Skip to content

Conversation

@valadas
Copy link
Contributor

@valadas valadas commented Dec 16, 2025

Merged release/10.2.0 into master to release v10.2.0

donker and others added 30 commits August 22, 2025 15:13
…classes to include all the required methods.
donker and others added 24 commits December 2, 2025 22:53
…ller-type

Throw when null business controller type is attempted to be created
Co-authored-by: Brian Dukes <bdukes@engagesoftware.com>
Co-authored-by: Brian Dukes <bdukes@engagesoftware.com>
…hange (#6832)

In #6356 a dependency update made an unintentional breaking change. Instead of the classic "role" claim we now give a "http://schemas.microsoft.com/ws/2008/06/identity/claims/role" claim for roles.

JWT in itself has no specs for roles or claims which is left to whatever implementation is targetted like OIDC, OAuth, etc.

In DNN context it is a simple JWT but we do provide roles and the new package email values uses microsoft "standard" values that have been around in the Microsoft ecosystem since .Net Framework 4.5 and still lives all the way up to .Net 10.

I am not sure if we should support our old "role" claim forever or the Microsoft claim as there are 0 specs about "role". IETF does have a spec about "roles" so if we would change it to that spec, it would still be a breaking change.

What this PR does is provide both the old (<=9.13.9) behavior of "role" as well as the new microsoft way which may be better known in the .Net ecosystem. It also adds a deprecation note on both the plain and encrypted token to try and bring attention to this breacking change with the old way being obsolete and removed in v12.

Closes #6829
Fix the default for the web.config variable for upgrade uploading
Fix CDF webforms lifecycle issues
@valadas valadas added this to the 10.2.0 milestone Dec 16, 2025
@valadas valadas merged commit 1920793 into master Dec 16, 2025
5 of 7 checks passed
@valadas valadas deleted the release/10.2.0 branch December 16, 2025 22:39
@valadas valadas restored the release/10.2.0 branch December 17, 2025 00:27
@valadas valadas deleted the release/10.2.0 branch December 17, 2025 00:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

9 participants