2.15.0
Security
- Add "secret" to the sensitive strings (bf821b73)
- Support account locking after too many failed login attempts (#79)
Workflows
- Support wildchars in the HTTP nodes retry conditions (#271)
- Support generating QR codes (#273)
- Add
chunked
filter in the Jinja2 engine (253f3fbf892bfbea51f51bd367c1a7763ee2dc96) - Support the possibility to block/allow users with no email when the 2FA is enforced (#299)
User Management
- hide user password fields when the user doesn't support reset-password (866f2e295f2bb29c2e3859d6a43f5e4ab7de7273)
- show the user is local in the users list (#302)
Templates
- Resolve the template name using wildcards (f8f68f512f93a3321b78eeea5d18b6dc53fa3824)
Job Scheduler
- Support timezone using APIO_TIMEZONE environment variable (e1394684d96c88d558cfebfc95cf7fae48b9a47b)
- Lock jobs 1-by-1 to let other scheduler instances to take over (#265)
- Disable the InstanceStore cache in the InstanceContext's created (#267)
Broadsoft Integration
- Support another audit record type for phone vendors calls made by the Broadsoft gateway (#253)
- Add a configuration flag to reject logins from expired Broadsoft users (#286)
Force expired Broadsoft users to reset their password at next login (#286)- this change is rollback because the Roger portal is not yet ready.
Internals
- Bump to Go 1.23
- Rework the IDP session handling to support multiple IDP's (#278)
- Parent context is now a pointer to the parent context instead of a full copy per subworkflow (#280)
- Consume the subworkflows results in parallel of the subworkflows execution (#280)
- Fix the task ID assignation to prevent clash in massive multithreaded environments (#282)