Skip to content

v1.16.0

Choose a tag to compare

@moabu moabu released this 22 Jan 17:46
· 462 commits to main since this release
051440c

1.16.0 (2026-01-22)

Known Issues

Installing the AIO helm chart may result in the config-api service not working with 500s. This is mainly because the chart is passing the admin-ui plugin which shouldn’t be passed in the charts.

Fix:

In the values.yaml pass plugins: "fido2,scim,user-mgt" removing the admin-ui

References:

Features

  • charts: make Gateway ports configurable and support Gateway in janssen helm chart (#12995) (583b64c)
  • charts: support gateway api in janssen-aio (#12907) (f5077ae)
  • client certificate authentication casa plugin (#12927) (6d80354)
  • cloud-native: add feature to update config-api scopes sync from template (#12909) (17d0462)
  • cloud-native: support for additional schema files (#13011) (ac78d8b)
  • config-api: feature wise admin scope for endpoints (#12736) (a02118e)
  • core: fix deps2 (#12965) (19ad682)
  • core: merge logging changes from gluu4 (#12871) (1fabadb)
  • correct the jans_assets scopes names (#13025) (02409e4)
  • introduce roundTripMaxTime config property (#13009) (e5ab6dc)
  • jans-auth-server: Added configurable rate limiting for authentication endpoints to prevent brute-force attacks #12664 (#12868) (7a5f846)
  • jans-auth-server: sanitized log in AuthenticationService #12958 (#12959) (ba21b2f)
  • jans-auth: remove old jackson2 dependency (#12886) (31e31cf)
  • jans-cli-tui: additional config-api parameters (#12914) (819a206)
  • jans-cli-tui: remove Admin-UI plugin (#12893) (28a40a0)
  • jans-config-api: change in process of accessing config-api endpoints in Admin UI (#12983) (7b984ee)
  • jans-core: remove tika-core from jackrabbit-core deps (#12960) (75fa989)
  • jans-core: removed FILE script type (48b8080)
  • jans-core: removed FILE script type #12997 (#12998) (48b8080)
  • jans-linux-setup: flex update requirements (#12985) (a9eb502)
  • jans-linux-setup: introduce Mako templating engine (#13054) (1b904a9)
  • jans-linux-setup: update the renamed scopes in role-to-scope mapping (#12899) (ec72a0f)
  • jans-pycloudlib: add support for user session-level postgres schema selection (#12889) (b8cc3ab)
  • jans-tarp: implement Cedar-Policy-Aware AI Agent Scaffolding in jans-tarp (#12806) (6e1646a)
  • orm: add method to check data after entry update (#12873) (03a48e7)
  • send 403 - Forbidden error code in response if Admin UI requests Config API with expired session. This will indicate to Admin UI to logout. (#13022) (a2701ae)
  • update the renamed scopes in role-to-scope mapping (ec72a0f)

Bug Fixes

  • admin-ui: failed logout on tarp (#12882) (6e4be8a)
  • AdminUICookieFilter should not be called in Jans installation (#13041) (2f2675f)
  • cloud-native: set restrictive file permissions on SQL property files containing credentials (#12901) (280b2f7)
  • config-api: client secret getting encrypted (#12930) (7b73e80)
  • docker-jans-cloudtools: add type validation for --limit parameter (#12946) (4fdd2dd)
  • docs: add PostgreSQL-related commands to Docker install quick start (#13032) (ad0147d)
  • docs: broken links in Authorization Endpoint (#12243) (#12745) (42225c6)
  • docs: fix linting issues - trailing spaces and EOF newline (#12879) (734f644)
  • docs: fix linting issues - trailing spaces and EOF newline (#12859) (05683c2)
  • docs: Set CEDARLING_JWT_SIG_VALIDATION to "disabled" (#12917) (c4665b4)
  • docs: update contribution guide, jans README, and Docker Compose… (#12990) (4887ac7)
  • fix build error (#13040) (97d5cf0)
  • fix error in signing firefox extension for self distribution (#13053) (22ec96f)
  • jans-auth-server: fix build after dependencies upgrade (tika) #12971 (#12972) (43acf6a)
  • jans-cedarling: fix benchmarks to actually work (#12923) (4518da7)
  • jans-cedarling: Fix cedarling to handle domains in different cases (upper and lower) (3e61fb1)
  • jans-cedarling: Fix cedarling to handle iss in different cases (#12982) (3e61fb1)
  • jans-cedarling: fix entities mapping for not required entities (#13024) (f9caf73)
  • jans-cedarling: remove nested field parsing in trusted_issuer parser (#13005) (bedac4d)
  • jans-cli-tui: check if log exists before iteration (#13003) (293b13e)
  • jans-cli-tui: display confirmation message after saving jans-lock server config (#12911) (3884dcd)
  • jans-cli-tui: scim configuration param disableExternalLoggerConfiguration (#12918) (84ac4fa)
  • jans-cli-tui: support only db location for custom scripts (#12987) (6d88aa1)
  • jans-config-api: move AdminUICookieFilter to Admin UI plugin (#13050) (40f41f5)
  • jans-config-api: the session check should be excluded for certai… (#13031) (c7f6cda)
  • jans-keycloak-integration: bump libraries with cve vulns #12992 (#12993) (4317fdf)
  • jans-linux-setup: typo (#13047) (03d4655)
  • refactor DN parsing (#12935) (67adb65)
  • terraform-jans-provider: missing grant types in terraform oidc client resource (#12999) (610ab26)
  • update override_sql_ssl_property in sql.py to prevent SSL proper… (#12878) (ab84ff7)
  • vulns and docs bullet points (#12940) (c807bdb)
  • The DELETE /session API should not throw error if session entry