Skip to content

Latest commit

 

History

History
1222 lines (667 loc) · 56.3 KB

CHANGELOG.md

File metadata and controls

1222 lines (667 loc) · 56.3 KB

Changelog

2.11.2 (2024-02-01)

Full Changelog

Merged pull requests:

  • Fix for DUO Universal Prompt authentication #426 (SMxJrz)

v2.11.1 (2024-01-16)

Full Changelog

v2.11.0 (2024-01-16)

Full Changelog

Implemented enhancements:

Merged pull requests:

v2.10.0 (2023-12-16)

Full Changelog

Implemented enhancements:

  • Support MFA Token from STDIN or ENV or AUTHFILE #174
  • add support for mfa_token env and mfa-token-command #420 (mheiges)

Merged pull requests:

v2.9.0 (2023-10-24)

Full Changelog

Implemented enhancements:

  • Silverfort support for aws-adfs authentications #415 (rotemsf)

Closed issues:

  • Error: Cannot begin authentication process. The error response: {"stat": "FAIL", "message_enum": 57, "data": {}} #411

Merged pull requests:

v2.8.2 (2023-09-14)

Full Changelog

Fixed bugs:

  • All DUO authentication methods currently failing #407
  • fix: drop user-agent header from requests as it only seems to cause issues, especially with Duo #410 (pdecat)

Merged pull requests:

v2.8.1 (2023-06-27)

Full Changelog

Fixed bugs:

  • Failed response from DUO on macOS Darwin #393
  • Failed response from Duo #355

Closed issues:

  • Number Matching | Microsoft Authenticator #371

Merged pull requests:

  • Also fix User-Agent string on MacOS (Darwin) #394 (Leglaw)

v2.8.0 (2023-06-26)

Full Changelog

Implemented enhancements:

  • Add support for number matching in Microsoft Authenticator app #387 (martinverup)

Fixed bugs:

  • Use Linux user-agent string to work-around Duo permission denied errors: {"stat": "FAIL", "message_enum": 7, "data": {}} #378 (pdecat)

Merged pull requests:

v2.7.0 (2023-05-09)

Full Changelog

Implemented enhancements:

Merged pull requests:

v2.6.3 (2022-10-29)

Full Changelog

Merged pull requests:

  • Move release instructions to a script #360 (pdecat)
  • Do not error if release already exists in test.pypi.org #359 (pdecat)

2.6.2 (2022-10-28)

Full Changelog

Implemented enhancements:

  • Automatically update help messages in README, and run pre-commit hooks in CI #358 (pdecat)

2.6.1 (2022-10-28)

Full Changelog

Merged pull requests:

2.6.0 (2022-10-26)

Full Changelog

Implemented enhancements:

  • Support for Passcode #162
  • Add Duo Passcode support for both traditional and universal prompt #353 (trav-c)
  • Add support for role,provider ordering of SAML Role attribute #352 (trav-c)

2.5.1 (2022-10-10)

Full Changelog

Merged pull requests:

2.5.0 (2022-10-10)

Full Changelog

Implemented enhancements:

  • feature: Allow enforcing config role_arn #342
  • Add support for Verified Duo Push MFA #346 (pdecat)
  • feature: Allow enforcement role_arn config variable #343 (pvbouwel)

Merged pull requests:

2.4.0 (2022-06-22)

Full Changelog

Merged pull requests:

2.3.3 (2022-06-22)

Full Changelog

Merged pull requests:

2.3.2 (2022-06-10)

Full Changelog

Fixed bugs:

  • login --role-arn "?" not working on an existing profile #227

Merged pull requests:

2.3.1 (2022-06-09)

Full Changelog

Merged pull requests:

  • Hotfix python 3.10 version in .github/workflows/build.yml 🤦 #248 (pdecat)

2.3.0 (2022-06-09)

Full Changelog

Fixed bugs:

  • fido2 1.0.0 breaks aws-adfs #243

Merged pull requests:

  • Drop support for python 3.6 and update dependencies (and define better constraints as pip does not honor poetry.lock) #245 (pdecat)

2.2.2 (2022-06-08)

Full Changelog

Merged pull requests:

2.2.1 (2022-06-03)

Full Changelog

Closed issues:

