Updated Config-Shim to v1.0.0

Changed

• Updated config-shim to v1.0.0
• Updated dependencies
• Better multiple platform support

Fix handling of AppConfig values with an equals sign

Fixed

• Update config-shim to handle values that contain an equals sign

Fix getVerifiedMfaOptionsCount to count each individual webauthn separately

Added

• Add test to verify that users with multiple webauthns are not sent backup codes email

Removed

• Remove Vagrant references

Fixed

• getVerifiedMfaOptionsCount should count each individual webauthn separately

Better error handling in MethodCreate endpoint

Added

• Get the release tag from GitHub for use in the Sentry release string

Fixed

• Fail earlier and produce a more appropriate error message if employee_id is not found.
• README correction

Option to use AWS AppConfig

Added

• Added an option to use AWS AppConfig to provide configuration values.

Removed

• Removed signal trap from run.sh since it's no longer effective. The move to AWS CloudWatch logs in version 5.0.0 required Apache to run in the foreground. Gracefully stopping the container is a problem yet to be solved.

Built using GitHub Actions

Added

• Add test to confirm that trying to update email to an empty string returns an error

Changed

• Converted from Codeship to GitHub Actions

do not log request body data

Changed

• Configure Sentry to not send request body data to Sentry logging servers.

Full Changelog: 6.6.6...6.6.7

Dependency updates

Changed

• Various local development and deployment tweaks.

Security

• Dependency updates

Rehash user passwords to a higher hash cost

Fixed

• Updated php-cs-fixer to 3.x so it can run on the current version of PHP.
• Used make psr2 to update PHP source files to consistent style.

Security

• Rehash a user's password during verify if the hash cost is too low. IDP-126

Fix webauthn timestamp bug introduced in 6.6.3

Fixed

• When searching for webauthn records to update the last-used timestamp, don't look for one with a key_handle_hash of "u2f" unless one cannot be found matching the key_handle_hash received from the webauthn API.