2.5.5

This is a maintenance release which only brings libraries up to date to fix potential bugs.

2.5.4

This is a maintenance release which only brings libraries up to date to fix potential bugs.

2.5.3

This is a maintenance release which only brings libraries up to date to fix potential bugs.

2.5.2

This is a maintenance release which only brings libraries up to date to fix potential bugs.

2.5.1

This release fixes a performance issue on session creation affecting large installations.

Bug fixes:

• Session import works again.

Additional changes:

• Libraries have been upgraded to fix potential bugs

2.4.3

This release fixes a performance issue on session creation affecting large installations.

Bug fixes:

• WebSocket communication now works correctly for course sessions.
  (only affects installations using the LMS connector)
• The configuration parameter security.facebook.allowed-roles is now respected.

Additional changes:

• Libraries have been upgraded to fix potential bugs

2.5.0

Major features:

• Administration API: New endpoints have been added which are accessible by users defined by security.admin-accounts.
• Evaluation of free text answers
• Proxy support for WebSocket connections: It is now possible to use the same port for standard HTTP requests and WebSocket connections. Additionally, it is no longer necessary to setup a Java key store for TLS if a proxy is used.
• Auto-deletion of inactive (not activated) users and guest sessions

Minor features and changes:

• Caching improvements
• New use case including only comments
• Export of questions to arsnova.click format
• Export/import of flashcards to/from arsnova.cards format
• Flashcards are now handled separately from questions

Configuration changes:

• socketio.ip has been replaced by socketio.bind-address
• security.ssl has been removed. security.keystore and security.storepass have been replaced by socketio.ssl.jks-file and socketio.ssl.jks-password.
• New setting: socketio.proxy-path
• The default port for WebSocket connections has been changed to 8090

With this release we have completely overhauled our documentation. Additionally, we now provide Docker images.

This version is brought to you by:
Project management: Klaus Quibeldey-Cirkel
Lead programming: Andreas Gärtner, Daniel Gerhardt, Tom "tekay" Käsler
Contributions: Robin Drangmeister, Dennis Schönhof
Sponsoring: AG QLS, HMWK

2.4.2

This release fixes a minor security vulnerability which allowed an attacker to remove a MotD from a session without being the creator.

Additional changes:

• Libraries have been upgraded to fix potential bugs

2.3.4

This release fixes a minor security vulnerability which allowed an attacker to remove a MotD from a session without being the creator.

Additional changes:

• Libraries have been upgraded to fix potential bugs

2.4.1

This release fixes a security vulnerability caused by the CORS implementation. Origins allowed for CORS can now be set in the configuration via security.cors.origins. (Reported by Rainer Rillke at Wikimedia)

Additionally, authentication via disabled services is now entirely blocked to fix a security vulnerability allowing guest access despite the setting security.guest.enabled=false. (Reported by Rainer Rillke at Wikimedia)

Additional changes:

• Libraries have been upgraded to fix potential bugs