  • cache file truncation #234

Merged pull requests:

2.2.0 (2022-06-03)

Full Changelog

Merged pull requests:

  • Allow overriding the Duo factor and device to use #240 (pdecat)

2.1.0 (2022-06-02)

Full Changelog

Closed issues:

  • Duo Universal Prompt breaks aws-adfs compatibility #236

Merged pull requests:

2.1.0-alpha.2 (2022-06-02)

Full Changelog

2.1.0-alpha.1 (2022-06-02)

Full Changelog

2.0.5 (2022-06-01)

Full Changelog

Merged pull requests:

  • Disable cache if role_arn is not provided #232 (pdecat)

2.0.4 (2022-06-01)

Full Changelog

Merged pull requests:

2.0.3 (2022-05-07)

Full Changelog

Merged pull requests:

  • feat(doc): use github-changelog-generator for generating CHANGELOG.md #233 (pdecat)
  • Hide RSA token #231 (gchambert)

2.0.2 (2022-04-27)

Full Changelog

Merged pull requests:

2.0.1 (2022-02-26)

Full Changelog

Fixed bugs:

  • going back and forth between multiple hosts #222

Merged pull requests:

2.0.0 (2022-02-09)

Full Changelog

Closed issues:

  • Support Duo webauthn #208

Merged pull requests:

2.0.0-alpha.11 (2022-02-09)

Full Changelog

2.0.0-alpha.10 (2022-02-09)

Full Changelog

2.0.0-alpha.9 (2022-02-09)

Full Changelog

2.0.0-alpha.8 (2022-02-09)

Full Changelog

2.0.0-alpha.7 (2022-02-09)

Full Changelog

Implemented enhancements:

  • Provide a command or option to get the console link #143

Merged pull requests:

  • Print AWS web console sign-in url #197 (pdecat)
  • Add --username-password-command to read username and password from the output of a shell command #196 (pdecat)

2.0.0-alpha.2 (2022-01-29)

Full Changelog

Merged pull requests:

  • Update dependencies and drop python 3.5 support #206 (pdecat)

2.0.0-alpha.1 (2022-01-26)

Full Changelog

2.0.0-alpha.0 (2022-01-26)

Full Changelog

Implemented enhancements:

  • AWS session caching is not implemented, ADFS is called every time #182

Closed issues:

  • printenv should output only shell commands, the summary isn't #180

Merged pull requests:

  • Update poetry from 1.1.10 to 1.1.11 to fix python 3.10 compatibility #202 (pdecat)
  • Trigger Github Actions build job on all push tags events #201 (pdecat)
  • Trigger Github Actions build job on push events to tags starting with 'v' #200 (pdecat)
  • Add session credentials cache #195 (pdecat)
  • printenv excludes summary to be shell readable #181 (Tantalon)

1.25.0-alpha.2 (2021-09-30)

Full Changelog

Implemented enhancements:

  • Support AWS_DEFAULT_PROFILE #123
  • Duo authenticator status code calling #80
  • Feature request / security : read username and password from file #78
  • parameter --profile= should have precedence over environment variable #63

Fixed bugs:

  • del password and python string objects #187
  • Login issues solved by changing the code and parameters #142
  • If env AWS_PROFILE or AWS_DEFAULT_PROFILE are set, a nonsensical provider_id is used. #60

Closed issues:

  • SAML parsing breaks on ADFS because it expects a specific XML prefix #184
  • Getting the below Error #161
  • This account does not have access to any roles #98

Merged pull requests:

  • Depend on requests-negotiate-sspi on Windows. On other platforms, depend on requests-kerberos and pykerberos. #199 (pdecat)
  • Use Poetry for project and dependencies management #194 (pdecat)
  • Fix Github Actions build job #193 (pdecat)
  • Compiling lxml from source is no longer needed with python 3.9 #192 (pdecat)
  • Github Actions no longer supports python 3.4 #191 (pdecat)
  • Properly erase password from memory #190 (pdecat)
  • Automate PyPI publishing with poetry PEP517 built dists #177 (pdecat)

1.24.5 (2020-10-12)

Full Changelog

Closed issues:

  • There was an issue when following the Duo result URL after authentication #168

Merged pull requests:

