstrap and dev docker image build (#2857) (9c98321), closes #2843 #2844
• docker: fix the building process of docker image (#2844) (380e6fc)
• handlers: include preferred_username claim in meta (#2829) (ddbb21a)
• ntp: disable failure ignored (#2835) (7775d2a)
• oidc: make preferred_username a profile scope claim (#2930) (c479ba6), closes #2829
• server: use of inconsistent methods for determining origin (#2848) (26236f4), closes #2765
• storage: return reason for identity verification not being found (#2937) (d867fa1)

Features

• commands: add access-control check-policy command (#2871) (3c81e75)
• commands: totp qr code in png format (#2673) (1b2af90)
• configuration: support private-use redirect uris in oidc (#2796) (a7a2bc6), see rfc8252 , closes #2742
• oidc scope i18n (#2799) (fcdd41e)
• oidc: add automatic allow all cors to discovery (#2953) (a8f5a70)
• oidc: add pkce support (#2924) (6ef6d04), closes #2921
• oidc: oauth2 discovery support (#2925) (c9d86a9)
• server: csp template (#2856) (bed7a8a)
• webauthn (#2707) (8f05846)
• web: i18n (#2697) (db046b2)

Docker Container

• docker pull authelia/authelia:4.34.0
• docker pull ghcr.io/authelia/authelia:4.34.0

v4.33.2

4.33.2 (2022-01-21)

Bug Fixes

• add storage encryption key for docker examples (#2703) (33c2b3e)
• api: fix grouping for user info endpoints (#2710) (0660815)
• configuration: mail address decode hook func (#2790) (fe4bfc1)
• middlewares: smart delay on reset password (#2767) (9a8c660)
• oidc: add preferred username claim (#2801) (06641cd), closes #2798
• storage: use boolean instead of integer (#2776) (d103585)

Docker Container

• docker pull authelia/authelia:4.33.2
• docker pull ghcr.io/authelia/authelia:4.33.2