v5.0.1
Avni-server
Security enhancements
- Add server-side validations for question group(repeatable and non-repeatable), image and text #625, avniproject/avni-security#54
- Introduce invalid character validations for specific fields avniproject/avni-security#54
- Fetch and show last login time based on keycloak events api results. avniproject/avni-security#51
- Handle X-Forwarded headers when preventing host header poisoning avniproject/avni-security#55
Performance enhancements
- Introduce second level cache for User, Concept, ConceptAnswer, AddressLevel and VirtualCatchment #608
Major bug fixes
#624 Fixed subject migration issues that was causing sync errors
Minor bug fixes
- When assignment is made, the server and client should show error when an individual outside of users catchment is assigned to the user avniproject/avni-client#1110
- For the case when multiple IDPs are configured, super-admins will be created in cognito IDP #566
- Db script for one time deletion of duplicate subject migrations #618
Avni-client
Security enhancements
- Prevent copy-paste of password on login screen avniproject/avni-security#28
- Additional protections
-
- Clear clipboard on password entry start
-
- Change keyboard type when password is shown to prevent showing of options such as clipboard (might not work on all devices)
-
- Prevent auto capitalization of first letter of password (happening on some devices)
-
Minor bug fixes
- Translate string while rendering SelectableItemGroup Single Value #1128
- Restore userInfo after fast sync db restore #1125
Avni-Webapp
Security enhancements
- Clear non httponly cookies on user logout. avniproject/avni-security#46
- Display last login time for keycloak users in user profile. For cognito users last login time not displayed. avniproject/avni-security#51
Minor bug fixes
- Removed columns not relevant for super admin from display. avniproject/avni-server#566
- Webapp dev proxy now excludes requests to favicon. This enables better debugging based on server logs.
Component release notes
https://github.com/avniproject/avni-server/releases/tag/v5.0.1
https://github.com/avniproject/avni-client/releases/tag/v5.0.1
https://github.com/avniproject/avni-webapp/releases/tag/v5.0.1
Full Changelog: v5.0.0...v5.0.1