prepare for 1.9.0 release

git-svn-id: svn+ssh://svn.code.sf.net/p/migrid/code/trunk@5095 b75ad72c-e7d7-11dd-a971-7dbc132099af

Author: jonasbardino

NEWS

@@ -6,14 +6,26 @@ individual releases of the MiG project code.
 == News ==
 A short description of changes 
 
+=== January 22nd, 2021 ===
+After almost two years of further development it's about time to make a new
+release. Again we've implemented a load of new features with bug fixes and
+security improvements as well. Some feature highlights include a brand new
+stream-lined user interface with in-line help, personal Cloud instances,
+additions and improvements to the sensitive data mode, a Peers system for
+inviting external collaboration partners, Jupyter recipe-based workflows with
+provenance support, authlog email notifications about login errors, several 2FA
+improvements, account expiry+status control and experimental OpenID Connect
+support.
+
+
 === February 27th, 2019 ===
 Long due new release with plenty of added features especially in four
 areas, namely an OpenSSH-based SFTP service, Jupyter integration, DOI 
 integration for archives and a new site mode to host EU GDPR data with
 the associated strict access and logging requirements.
 In relation to that work we've a.o. added 2FA support, import from sharelinks
 and archives, added helpers to ease use of Jupyter as an interactive
-course infrastructure. Additionally ithe release includes a number of
+course infrastructure. Additionally the release includes a number of
 security improvements across the board.
 
 
@@ -194,6 +206,57 @@ More detailed changelogs for the public releases.
 The full changelog is available from the repository:
 https://sourceforge.net/p/migrid/code/commit_browser
 
+== 1.9.0 ==
+- Experimental OpenID Connect support
+- Improved sign up input validation with user guidance
+- Transfer sensitive data project ownership
+- Full provenance in Jupyter workflows
+- A Peers system for inviting e.g. external collaboration partners
+- Events service tuning to fit new-style VGrids
+- SECURITY: Forced HTTPS for various anonymous pages like front page
+- Configurable max concurrent SFTP sessions
+- SECURITY: Harden Apache and SFTP/WebDAVS/FTPS security settings
+- SECURITY: Harden against inadvertent ssh command access through sftpsubsys
+- Python 3 preparations
+- System notification daemon to inform users about login errors and reason
+- Unified auth logging system for IO services
+- VGrid/Workgroup, Archives, Resources and People lazy-load AJAX optimizations
+- Flexible system storage support
+- JQuery dependency updates and security fixes
+- SECURITY: account expiry and account status with account suspend etc.
+- SECURITY: Sign up authenticity verification fixes
+- Project information interface for sensitive data projects
+- Optimize various concurrent components by replacing locks with file markers
+- WSGI robustness fixes for security scanner corner cases
+- 2FA setup polish and (re)set shared key helper scripts
+- User-selected start page
+- User script support for OpenID access and 2FA session init
+- Quick Tips integration
+- Memory leak fixes in PAM/NSS modules
+- Jupyter recipe-based workflows e.g. for parameter sweeps
+- Python griddaemon hooks in PAM module for shared rate limit, notify, etc.
+- Gravatar and more user profile support
+- GDB breakpoint support in PAM/NSS
+- Rework integrated status messages for improved sharing
+- Personal Cloud instances through OpenStack
+- Brand new web user interface with inline docs and help
+- AJAXification on several web pages where actions may be slow
+- 2FA tweaks to better handle tokens and clients with limited clock skew
+- Expose more functionality through RPC
+- SECURITY: support for strict 2FA source IP enforcement
+- SECURITY: reworked rate-limit handler for persistence and fail2ban use
+- Remote Seafile integration with proxy support
+- OpenID socket tweaks to avoid client queue filling up due to stale clients
+- Apache variable to quickly switch between minimal and production mode
+- Multiple conf generator additions for more flexibility
+- Integrate privacy and policy notices on web to allow e.g. GDPR compliance
+- Archives extended to provide file checksums and improved concurrent access
+- Flexible sensitive data categories with custom fields and actions
+- Update Jupyter authentication and data post to new HeaderAuthenticator
+- Mandatory token verification in wizard before actual 2FA activation
+- DOI import to dynamically show upstream registered DOI metadata in Archives
+
+
 == 1.8.0 ==
 - Configurable password strength policy
 - New JSONRPC interface similar to the existing XMLRPC one