1.24.4 (2020-07-05)

Full Changelog

Implemented enhancements:

  • NO_PROXY Environment Variable #77

Closed issues:

  • integration to aws credential_process #112

Merged pull requests:

1.24.3 (2020-03-17)

Full Changelog

Closed issues:

  • Duo authentication not working with later versions of aws-adfs #157

Merged pull requests:

  • Always return the same number of values from _initiate_authentication() #160 (pdecat)

1.24.2 (2020-03-07)

Full Changelog

Closed issues:

  • GovCloud Initial Login #102

Merged pull requests:

  • Ask for authentication method if there is no default method set in Duo Security settings #158 (johan1252)

1.24.1 (2020-02-13)

Full Changelog

Merged pull requests:

1.24.0 (2020-01-25)

Full Changelog

Merged pull requests:

  • Change AuthMethod parameter to FormsAuthentication #151 (rheemskerk)

1.23.0 (2020-01-23)

Full Changelog

Merged pull requests:

1.22.0 (2019-12-29)

Full Changelog

Merged pull requests:

  • Default SSPI to True on Windows only, False otherwise #150 (pdecat)

1.21.2 (2019-12-28)

Full Changelog

Closed issues:

  • Potential dependency conflicts between aws-adfs and botocore #148

Merged pull requests:

1.21.1 (2019-12-18)

Full Changelog

Closed issues:

  • Installation for aws-adfs fails #146

Merged pull requests:

  • Document new libkrb5-dev system dependency for pykerberos #147 (pdecat)

1.21.0 (2019-12-17)

Full Changelog

Closed issues:

  • Should requests_negotiate_sspi work on a Linux box? #100

Merged pull requests:

  • Duo: support U2F with no preferred factor or device configured #145 (pdecat)
  • Kerberos support #144 (bodgit)

1.20.0 (2019-12-03)

Full Changelog

Merged pull requests:

  • U2F: fido2 v0.8.1 compatibility (U2FClient.sign timeout renamed to event) #141 (pdecat)
  • Pin fido2 dependency to < 0.8.0 as it is a breaking release #140 (pdecat)

1.19.1 (2019-11-16)

Full Changelog

Merged pull requests:

  • Do not print stack trace if no U2F device is available #138 (pdecat)

1.19.0 (2019-10-15)

Full Changelog

Merged pull requests:

  • Fix AttributeError: 'generator' object has no attribute 'append' on python3 #136 (pdecat)
  • Add options to trigger or not the default authentication method when U2F is available #135 (pdecat)

1.18.1 (2019-09-26)

Full Changelog

Merged pull requests:

  • Run tests with python 3.6, 3.7 and 3.8-dev #131 (pdecat)

1.18.0 (2019-09-25)

Full Changelog

Closed issues:

  • ERROR: Cannot extract roles from response #128
  • Failure in Duo module in v1.17.0 #126

Merged pull requests:

  • lxml 4.4.0 dropped support for python 3.4 #130 (pdecat)
  • Use MozillaCookieJar to support cookies with "expires" far in the future on Windows #129 (pdecat)
  • Add FIDO/U2F support to Duo authentication #127 (pdecat)

1.17.0 (2019-07-11)

Full Changelog

Merged pull requests:

v1.16.0 (2019-06-04)

Full Changelog

Merged pull requests:

1.15.0 (2019-04-25)

Full Changelog

Merged pull requests:

1.14.0 (2019-04-20)

Full Changelog

Implemented enhancements:

  • Feature request for more authentication methods #53

Merged pull requests:

  • save provider_id config #121 (tommywo)
  • Fix Duo authentication initiation failure messages #119 (pdecat)

1.13.0 (2019-02-23)

Full Changelog

Merged pull requests:

  • Add support for Azure MFA Server #117 (0x91)

1.12.3 (2019-01-23)

Full Changelog

Merged pull requests:

  • Fallback on prompt if env, stdin or auth file do not provide both username and password #115 (pdecat)
  • Save duo session cookies #111 (NotMrSteve)

1.12.2 (2018-09-19)

Full Changelog

Closed issues:

  • Duo Authentication Issue #105

Merged pull requests:

  • Corrected the XPath expression to work with the latest version of AWS… #107 (jan-molak)

