Skip to content

Conversation

@valadas
Copy link
Contributor

@valadas valadas commented Dec 10, 2025

Updated develop with the latest fixes on release/10.2.0

donker and others added 15 commits December 5, 2025 16:00
Co-authored-by: Brian Dukes <bdukes@engagesoftware.com>
…hange (#6832)

In #6356 a dependency update made an unintentional breaking change. Instead of the classic "role" claim we now give a "http://schemas.microsoft.com/ws/2008/06/identity/claims/role" claim for roles.

JWT in itself has no specs for roles or claims which is left to whatever implementation is targetted like OIDC, OAuth, etc.

In DNN context it is a simple JWT but we do provide roles and the new package email values uses microsoft "standard" values that have been around in the Microsoft ecosystem since .Net Framework 4.5 and still lives all the way up to .Net 10.

I am not sure if we should support our old "role" claim forever or the Microsoft claim as there are 0 specs about "role". IETF does have a spec about "roles" so if we would change it to that spec, it would still be a breaking change.

What this PR does is provide both the old (<=9.13.9) behavior of "role" as well as the new microsoft way which may be better known in the .Net ecosystem. It also adds a deprecation note on both the plain and encrypted token to try and bring attention to this breacking change with the old way being obsolete and removed in v12.

Closes #6829
Fix the default for the web.config variable for upgrade uploading
Fix CDF webforms lifecycle issues
@valadas valadas added this to the 10.2.0 milestone Dec 10, 2025
@valadas valadas merged commit b46114c into develop Dec 10, 2025
4 checks passed
@valadas valadas deleted the release/10.2.0 branch December 10, 2025 23:14
@valadas valadas restored the release/10.2.0 branch December 10, 2025 23:14
@valadas valadas deleted the release/10.2.0 branch December 16, 2025 22:39
@valadas valadas restored the release/10.2.0 branch December 17, 2025 00:27
@valadas valadas deleted the release/10.2.0 branch December 17, 2025 00:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants