mO OAuth/OpenID Connect (OIDC) for Bitbucket SSO

A few external libraries with vulnerabilities used in the plugin have been updated to the latest patched version.

• Enhanced validation around redirect parameters to strengthen protection against potential injection risks.

Improvements:

Refined group mapping to minimise redundant entries in the audit logs, ensuring cleaner log records.

Bug Fix:

Fixed the Regex to ensure compatibility with lower versions of Bitbucket.

• Advanced Error Handling with Detailed Messages and Easy-to-Understand Solutions.

New Feature:

• Added an option to redirect users to their respective OAuth providers for authentication based on their groups and directories

Improvements:

• Minor UI Improvements and fixes

New Features:

• Auto-Assign Group Membership to users from the external directory on SSO
• Allow Admins to hide the default Login form and enforce authentication through SSO

Improvements

• Improved the UI for a seamless user experience

• A few external libraries with vulnerabilities used in the plugin have been updated to the latest patched version

• Made the add-on compatible with Bitbucket v9.4.x
• Backward compatibility with all the previous versions of Bitbucket.

Made the add-on compatible with the latest Bitbucket v9.

Made the add-on compatible with the latest Bitbucket v9.

New Feature:

• Force Authentication: Introducing the Force Authentication feature, which, when activated, mandates re-authentication to the OAuth Provider, regardless of the existing user session.

New Feature:

• Force Authentication: Introducing the Force Authentication feature, which, when activated, mandates re-authentication to the OAuth Provider, regardless of the existing user session.

New Feature:

• Added PKCE (Proof of Key Code Exchange) support, enhancing security measures.

Improvements:

• Enhanced user interface, guaranteeing a seamless user experience.

New Feature:

• Added PKCE (Proof of Key Code Exchange) support, enhancing security measures.

Improvements:

• Enhanced user interface, guaranteeing a seamless user experience.

Vulnerability Fix:

• A few external libraries with vulnerabilities used in the plugin have been updated to the latest patched version.
• Made the plugin compatible with the Bitbucket dark theme.

Bug Fix:

• Fixed an issue of wrong redirection after SSO in case the login template is enabled.
• Fixed an issue that was occurring during the import of the backup file.

Vulnerability Fix:

• A few external libraries with vulnerabilities used in the plugin have been updated to the latest patched version.
• Made the plugin compatible with the Bitbucket dark theme.

Bug Fix:

• Fixed an issue of wrong redirection after SSO in case the login template is enabled.
• Fixed an issue that was occurring during the import of the backup file.

New Feature:

• Implemented an auto-login feature that enables users to seamlessly log into the application if they already have an active session in the Identity Provider (IDP).

Bug Fixes:

• Bug fix for the SSO button not getting displayed sometimes on the login page
• Bug fix for custom login page redirecting to the wrong URL
• Some UI improvements for a smooth user experience.

New Feature:

• Implemented an auto-login feature that enables users to seamlessly log into the application if they already have an active session in the Identity Provider (IDP).

Bug Fixes:

• Bug fix for the SSO button not getting displayed sometimes on the login page
• Bug fix for custom login page redirecting to the wrong URL
• Some UI improvements for a smooth user experience.

Added an option to schedule a meeting for setup assistance or demo within the plugin itself.

Added an option to schedule a meeting for setup assistance or demo within the plugin itself.

• Resolved a dependency issue faced during version update.
• Minor UI fixes

• Resolved a dependency issue faced during version update.
• Minor UI fixes

We have done very significant front-end changes in this version, which we're sure you will appreciate.As a part of UI rework, some settings are moved to new sections. We've created a handbook that provides a reference for all the settings available in the app.Before You Upgrade:

• Refer to this guide to know which settings are moved where
• Download the configurations file from the "Backup and Restore" menu

After You Upgrade:

• Test your requirement on your staging environment
• If you're using plugin configuration files in any script, download the new configuration file from the "Backup and Restore" menu and update your script

Change log:

• Added support for multiple OAuth/ OpenID provider configurations
• Reworked User Interface and some settings are moved to new sections
• The existing domain mapping configuration will be moved to the redirection rule. The current SSO redirection functionality and user experience will remain unchanged
• New dashboard to choose pre-configured OAuth Provider apps

We have done very significant front-end changes in this version, which we're sure you will appreciate.As a part of UI rework, some settings are moved to new sections. We've created a handbook that provides a reference for all the settings available in the app.Before You Upgrade:

• Refer to this guide to know which settings are moved where
• Download the configurations file from the "Backup and Restore" menu

After You Upgrade:

• Test your requirement on your staging environment
• If you're using plugin configuration files in any script, download the new configuration file from the "Backup and Restore" menu and update your script

Change log:

• Added support for multiple OAuth/ OpenID provider configurations
• Reworked User Interface and some settings are moved to new sections
• The existing domain mapping configuration will be moved to the redirection rule. The current SSO redirection functionality and user experience will remain unchanged
• New dashboard to choose pre-configured OAuth Provider apps

Bug Fixes

• Updated 3rd party dependencies to resolve vulnerabilities
• Fixed an issue where the user session terminates if the URL path contained "/logout"

Improvements

• Made improvements in the error handling of the On-The-Group Mapping section
• Made improvements in the execution flow of the "Group Filter" and "Regex On Group Names" features

Bug Fixes

• Updated 3rd party dependencies to resolve vulnerabilities
• Fixed an issue where the user session terminates if the URL path contained "/logout"

Improvements

• Made improvements in the error handling of the On-The-Group Mapping section
• Made improvements in the execution flow of the "Group Filter" and "Regex On Group Names" features