Added

• [admin] user csv import metadata
• [infra] organization creation in static configuration
• [admin] client key pair configuration + support for EC keys

Fixed

• [ssi] several verifiable credentials issuance and presentation fixes
• [auth] configurable status display in id_token claims
• [admin] user with empty metadata save
• [admin] federated users deletion

Added

• [ssi] OpenID for Verifiable Credentials Presentation implementation

Fixed

• [auth] fix authorize entrypoint

Fixed

• [admin] ipv6 log display

Security

• [infra] remove .env.example.sig as suspicious file

Added

• [ssi] Configurable verifiable credentials issuance with oid4vci implementation
• [ssi] Siopv2 same device implementation
• [auth] Demonstration proof of possession implementation
• [auth] Pushed Authorization Request implementation
• [infra] Server ip address bindings configuration via environment variables
• [infra]Infrastructure as Code with static file configuration
• [admin] Admin ui improvements
• [auth] Better identity federation
• [identity] Webauthn integration
• [infra] Remote IP logging

Security

• [admin] instance authenticated admins are sub or organization restricted

Fixed

• [infra] Fix organization and sub admin access restriction

Added

• [identity] user organisation management
• [identity] TOTP second factor support
• [identity] user roles management
• [infra] split auth/admin/gateway/all docker images
• {infra] split gateway, admin, auth releases
• {infra] system wide installation script
• {infra] gather statistical info on installation

Added

• [gateway] introspected token forwarding to updatreams
• [identity] email templates edition
• [identity] configure, expose and edit user metadata
• [identity] user metadata configuration
• [gateway] static configuration
• [gateway] microgateways
• [identity] identity federation (login with button)
• [auth] better well-known openid configuration
• [auth] dynamic client registration
• [auth] client authentication methods configuration
• [auth] global signing key pairs

Security

• [identity] invalidate user reset password token at use

Initial beta release