3.0.1

This is a security release that will harden the application against CVE 2019-346

• Upgrade Stepup-saml-bundle to version 4.1.8

3.0.1-20191107123531Z-8bc5f7d6baa6a2a69708f13b289fffcd690e7cf5

Merge pull request #227 from OpenConext/feature/cve-2019-3465-r17

Upgrade Stepup-saml-bundle to version 4.1.8

2.10.8

This is a security release that will harden the application against CVE 2019-346

• Upgrade xmlseclibs to version 3.0.4 #226

2.10.8-20191107132731Z-91b93887d31a653a00b290b0f959408b66405dcc

Merge pull request #226 from OpenConext/feature/cve-2019-3465-r16

Upgrade xmlseclibs to version 3.0.4

3.0.0 FGA (fine grained authorization)

The new fine grained authorization logic will allow Ra's from other institutions to accredidate RA's on behalf of another organisation. This is determined based on the institution configuration. https://github.com/OpenConext/Stepup-Deploy/wiki/rfc-fine-grained-authorization/b6852587baee698cccae7ebc922f29552420a296

Features & Bugfixes
The changes to SelfService in regards to the FGA changes only where to remain compatible with API changes made for Stepup-RA. No new features have been added.

3.0.0-20190731091636Z-5da381fa8e7be7e4a0293625e081dcf15906b8e5

Update changelog.md

2.10.7-20190327133628Z-2f5d3ba2332adae6f18b036ab0a41a618ab7b020

Update changelog

2.10.6-20190130134255Z-a699dcde387161e491db75999461132ad474347b

Release-16

2.10.6

Improvement

• Align buttons on 'Tokens' page #194

2.10.5

Bugfix

• Fix the token sorting PART II #192