2017-09-14T222131

Bugs and Enhancements

• Limit OTP guesses for sign-up #1654
• Update logging #1649 #1655
• Add helpful links on IDV failure page #1640
• Update IDV code #1623, #1630, #1647, #1653
• Update i18n-related code #1634, #1636, #1646, #1650
• Fix user flows tool #1645
• Remove old documentation and unused code #1574, #1632, #1641
• Fix bug with sign up completion page #1642
• Update health checks for database and workers #1620, #1639, #1638
• Visual enhancements #1628, #1637
• Update CI configuration #1629

2017-08-30T210357

Features

• Use a shared style guide library between static site and application #1619, #1622
• Added error page for bad SAML requests #1610
• Added new OTP delivery preferences for phone during identity verification #1597, #1605

Bugs and Enhancements

• Improved accessibility and usability of language selector #1598, #1601
• Updated French translations #1601
• Made sure mail confirmation codes expire #1614
• Improved OIDC logout experience #1592
• Hardened SAML configuration #1608
• Upgraded to Rails 5 #1603, #1607, #1611, #1615, #1617, #1625
• Updated rails configuration #1591
• Updated libraries #1594, #1596, #1600, #1621
• Code refactoring and hygiene #1593, #1595, #1606, #1618
• Minor UI enhancements #1613, #1612, #1626

2017-08-17T211244

Features

• Added CBP OARS as new SP: #1580, #1588
• Added come back later instructions for address confirmation (mail): #1584

Bugs and Enhancements

• Updated load testing support: #1572, #1577
• Added OTP delivery option when changing phone number #1571
• Added new loading / delay indicator #1573
• Clarified address confirmation (mail) process: #1569
• Clarified address confirmation (phone) process: #1530
• Added whitelist method for URL parameters: #1587
• Removed option to provide international number in address confirmation (phone) process: #1578
• Updated logging error message: #1585
• Code refactoring: #1575
• Improved tests: #1558, #1579, #1581, #1583

2017-08-04T171517

Features

• Async: #1513, #1515, #1517, #1520, #1524, #1534, #1567
• Improved internationalization support: #1510, #1522, #1523, #1525, #1528, #1527, #1531, #1560, #1562, #1563, #1529, #1564, #1570
• Added international phone support for 2FA: #1559, #1544
• Added graceful error messaging when mixing mobile and desktop signups: #1548, #1549
• Added banner to indicate demo environments: #1553, #1556
• Automated mail verification letter initiation: #1554

Bugs and Enhancements

• Limited TOTP url to valid TOTP requests: #1555
• Ensuring email is always sent via https: #1506
• Updated SP production config: #1518
• Specified language encoding in verify by mail process: #1521
• Updated to identity proofing flow: #1535, #1538, #1550
• Improved logging: #1540, #1541
• Improved 404 behavior: #1543
• Fixed signup url bug: #1565
• Allow multiple account creation in single session: #1542
• Improved consistency of cancel behavior: #1511, #1526, #1539
• Resolved verify by mail redirect: #1508
• Maintain SP branding after redirect: #1561
• Code refactoring: #1509, #1566
• Improved tests: #1512, #1514, #1516
• Accessibility improvements: #1519
• Updated libraries: #1551

2017-07-06T202016

Features

• Rate limiting for OTP requests: #1464, #1505, #1507

Bugs and Enhancements

• Enhanced support for translations (read locale from HTTP headers): #1488
• Updated dependencies: #1500
• Enhance user input validation for verify by mail codes: #1498
• Improved account reactivation UX: #1487, #1483
• Improved error handling for OIDC requests: #1494, #1492
• Improved response handling from proofing vendor: #1493
• Updated UI of timeout modal: #1486
• Updated service provider settings for customer agency: #1491
• Minor copy changes: #1490, #1489
• Updated link to Authenticator app Help Center question: #1485

2017-06-22T223821

Features

• Enable initial language translation: #1468, #1480
• Display user flows for support and documentation: #1481
• Added feature flag for address confirmation: #1455

Bugs and Enhancements

• Added fields to confirmation letter #1472
• Updated limits in confirmation letter request #1460
• Improved cancel options and destinations #1471
• Updated flow for account recovery #1470
• Extended OIDC support #1467, 1482
• Fully activate account after password reset: #1465
• Enhanced support for identity proofing: #1466
• Added agency service provider #1479
• Updated libraries: #1478
• Minor interface enhancements: #1473, #1474
• Minor copy changes: #1469

2017-06-08T181917

Features

• Show users what attributes an SP has requested #1431, #1433, #1454
• Updated verify by mail flow #1421, #1424, #1442, #1411, #1440, #1460
• Created mail testing configuration #1434
• Enhanced Open ID Connect sign in / sign out process #1437, #1451

Bugs and Enhancements

• Security config change #1461
• Improved consistency of cancel behavior #1436, #1439, #1449
• Resolved analytics bug that interfered with form inputs #1428
• Updated libraries #1438
• Updated log formatting #1444
• Updated deploy configurations #1448
• Minor interface enhancements #1446, #1441, #1453
• Minor copy changes #1445, #1452, #1447
• Refactored code, improved code consistency, and removed unnecessary code #1432, #1389, #1450

2017-05-25T213649

Features

• Allow OIDC users to navigate “back to service provider” #1398
• Hardened production service provider configuration #1381, #1406
• Hardened session storage #1358
• Updated verification failure interaction #1408
• Rename / redirect /profile to /account #1414
• New authenticator app setup #1420

Bugs and Enhancements

• Updated logging #1392
• Updated activation code by mail process #1410, #1369
• Updated cookie security settings #1374, #1403
• Updated documentation #1385, #1393
• Refined personal key errors #1377, #1386
• Refined load testing #1427
• Updated screenshot capture tool #1426
• Updated deployment mechanism #1429, #1430
• Resolved conflicts between lockouts and timeouts #1376, #1378,
• Updated libraries #1397
• Minor interface enhancements #1380, #1373, #1382, #1384, #1379, #1395, #1399, #1402, #1407, #1412, #1405, #1423
• Minor copy changes #1387, #1404, #1413, #1405, #1422
• Refactored code, improved code consistency, and removed unnecessary code #1370, #1394, #1396, #1401, #1400, #1409, #1415, #1418, #1425

2017-04-27T171416

Features

• Prompt user for LOA3 confirmation by mail #1348
• Make personal key easier to enter #1328, #1377
• Make profile page easier to understand #1336, #1360, #1352, #1375

Bugs and Enhancements

• Fix deploy issues #1341
• Restrict production SPs #1381
• Fixes session timeout when locked out #1376
• Fixed 2FA reauthentication error #1356
• Updated cookie security settings #1372, #1374, #1403
• Updated libraries #1346, #1345, #1318
• Minor interface enhancements #1365, #1359, #1371
• Minor copy changes #1337
• Refactored code, improved code consistency and removed unnecessary code #1338, #1341, #1340, #1344, #1388, #1342, #1349, #1350, #1353, #1351, #1354, #1355, #1357, #1361, #1363, #1364, #1366, #1368, #1367

2017-04-14T160110

Features

• SPs can specify attribute requests in ASCII or UTF-8 #1183
• Added support for load-testing #1188
• Added support for continuing signup in new browser #1265, #1275

Bugs and Enhancements

• Updated caching headers #1171
• Updated test settings #1186
• Updated libraries #1200, #1267
• Updated profile page #1210, #1249, #1271, #1327
• Improved accessibility #1176, #1198, #1202, #1224, #1270, #1280
• Improved error handling #1221, #1251
• Updated links in email #1247
• Updates to personal key #1244, #1259, #1268, #1294, #1304, #1308, #1306
• Removed DAP from authenticated pages #1257
• Updated address verification by mail #1260
• Updated branded experience #1285
• Updated cookie settings for Chrome #1300, #1252
• Updated deployment process #1331
• Fixed bug when cancelling signup #1325
• Minor interface enhancements #1309, #1311
• Minor copy changes #1264, #1283, #1296, #1293, #1295, #1299, #1301, #1305, #1303, #1314, #1321
• Refactored code, improved code consistency, and removed unnecessary code #1194, #1203, #1205, #1211, #1217, #1222, #1226, #1228, #1230, #1258, #1227, #1266, #1262, #1282, #1284, #1287, #1279, #1307, #1310, #1316, #1317, #1320, #1324, #1319, #1330, #1334, #1333, #1332