2.10.8

This is a security release that will harden the application against CVE 2019-346

• Upgrade xmlseclibs to version 3.0.4 #226

2.10.8-20191107132731Z-91b93887d31a653a00b290b0f959408b66405dcc

Merge pull request #226 from OpenConext/feature/cve-2019-3465-r16

Upgrade xmlseclibs to version 3.0.4

3.0.0 FGA (fine grained authorization)

The new fine grained authorization logic will allow Ra's from other institutions to accredidate RA's on behalf of another organisation. This is determined based on the institution configuration. https://github.com/OpenConext/Stepup-Deploy/wiki/rfc-fine-grained-authorization/b6852587baee698cccae7ebc922f29552420a296

Features & Bugfixes
The changes to SelfService in regards to the FGA changes only where to remain compatible with API changes made for Stepup-RA. No new features have been added.

3.0.0-20190731091636Z-5da381fa8e7be7e4a0293625e081dcf15906b8e5

Update changelog.md

2.10.7-20190327133628Z-2f5d3ba2332adae6f18b036ab0a41a618ab7b020

Update changelog

2.10.6-20190130134255Z-a699dcde387161e491db75999461132ad474347b

Release-16

2.10.6

Improvement

• Align buttons on 'Tokens' page #194

2.10.5

Bugfix

• Fix the token sorting PART II #192

2.10.4

Improvements

• Open help in new tab #187
• Introduce multi-lingual logout redirect #186

Bugfixes

• Fix the token sorting #185

2.10.4-20190115112624Z-2441433c388b28d3ecebd56d154981ddb96e13da

Merge remote-tracking branch 'origin/release/2.10'