• [FIXED] 2FA authentication prompting for API calls

• [FIXED] 2FA authentication prompting for API calls

• [IMPROVED] Security mechanism

• [IMPROVED] Security mechanism

• [IMPROVED] Security mechanism
• [IMPROVED] Performance

• [IMPROVED] Security mechanism
• [IMPROVED] Performance

• [IMPROVED] Security mechanism

• [IMPROVED] Security mechanism

• [ADDED] Ability to add whitelist settings in the Administration
• [FIXED] Unparsed valuable in the IP whitelist

• [ADDED] Ability to add whitelist settings in the Administration
• [FIXED] Unparsed valuable in the IP whitelist

• [IMPROVED] Security mechanism

• [IMPROVED] Security mechanism

• [ADDED] WebAuthn support for earlier versions
• [FIXED] Log out button
• [FIXED] TOTP and backup codes saving issue
• [IMPROVED] Security requirements to the Data Center App Approval process

• [ADDED] WebAuthn support for earlier versions
• [FIXED] Log out button
• [FIXED] TOTP and backup codes saving issue
• [IMPROVED] Security requirements to the Data Center App Approval process

• [ADDED] Support for WebAuthn API

• [ADDED] Support for WebAuthn API

• [IMPROVED] Updated inner library

• [IMPROVED] Updated inner library

• [FIXED] Minor compatibility issues

• [FIXED] Minor compatibility issues

• [ADDED] Restrict API calls

• [ADDED] Restrict API calls

• [FIXED] Error on the user config page

• [FIXED] Error on the user config page

• [FIXED] Export Authentication Log with big data
• [ADDED] Provide non-admin user with the ability to manage 2fa users

• [FIXED] Export Authentication Log with big data
• [ADDED] Provide non-admin user with the ability to manage 2fa users

• [IMPROVED] Security improvements
• [IMPROVED] Bulk reset improvements

• [IMPROVED] Security improvements
• [IMPROVED] Bulk reset improvements

• [ADDED] Bulk user reset option
• [FIXED] Private Packagist compatibility

• [ADDED] Bulk user reset option
• [FIXED] Private Packagist compatibility

• [FIXED] Validation on IP whitelist fields
• [FIXED] Close pop-up

• [FIXED] Validation on IP whitelist fields
• [FIXED] Close pop-up

• [FIXED] Error after login on Windows
• [FIXED] Hide info banner from non-admin users

• [FIXED] Error after login on Windows
• [FIXED] Hide info banner from non-admin users

• [ADDED] Hide the info message about deactivated login options for non-admin users (optional)
• [ADDED] Autologin as a configurable option
• [ADDED] CSRF protection on User delete
• [IMPROVED] Application security
• [FIXED] Path Traversal issue
• [FIXED] Lost token on the User config page
• [FIXED] Minor security issue
• [FIXED] Wrong redirect after pass 2FA

• [ADDED] Hide the info message about deactivated login options for non-admin users (optional)
• [ADDED] Autologin as a configurable option
• [ADDED] CSRF protection on User delete
• [IMPROVED] Application security
• [FIXED] Path Traversal issue
• [FIXED] Lost token on the User config page
• [FIXED] Minor security issue
• [FIXED] Wrong redirect after pass 2FA

• [ADDED] Confirmation on Key Size and Timestep change
• [ADDED] Validation for TOTP settings
• [ADDED] Auto submit TOTP key
• [ADDED] Remove 2FA user’s settings after User is deleted
• [FIXED] U2F notification in IE
• [FIXED] Login using dashboard
• [FIXED] Compatible with oAuth

• [ADDED] Confirmation on Key Size and Timestep change
• [ADDED] Validation for TOTP settings
• [ADDED] Auto submit TOTP key
• [ADDED] Remove 2FA user’s settings after User is deleted
• [FIXED] U2F notification in IE
• [FIXED] Login using dashboard
• [FIXED] Compatible with oAuth

• [FIXED] Search groups on the configuration page

• [FIXED] Search groups on the configuration page

• [IMPROVED] Redirect the user to the dashboard after reset by an administrator
• [IMPROVED] Minor issues
• [FIXED] Block access to the instance before brute force enabled

• [IMPROVED] Redirect the user to the dashboard after reset by an administrator
• [IMPROVED] Minor issues
• [FIXED] Block access to the instance before brute force enabled