0.12.1 (2018-08-25)

Full Changelog

Closed issues:

  • Error: Python has stopped working when running aws-adfs #104
  • Using the environment and stdin parameters #91

Merged pull requests:

  • Fix Duo API change - follow result_url and return cookie from result #106 (bghinkle)

0.12.0 (2018-07-05)

Full Changelog

Closed issues:

  • Default Profile #86

Merged pull requests:

0.11.1 (2018-06-20)

Full Changelog

Closed issues:

  • Symantec VIP has obfuscated form #93

Merged pull requests:

0.11.0 (2018-05-10)

Full Changelog

Implemented enhancements:

  • Incorporating the new CLI/API session duration functionality #82

Merged pull requests:

  • Allow to specify SAML response from local file #92 (avoidik)

0.10.1 (2018-04-14)

Full Changelog

0.10.0 (2018-04-14)

Full Changelog

Merged pull requests:

0.9.1 (2018-04-09)

Full Changelog

Merged pull requests:

0.9.0 (2018-04-08)

Full Changelog

Closed issues:

  • Requirements? botocore, boto3, and awscli downgrades? #75

0.8.0 (2018-03-01)

Full Changelog

Implemented enhancements:

  • Support for Duo's "Remember Me" feature #40
  • Allow selection of a device for second authentication factor in duo security integration when the preferred device setting is missing #33

Fixed bugs:

  • adfs conflicts with default profile #37

Merged pull requests:

0.7.0 (2018-02-16)

Full Changelog

Implemented enhancements:

  • How to use "role-arn" parameter? #70

0.6.1 (2018-02-07)

Full Changelog

0.6.0 (2018-01-30)

Full Changelog

Merged pull requests:

  • Add support for Ansible Tower/AWX workflow authentication #71 (zanettibo)

0.5.0 (2018-01-27)

Full Changelog

Implemented enhancements:

  • Role arn passed as parameter to the login method #66

Closed issues:

  • botocore VersionConflict issue #68

Merged pull requests:

0.4.8 (2018-01-03)

Full Changelog

Closed issues:

  • aws-adfs installs with botocore-1.8.15, but requires botocore-1.8.17? both? #65

0.4.7 (2017-12-24)

Full Changelog

0.4.6 (2017-12-24)

Full Changelog

Closed issues:

  • Bump awscli and botocore versions #64

0.4.5 (2017-12-17)

Full Changelog

Closed issues:

  • Bump awscli to 1.12.2 #62
  • Bump to botocore==1.8.2 #61

0.4.4 (2017-11-28)

Full Changelog

Fixed bugs:

  • Version 0.3.9 returns no roles #50

Closed issues:

  • SSL certificate verify failed even with --no-ssl-verification #59

0.4.3 (2017-11-02)

Full Changelog

0.4.2 (2017-11-02)

Full Changelog

Merged pull requests:

  • Fix Negotiate auth on non-domain-joined Windows hosts #58 (brandond)

0.4.1 (2017-10-17)

Full Changelog

0.4.0 (2017-10-12)

Full Changelog

Fixed bugs:

  • When using two roles error: This account does not have access to any roles #55

Merged pull requests:

  • Add Symantec VIP Access support #56 (irgeek)

0.3.18 (2017-10-06)

Full Changelog

0.3.17 (2017-10-05)

Full Changelog

0.3.16 (2017-10-04)

Full Changelog

0.3.15 (2017-10-04)

Full Changelog

Implemented enhancements:

  • When logging in with aws-adfs and Duo MFA #34

0.3.14 (2017-09-19)

Full Changelog

Implemented enhancements:

  • Dependency incompatibility with botocore 1.6.0+ #52

0.3.13 (2017-09-17)

Full Changelog

0.3.12 (2017-08-14)

Full Changelog

Implemented enhancements:

  • Introduce git tag based versioning #47

0.3.11 (2017-08-13)

Full Changelog

Fixed bugs:

  • Upgrade from 0.3.6 to 0.3.7 breaking simple authentication #49

0.3.9 (2017-07-28)

Full Changelog

0.3.8 (2017-07-20)

Full Changelog

Implemented enhancements:

  • ADFS with DUO list account alias instead of account IDs #35

0.3.7 (2017-07-11)

