CHANGELOG.md

Change Log

All notable changes to this project will be documented in this file. This change log follows the conventions of keepachangelog.com.

Unreleased

0.8.0 - 2022-10-23

Added

• Add running tests for Clojure 1.10.1, 1.10.2, 1.10.3, 1.11, 1.11.1, 1.12.0-alpha1 (in addition to 1.8 & 1.9)
• Start using Github Actions for running tests across a matrix of ubuntu, macos, windows & java 8, 11, 16, 17

Changed

• Bump minimum Clojure version to 1.10.0 (because it's the minimum version supported on officially supported Java LTS releases)
• Update all the dependencies to the latest versions accordingly

Removed

• Drop running tests for Clojure 1.6 & 1.7
• Drop Travis config

Notes

• An intermediate unreleased version had an attempt at (constant) time safe comparision of tokens introduced in #11. This change introduced a subtle vulnerability (see #12 for details). The following commits in the main branch are vulnerable:

  • d69435b4d91769a8f84ecd0e32ebda607fc9de85
  • 60d161c525a1b750fff28d4adcc5c2cc7597cf4c
  • 86a90eb55103fbebb878a8be2208433825bec0ed

  We've searched GitHub to make sure nobody is using these.

0.7.0 - 2020-08-09

Added

• Add clock drift (time-step-offset) support for TOTP

0.6.0 - 2020-06-21

Added

• Supported on Clojure 1.10.1

Changed

• Bumped up all dependencies to use latest versions.
• Only CI test on LTS, latest and EA jdk versions.
• Use system default RNG instead of hardcoded SHA1PRNG. (Available implementations listed at https://docs.oracle.com/javase/8/docs/technotes/guides/security/SunProviders.html#SecureRandomImp)

0.5.0 - 2019-02-22

Added

• Supported on Clojure 1.10

Changed

• Bumped up all dependencies to use latest versions.

0.4.0 - 2017-12-09

Added

• Add autogenerated documentation to serve via Github pages.
• Add support for Docker and Compose for development environments.
• Supported on Clojure 1.9

Removed

• Removed support for QR Code URLs generated via Google Chart APIs.
• Remove Vagrant support for development environments.

0.3.0 - 2017-08-06

Added

• Add Contributors section to the readme.
• Add Changelog section to the readme.
• Add support for QRcode image generation locally.

Changed

• Rename LICENSE file to LICENSE.txt
• Changed the project description to be more searchable.

Deprecated

• Deprecated the existing Google chart API based QRcode image generator.

0.2.0 - 2016-07-23

Added

• Fixed reflection warnings
• Add cloverage support for travis builds
• Add installation instructions
• Add references

0.1.0 - 2016-07-21

Added

• First version of the project made public