|
|
|
|
@ -34,16 +34,13 @@ Canonical reference for changes, improvements, and bugfixes for Boundary.
|
|
|
|
|
|
|
|
|
|
* cli/api/sdk: New OIDC auth method type added with support for create, read,
|
|
|
|
|
update, delete, and list (see new cli `oidc` subcommands available on CRUDL
|
|
|
|
|
operations for examples).
|
|
|
|
|
[PR](https://github.com/hashicorp/boundary/pull/1090)
|
|
|
|
|
* cli: support to login using an OIDC auth method (see the new `authenticate
|
|
|
|
|
password oidc` subcommand for an example)
|
|
|
|
|
operations for examples), as well as the ability to authenticate against it
|
|
|
|
|
via the SDK, CLI, admin UI, and desktop client.
|
|
|
|
|
[PR](https://github.com/hashicorp/boundary/pull/1090)
|
|
|
|
|
* server: When performing recursive listing, `list` action is not longer
|
|
|
|
|
required to be granted to the calling user. Instead, the given scope acts as
|
|
|
|
|
the root point (so only results under that scope will be shown), and `list`
|
|
|
|
|
grant is evaluated per-scope.
|
|
|
|
|
[PR](https://github.com/hashicorp/boundary/pull/1016)
|
|
|
|
|
* server: When performing recursive listing, `list` action is no longer required
|
|
|
|
|
to be granted to the calling user. Instead, the given scope acts as the root
|
|
|
|
|
point (so only results under that scope will be shown), and `list` grant is
|
|
|
|
|
evaluated per-scope. [PR](https://github.com/hashicorp/boundary/pull/1016)
|
|
|
|
|
* database init: If the database is already initialized, return 0 as the exit
|
|
|
|
|
code. This matches how the `database migrate` command works.
|
|
|
|
|
[PR](https://github.com/hashicorp/boundary/pull/1033)
|
|
|
|
|
|