Skip to content

Release v1.14.0: New Authentication and Basic Authorization with Auth0 (2021/9/18)
Compare
Choose a tag to compare
@aerinsol aerinsol released this 20 Sep 08:50
· 1033 commits to master since this release
v1.14.0
5688fc4
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

Auth0 Integration

  • Full integration with Auth0 for authentication and basic authorization using EU tenant servers across the all stages of the SDLC (development, staging, production)
  • Create New User user flow in app syncs with Auth0 service
  • Addition of base_id and organisation_id identifiers to the user's JWT to facilitate easy access controls down the line
  • Integrated Auth0 errors into Sentry reporting
  • App internal password change rules manually replicate that of Auth0 settings - changing the requirements down the line will mean that needs to be refactored. Hopefully migration of the user self-management module will happen before then.
  • Added testing for Auth0 service on 1) correct login redirect, 2) unauthenticated user access controls, and 3) user database synchronization between app and Auth0

Others

  • Added validation to emails to check that the domain exists in DNS records, as well as a "type your email twice" solution
  • Fix for failing Cypress tests
Assets 2
Loading