v3.6.0

What's Changed

Added

• Add test route to avoid the shadow root/having to render the global nav (#70)

v3.5.0

What's Changed

• Allow specific session keys to bypass reset_session by @grega in #63
• Migrate to GitHub Actions CI, fix test builds on main by @grega in #66

Full Changelog: v3.4.0...v3.5.0

v1.4.2

v1.4.1 was reverted, so we're skipping to v1.4.2 for clarity.

Adds session_keys_to_persist config option to allow for specific session keys to be persisted across logins (since logging in will reset the session: https://guides.rubyonrails.org/security.html#session-fixation-countermeasures)

v3.4.0

Removes v1_signup param as it is no longer required (RaspberryPiFoundation/profile#1512)

v3.3.0

Added

• Add country attribute to Authenticable (#60)

v3.2.0

Added

• Allow for customisation of returnTo param on log out (#56)
• Allow success_redirect to be configured as a block that is executed in the context of the AuthController (#57)

v3.1.0

Changed

• Altered default value of the issuer to track the authorization_endpoint rather than the token_endpoint (#54)

Fixed

• Ensure redirect_uri is set in the OpenID Connect configuration (#53)

v3.0.0

This is a major release, as we've replaced the underlying OmniAuth library, which might cause some implementation/usage changes.

Changed

• Replaced usage of omniauth-rpi strategy with omniauth_openid_connect (#51)

v2.0.0

Added

• Added dummy route for /auth/rpi to add path helper rpi_auth_login (#44)
• Request and routing specs inside the "dummy" testing app (#44)

Changed

• Refactored RpiAuth::AuthenticationHelper into a concern RpiAuth::Controllers::CurrentUser (#44)
• Refactored RpiAuth::Models::Authenticatable to fix "include"/"extend" issues (#44)
• Refactored RpiAuth::AuthController#callback to reduce its complexity (#44)
• Refactored how auth bypass is enabled (#44)
• OmniAuth origin parameter name set as returnTo (#47)

Updated

• Bump rack from 2.2.4 to 2.2.7 (#49)
• Bump globalid from 1.0.0 to 1.1.0 (#48)

v1.4.0

The brand parameter can now optionally be set (for use by the Profile application)