• [IMPROVED] Minor improvements

• [IMPROVED] Minor improvements

• [ADDED] Brute Force Defence
• [FIXED] Force after 2FA reset
• [FIXED] Authentication disabled in logs
• [FIXED] Optimized the layout of the login page
• [IMPROVED] Minor issues

• [ADDED] Brute Force Defence
• [FIXED] Force after 2FA reset
• [FIXED] Authentication disabled in logs
• [FIXED] Optimized the layout of the login page
• [IMPROVED] Minor issues

• [ADDED] Export logs

• [ADDED] Export logs

• [ADDED] "Resets authentication settings" entry in audit log
• [ADDED] Option to force all except groups

• [ADDED] "Resets authentication settings" entry in audit log
• [ADDED] Option to force all except groups

• [IMPROVED] Login with token

• [IMPROVED] Login with token

• [FIXED] Lost page parameters after redirect
• [FIXED] Minor issues
• [FIXED] Transactional error
• [ADDED] Whitelist for login with OAuth (Application links, etc.)
• [IMPROVED] Application performance

• [FIXED] Lost page parameters after redirect
• [FIXED] Minor issues
• [FIXED] Transactional error
• [ADDED] Whitelist for login with OAuth (Application links, etc.)
• [IMPROVED] Application performance

• [ADDED] Bitbucket Server & Bitbucket Data Center version 7.0.0 support
• [ADDED] Support unlimited amount of U2F devices
• [FIXED] Use the same name of device in all system
• [FIXED] Adding U2F device in IE browser
• [FIXED] Logout link
• [FIXED] Login page for IE browser
• [FIXED] Minor issues

• [ADDED] Bitbucket Server & Bitbucket Data Center version 7.0.0 support
• [ADDED] Support unlimited amount of U2F devices
• [FIXED] Use the same name of device in all system
• [FIXED] Adding U2F device in IE browser
• [FIXED] Logout link
• [FIXED] Login page for IE browser
• [FIXED] Minor issues

• [ADDED] Bitbucket Server & Bitbucket Data Center version 6.10.0 support
• [FIXED] IP whitelisting performance issue

• [ADDED] Bitbucket Server & Bitbucket Data Center version 6.10.0 support
• [FIXED] IP whitelisting performance issue

• [ADDED] Duo Security Support

• [ADDED] Duo Security Support

• [ADDED] Internet Explorer 11 / Edge support
• [ADDED] Bitbucket Server 6.8.0 support
• [FIXED] Error with MariaDB
• [FIXED] IP whitelisting
• [FIXED] Minor issues

• [ADDED] Internet Explorer 11 / Edge support
• [ADDED] Bitbucket Server 6.8.0 support
• [FIXED] Error with MariaDB
• [FIXED] IP whitelisting
• [FIXED] Minor issue

• [ADDED] Bitbucket Server & Bitbucket Data Center version 6.8.0 support
• [ADDED] Bitbucket Server & Bitbucket Data Center version 6.7.0 support
• [ADDED] Configurable the lifetime for "Remember me"
• [ADDED] Added device date info
• [IMPROVED] Company URL
• [FIXED] Error with space in Application Label
• [FIXED] Minor issues
• [FIXED] Logout URL

• [ADDED] Bitbucket Server & Bitbucket Data Center version 6.8.0 support
• [ADDED] Bitbucket Server & Bitbucket Data Center version 6.7.0 support
• [ADDED] Configurable the lifetime for "Remember me"
• [ADDED] Added device date info
• [IMPROVED] Company URL
• [FIXED] Error with space in Application Label
• [FIXED] Minor issues
• [FIXED] Logout URL

• [ADDED] Data Center Support

Data Center Support

• [IMPROVED] New Login Screens, UI component updates
• [IMPROVED] Range of valid characters on Application Label

• [ADDED] Check time sync on the Server during plugin setup (Google Public NTP time verification)
• [IMPROVED] Texts on login screen
• [IMPROVED] Texts on setup screen
• [IMPROVED] Plugin description

• [ADDED] skip restriction on default rest API
• [ADDED] allow to use Bitbucket tokens

• [FIXED] Error on the QR code screen
• [FIXED] Whitelisting IP address issue

Fixed:

• cookies issue
• minor issues

Improved:

• unselect "Remember me" after resetting data
• disabled input autocomplete

Added:

• "Remember me" feature
• Bitbucket Server version 6.6.0 support
• Bitbucket Server version 6.7.0 support

Added:

• U2F Fido Universal support
• TOTP Support (Google Authenticator, Microsoft Authenticator, 2STP, OTP Auth, Authy and others)