Bump com.github.kbase:auth2 from 0.7.1 to 0.8.0

[dependabot]

Bumps com.github.kbase:auth2 from 0.7.1 to 0.8.0.

Release notes

Sourced from com.github.kbase:auth2's releases.

0.8.0

What's Changed

• BACKWARDS INCOMPATIBILITY: In flight login sessions when the server is upgraded will fail. For a completely safe transition, stop the server, remove any temporary session data, and bring the new server up.
• BACKWARDS INCOMPATIBILITY: Repeated or trailing underscores are no longer allowed in usernames. Existing usernames are unaffected.
• The MultiFactor Authentication status is now available for tokens fetched from the service. Currently only OrcID supports MFA statuses other than Unknown. Other statuses are Used and Not Used.
• Fixed a bug where usernames with underscores would not be matched in username searches if an underscore was an interior character of a search prefix.
• Fixed a bug where a MongoDB error would be thrown if a user search prefix resulted in no search terms if it had no valid characters for the requested search, whether user name or display name. Now a service error is thrown.
• The /tokens endpoint can now accept Service or service to specify that a service token should be created.

New Contributors

• @​dauglyon made their first contribution in kbase/auth2#493

Full Changelog: kbase/auth2@0.7.1...0.8.0

Changelog

Sourced from com.github.kbase:auth2's changelog.

0.8.0

• BACKWARDS INCOMPATIBILITY: In flight login sessions when the server is upgraded will fail. For a completely safe transition, stop the server, remove any temporary session data, and bring the new server up.
• BACKWARDS INCOMPATIBILITY: Repeated or trailing underscores are no longer allowed in usernames. Existing usernames are unaffected.
• The MultiFactor Authentication status is now available for tokens fetched from the service. Currently only OrcID supports MFA statuses other than Unknown. Other statuses are Used and Not Used.
• Fixed a bug where usernames with underscores would not be matched in username searches if an underscore was an interior character of a search prefix.
• Fixed a bug where a MongoDB error would be thrown if a user search prefix resulted in no search terms if it had no valid characters for the requested search, whether user name or display name. Now a service error is thrown.
• The /tokens endpoint can now accept Service or service to specify that a service token should be created.

Commits

• 9c6cc2a Merge pull request #508 from kbase/develop
• 77a783a Merge pull request #507 from kbase/dev-mfa
• 830793b Improve test mode create token test
• 99516be Merge pull request #506 from kbase/dev-mfa
• e3e0b4b Bump version + release notes
• 0487515 Merge pull request #505 from kbase/dev-mfa
• 9c678b8 Clarify comment
• ed38c26 Merge pull request #504 from kbase/dev-mfa
• 3d6f50a Merge pull request #503 from kbase/dev-mfa
• e28ad11 Add mfa to external endpoints
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #70.