mig/assets/css/V3/nav.css

@@ -4,7 +4,7 @@
 # --- BEGIN_HEADER ---
 #
 # nav - UI V3 specific but skin-independent overall navigation styling
-# Copyright (C) 2003-2019  The MiG Project lead by Brian Vinter
+# Copyright (C) 2003-2021  The MiG Project lead by Brian Vinter
 #
 # This file is part of MiG.
 #

mig/assets/css/V3/ui.css

@@ -4,7 +4,7 @@
 # --- BEGIN_HEADER ---
 #
 # ui - general UI V3 specific but skin-independent styling
-# Copyright (C) 2003-2020  The MiG Project lead by Brian Vinter
+# Copyright (C) 2003-2021  The MiG Project lead by Brian Vinter
 #
 # This file is part of MiG.
 #

mig/assets/js/shared/ui-dynamic.js

@@ -4,7 +4,7 @@
   # --- BEGIN_HEADER ---
   #
   # ui-dynamic - dynamic helpers to fill support, about and status content
-  # Copyright (C) 2003-2020  The MiG Project lead by Brian Vinter
+  # Copyright (C) 2003-2021  The MiG Project lead by Brian Vinter
   #
   # This file is part of MiG.
   #

mig/images/default.css

@@ -4,7 +4,7 @@
 # --- BEGIN_HEADER ---
 #
 # default - default style settings for all pages
-# Copyright (C) 2003-2019  The MiG Project lead by Brian Vinter
+# Copyright (C) 2003-2021  The MiG Project lead by Brian Vinter
 #
 # This file is part of MiG.
 #

mig/images/js/jquery.ajaxhelpers.js

@@ -4,7 +4,7 @@
   # --- BEGIN_HEADER ---
   #
   # jquery.ajaxhelpers - jquery based ajax helpers for managers
-  # Copyright (C) 2003-2019  The MiG Project lead by Brian Vinter
+  # Copyright (C) 2003-2021  The MiG Project lead by Brian Vinter
   #
   # This file is part of MiG.
   #

mig/install/generateconfs.py

@@ -4,7 +4,7 @@
 # --- BEGIN_HEADER ---
 #
 # generateconfs - create custom MiG server configuration files
-# Copyright (C) 2003-2020  The MiG Project lead by Brian Vinter
+# Copyright (C) 2003-2021  The MiG Project lead by Brian Vinter
 #
 # This file is part of MiG.
 #

mig/server/grid_sftp.py

@@ -4,7 +4,7 @@
 # --- BEGIN_HEADER ---
 #
 # grid_sftp - SFTP server providing access to MiG user homes
-# Copyright (C) 2010-2020  The MiG Project lead by Brian Vinter
+# Copyright (C) 2010-2021  The MiG Project lead by Brian Vinter
 #
 # This file is part of MiG.
 #

mig/server/matchpeerusers.py

@@ -4,7 +4,7 @@
 # --- BEGIN_HEADER ---
 #
 # matchpeerusers - Match list of Peers in MiG user database
-# Copyright (C) 2003-2020  The MiG Project lead by Brian Vinter
+# Copyright (C) 2003-2021  The MiG Project lead by Brian Vinter
 #
 # This file is part of MiG.
 #

mig/shared/accountreq.py

@@ -4,7 +4,7 @@
 # --- BEGIN_HEADER ---
 #
 # accountreq - helpers for certificate/OpenID account requests
-# Copyright (C) 2003-2020  The MiG Project lead by Brian Vinter
+# Copyright (C) 2003-2021  The MiG Project lead by Brian Vinter
 #
 # This file is part of MiG.
 #

mig/shared/accountstate.py

@@ -4,7 +4,7 @@
 # --- BEGIN_HEADER ---
 #
 # accountstate - various user account state helpers
-# Copyright (C) 2020  The MiG Project lead by Brian Vinter
+# Copyright (C) 2020-2021  The MiG Project lead by Brian Vinter
 #
 # This file is part of MiG.
 #

mig/shared/base.py

@@ -4,7 +4,7 @@
 # --- BEGIN_HEADER ---
 #
 # base - shared base helper functions
-# Copyright (C) 2003-2020  The MiG Project lead by Brian Vinter
+# Copyright (C) 2003-2021  The MiG Project lead by Brian Vinter
 #
 # This file is part of MiG.
 #

mig/shared/configuration.py

@@ -4,7 +4,7 @@
 # --- BEGIN_HEADER ---
 #
 # configuration - configuration wrapper
-# Copyright (C) 2003-2020  The MiG Project lead by Brian Vinter
+# Copyright (C) 2003-2021  The MiG Project lead by Brian Vinter
 #
 # This file is part of MiG.
 #

mig/shared/defaults.py

@@ -4,7 +4,7 @@
 # --- BEGIN_HEADER ---
 #
 # defaults - default constant values used in many locations
-# Copyright (C) 2003-2020  The MiG Project lead by Brian Vinter
+# Copyright (C) 2003-2021  The MiG Project lead by Brian Vinter
 #
 # This file is part of MiG.
 #

mig/shared/freezefunctions.py

@@ -4,7 +4,7 @@
 # --- BEGIN_HEADER ---
 #
 # freezefunctions - freeze archive helper functions
-# Copyright (C) 2003-2020  The MiG Project lead by Brian Vinter
+# Copyright (C) 2003-2021  The MiG Project lead by Brian Vinter
 #
 # This file is part of MiG.
 #

mig/shared/functional.py

@@ -4,7 +4,7 @@
 # --- BEGIN_HEADER ---
 #
 # functional - functionality backend helpers
-# Copyright (C) 2003-2020  The MiG Project lead by Brian Vinter
+# Copyright (C) 2003-2021  The MiG Project lead by Brian Vinter
 #
 # This file is part of MiG.
 #

mig/shared/functionality/autocreate.py

@@ -5,7 +5,7 @@
 # --- BEGIN_HEADER ---
 #
 # autocreate - auto create user from signed certificate or openid login
-# Copyright (C) 2003-2020  The MiG Project lead by Brian Vinter
+# Copyright (C) 2003-2021  The MiG Project lead by Brian Vinter
 #
 # This file is part of MiG.
 #

mig/shared/functionality/home.py

@@ -4,7 +4,7 @@
 # --- BEGIN_HEADER ---
 #
 # home - home page
-# Copyright (C) 2003-2020  The MiG Project lead by Brian Vinter
+# Copyright (C) 2003-2021  The MiG Project lead by Brian Vinter
 #
 # This file is part of MiG.
 #

mig/shared/functionality/login.py

@@ -4,7 +4,7 @@
 # --- BEGIN_HEADER ---
 #
 # login - general login method selection backend
-# Copyright (C) 2003-2020  The MiG Project lead by Brian Vinter
+# Copyright (C) 2003-2021  The MiG Project lead by Brian Vinter
 #
 # This file is part of MiG.
 #

mig/shared/functionality/oidping.py

@@ -4,7 +4,7 @@
 # --- BEGIN_HEADER ---
 #
 # oidping - OpenID 2.0 and Connect server availability checker backend
-# Copyright (C) 2003-2020  The MiG Project lead by Brian Vinter
+# Copyright (C) 2003-2021  The MiG Project lead by Brian Vinter
 #
 # This file is part of MiG.
 #

mig/shared/functionality/oidresponse.py

@@ -4,7 +4,7 @@
 # --- BEGIN_HEADER ---
 #
 # oidresponse - general openid response handler backend
-# Copyright (C) 2003-2020  The MiG Project lead by Brian Vinter
+# Copyright (C) 2003-2021  The MiG Project lead by Brian Vinter
 #
 # This file is part of MiG.
 #

mig/shared/functionality/setup.py

@@ -4,7 +4,7 @@
 # --- BEGIN_HEADER ---
 #
 # setup - back end for the client access setup page
-# Copyright (C) 2003-2020  The MiG Project lead by Brian Vinter
+# Copyright (C) 2003-2021  The MiG Project lead by Brian Vinter
 #
 # This file is part of MiG.
 #

mig/shared/functionality/signup.py

@@ -4,7 +4,7 @@
 # --- BEGIN_HEADER ---
 #
 # signup - general sign up entry point backend
-# Copyright (C) 2003-2020  The MiG Project lead by Brian Vinter
+# Copyright (C) 2003-2021  The MiG Project lead by Brian Vinter
 #
 # This file is part of MiG.
 #

mig/shared/functionality/touch.py

@@ -4,7 +4,7 @@
 # --- BEGIN_HEADER ---
 #
 # touch - touch backend
-# Copyright (C) 2003-2020  The MiG Project lead by Brian Vinter
+# Copyright (C) 2003-2021  The MiG Project lead by Brian Vinter
 #
 # This file is part of MiG.
 #

