Release 1.1.0
This release contains following improvements and bugfixes:
- Next Step stores information about user identities, credentials, and generated OTP authorization codes.
- Next Step authenticates users using credentials, OTP authorization codes, or a combination of these two methods.
- Next Step manages applications, user roles, contacts, aliases, credential policies / definitions, and OTP policies / definitions.
- Next Step stores historical information about user authentication, user identity changes and credential history.
- Next Step RESTful API can be used to fully configure and manage the Next Step application.
- Sensitive database record encryption, password hashing, and end-to-end encryption.
- Upgrade of hashing algorithm during password verification, re-encryption of encrypted records in case of a configuration change.
- Authentication method downgrade and automatic enabling of PowerAuth token on operation update.
- Integration of Passay library for generating and validating credentials.
- Integration of Wultra auditing library for persisting audit records about authentication processes.
- Integration with PowerAuth operations for separating complex Next Step operations into smaller ones.
- Next Step can be used as a proxy for Data Adapter authentication calls.
- Extension of user info endpoints for publishing arbitrary data.
- All REST clients are now migrated to
rest-client-base
. - Published OpenAPI documentation for Next Step.
- PostgreSQL database is now officially supported.
- Minimum Java version increased to Java 11.
- Bouncy Castle library is now bundled with the applications.
- Dependency updates.