Full Changelog

Implemented enhancements:

  • Script-ability #45

0.3.6 (2017-06-24)

Full Changelog

Fixed bugs:

  • Version 0.3.4 returns no roles. #44

Merged pull requests:

  • add login argument to accept username/password from stdin #48 (eikenb)

0.3.5 (2017-06-21)

Full Changelog

Fixed bugs:

  • Python 3 compatible? #41

0.3.4 (2017-06-20)

Full Changelog

Implemented enhancements:

  • Duo Authentication fails for users who don't have a preferred Auth method. #30

Fixed bugs:

  • Parsing error while trying to login to Duo MFA #42
  • --region and --output-format flags don't seem to be working #27

Closed issues:

  • Issues with Centos 7 #39
  • TypeError #32
  • aws-adfs not working on macOS Sierra - System-installed Python 2.7 #31
  • On login, skipping profile option causes error. #28

Merged pull requests:

0.3.3 (2017-04-12)

Full Changelog

0.3.2 (2017-04-09)

Full Changelog

Fixed bugs:

  • UnicodeEncodeError: 'ascii' codec can't encode character u'\u201c' in position 18498: ordinal not in range(128) #25

Closed issues:

  • Add option to remove adfs Cookie that stores user account information #26

0.3.1 (2017-04-04)

Full Changelog

Closed issues:

  • Failed with DUO MFA enabled. #24

0.3.0 (2017-03-27)

Full Changelog

Closed issues:

  • --verbose flag fails when used with login --adfs-host. #23
  • Requests specifying Server Side Encryption with AWS KMS managed keys require AWS Signature Version 4 #22

0.2.3 (2017-03-04)

Full Changelog

Closed issues:

  • list output is too simple #20

0.2.2 (2017-03-01)

Full Changelog

Closed issues:

  • Ability to change the URN in html_roles_fetcher.py #18

0.2.1 (2017-02-16)

Full Changelog

Closed issues:

  • Add an option to change the STS token duration #17

Merged pull requests:

0.2.0 (2016-11-05)

Full Changelog

Closed issues:

  • automate aws-adfs with expect #16

Merged pull requests:

  • Default to 'default' profile, in line with other AWS tools. #14 (brandond)

0.1.5 (2016-10-11)

Full Changelog

Merged pull requests:

  • Improve handling of errors caused by excessive cookie growth. #15 (brandond)

0.1.4 (2016-10-04)

Full Changelog

Merged pull requests:

0.1.3 (2016-08-30)

Full Changelog

Closed issues:

  • requests.exceptions.SSLError: [Errno 2] - aws-adfs version 0.1.1 #11

Merged pull requests:

  • Move pytest-runner out of setup-requires #12 (brandond)

0.1.2 (2016-08-27)

Full Changelog

0.1.1 (2016-08-18)

Full Changelog

Merged pull requests:

0.1.0 (2016-08-14)

Full Changelog

Merged pull requests:

  • Add support for Kerberos SSO on Windows via requests_negotiate_sspi #9 (brandond)

0.0.9 (2016-07-22)

Full Changelog

Closed issues:

  • Ability to add environment variables #8
  • UnicodeEncodeError: 'ascii' codec can't encode character u'\u017a' in position 705: ordinal not in range(128) #6

Merged pull requests:

0.0.8 (2016-07-19)

Full Changelog

Closed issues:

  • Clear IAM role from config #5

0.0.7 (2016-07-12)

Full Changelog

Merged pull requests:

  • Store last username in profile config; use it as default for prompt. #4 (brandond)

0.0.6 (2016-07-10)

Full Changelog

Merged pull requests:

  • Add support for legacy aws_security_token key in credentials file #3 (brandond)

0.0.5 (2016-07-10)

Full Changelog

Closed issues:

  • Runnable script instruction #1

Merged pull requests:

  • Remove storage of credentials, in favor of storing ADFS session cookies. #2 (brandond)

0.0.4 (2016-07-08)

Full Changelog

0.0.3 (2016-06-25)

Full Changelog

0.0.2 (2016-06-25)

Full Changelog

0.0.1 (2016-06-25)

Full Changelog

* This Changelog was automatically generated by github_changelog_generator