[mitreid-connect] Release 1.2.3

Justin Richer jricher at MIT.EDU
Mon Dec 21 10:43:31 EST 2015


New release 1.2.3 is out now, change log includes:


 - updates to underlying libraries such as Nimbus JOSE JWT, Spring, and Spring Security
 - client filter URL now configurable
 - only JSP and TAG files are filtered during WAR build
 - state is handled more sensibly in client
 - some services are cleaned up, removing unused code
 - small UI improvements including element alignment and pages scrolling to top on navigation
 - optionally allow dynamic clients to register for multiple flows simultaneously; this is off by default
 - language system now can load from multiple files allowing better override of local text
 - loggers on cleanup tasks print only when something interesting happened
 - fixed Location URL returned by UMA server
 - changed copyright notice to point to MIT Internet Trust Consortium (the successor to MIT KIT)
 - added cache to userinfo fetcher
 - access and refresh tokens are checked for expiration on all individual token reads



Since this update includes several security updates in underlying libraries and some bug fixes that could keep the server from returning invalid token states, update is recommended for the 1.2 branch.

 — Justin


More information about the mitreid-connect mailing list