2.0.0 Jira
New Features
Audit logging of configuration changes
OpenPGP Encryption for tokens created on behalf
Tags/ Notes for IP address restrictions
Changes
Users who can't create their own tokens but can use tokens can now see a list of their tokens, i.e. to see expiration dates or other details
The list of tokens now shows an expiration warning if a token expires within the next 14 days
Changed texts in the permission settings so that it's more clear what the on-behalf permission implies
2.0.1
Updated internal and 3rd party libraries
Improved text of a few element descriptions in the UI
2.0.2
fixed a bug that caused UI not to load if the user logged in has no e-mail address set
hardened app against username enumeration
removed mentions of usernames in responses that led to 401 - Unauthenticated
for troubleshooting purposes, admins can still look up details of authentication failures in the log files
Updated internal and 3rd party libraries
2.0.3
further hardening against username enumeration
in addition to the changes in version 2.0.2, the error message in a 401 response is now identical to the one Atlassian sends: "Basic Authentication Failure - Reason : AUTHENTICATED_FAILED"
2.0.4
no public release
2.0.5
3rd party and internal library updates