mig/shared/functionality/twofactor.py

@@ -4,7 +4,7 @@
 # --- BEGIN_HEADER ---
 #
 # twofactor - handle two-factor authentication with per-user shared key
-# Copyright (C) 2003-2020  The MiG Project lead by Brian Vinter
+# Copyright (C) 2003-2021  The MiG Project lead by Brian Vinter
 #
 # This file is part of MiG.
 #

mig/shared/html.py

@@ -4,7 +4,7 @@
 # --- BEGIN_HEADER ---
 #
 # html - html helper functions
-# Copyright (C) 2003-2020  The MiG Project lead by Brian Vinter
+# Copyright (C) 2003-2021  The MiG Project lead by Brian Vinter
 #
 # This file is part of MiG.
 #

mig/shared/httpsclient.py

@@ -4,7 +4,7 @@
 # --- BEGIN_HEADER ---
 #
 # httpsclient - Shared functions for all HTTPS clients
-# Copyright (C) 2003-2020  The MiG Project lead by Brian Vinter
+# Copyright (C) 2003-2021  The MiG Project lead by Brian Vinter
 #
 # This file is part of MiG.
 #

mig/shared/install.py

@@ -4,7 +4,7 @@
 # --- BEGIN_HEADER ---
 #
 # install - MiG server install helpers
-# Copyright (C) 2003-2020  The MiG Project lead by Brian Vinter
+# Copyright (C) 2003-2021  The MiG Project lead by Brian Vinter
 #
 # This file is part of MiG.
 #

mig/shared/mrslparser.py

@@ -4,7 +4,7 @@
 # --- BEGIN_HEADER ---
 #
 # mrslparser - Parse mRSL job descriptions
-# Copyright (C) 2003-2020  The MiG Project lead by Brian Vinter
+# Copyright (C) 2003-2021  The MiG Project lead by Brian Vinter
 #
 # This file is part of MiG.
 #

mig/shared/safeinput.py

@@ -4,7 +4,7 @@
 # --- BEGIN_HEADER ---
 #
 # safeinput - user input validation functions
-# Copyright (C) 2003-2020  The MiG Project lead by Brian Vinter
+# Copyright (C) 2003-2021  The MiG Project lead by Brian Vinter
 #
 # This file is part of MiG.
 #

mig/shared/twofactorkeywords.py

@@ -4,7 +4,7 @@
 # --- BEGIN_HEADER ---
 #
 # twofactorkeywords - supported two factor settings
-# Copyright (C) 2003-2020  The MiG Project lead by Brian Vinter
+# Copyright (C) 2003-2021  The MiG Project lead by Brian Vinter
 #
 # This file is part of MiG.
 #

mig/shared/workflows.py

@@ -3,7 +3,7 @@
 #
 # workflows.py - Collection of workflows related functions
 #
-# Copyright (C) 2003-2020  The MiG Project lead by Brian Vinter
+# Copyright (C) 2003-2021  The MiG Project lead by Brian Vinter
 #
 # This file is part of MiG.
 #

mig/user/selenium/migcore.py

@@ -4,7 +4,7 @@
 # --- BEGIN_HEADER ---
 #
 # migcore - a library of core selenium-based web helpers
-# Copyright (C) 2003-2020  The MiG Project lead by Brian Vinter
+# Copyright (C) 2003-2021  The MiG Project lead by Brian Vinter
 #
 # This file is part of MiG.
 #

mig/user/selenium/ucphoidlogin.py

@@ -4,7 +4,7 @@
 # --- BEGIN_HEADER ---
 #
 # ucphoidlogin - sample selenium-based web client for basic ucph openid login
-# Copyright (C) 2003-2018  The MiG Project lead by Brian Vinter
+# Copyright (C) 2003-2021  The MiG Project lead by Brian Vinter
 #
 # This file is part of MiG.
 #

mig/user/xmlrpcbackuplocation.py

@@ -4,7 +4,7 @@
 # --- BEGIN_HEADER ---
 #
 # xmlrpcsbackuplocation - show freeze backup location with XMLRPC and user certificate
-# Copyright (C) 2003-2020  The MiG Project lead by Brian Vinter
+# Copyright (C) 2003-2021  The MiG Project lead by Brian Vinter
 #
 # This file is part of MiG.
 #