Skip to main content

Trivore ID 6 changelog

Version 6 is a continuation of development from ID 5.24.0. It uses new application development frameworks.

Upgrade instructions​

Review Important Upgrade Notes for version specific upgrade instructions.

Release 6.2.0​

Released 2026-07-03.

New features​

  • ONEP-4083 API for mass onboarding of new pupils (e.g., first-graders) via the DVV base database (perustiedot). The solution supports safe repeated calls within the same namespace/group, processes PICs in batches with a 10,000-per-request limit, optionally locks/unlocks users, adds requested group memberships, and returns a transaction ID.
  • ONEP-4309 Added support for user-specific file hosting in the Users API. New endpoints under /user/{userId}/files allow listing, uploading, downloading, replacing, and deleting per-user files. Access requires the USER_FILE_READ / USER_FILE_WRITE permissions for API clients, or the user's own access token with the user.files.readonly / user.files scopes. By default the feature is disabled and no files can be uploaded until an administrator enables it for a namespace by allowing a number of files, with the maximum file size falling back to a system-wide default unless a namespace-specific limit is set.
  • ONEP-4351 Added support for Telia Identification service to use as user directory

Bug fixes​

  • ONEP-4175 Added fixes for configurations that whitelist automatic redirect url's for strong id and link account endpoints.
  • ONEP-4214 Recovering an archived user now includes the same duplicate and field validation checks as creating a new user.
  • ONEP-4310 Fixed an issue where opening the User Editor could fail when certain fields were returned as null.
  • ONEP-4328 Fixed Elliptic Curve usage for id_token and access token signatures
  • ONEP-4341 Fixed missing event log entries for OIDC client access tokens that were not bound to any user (for example client-credentials tokens). These token events are now logged with the OIDC client application as the event target. A "Token history"-button has also been added to the OIDC client "Tokens" window that opens the client's event log.
  • ONEP-4356 Fixed an issue with the MFA setup page user experience.
  • ONEP-4367 Fixed issue when deleting user directory and migrating users to internal directory
  • ONEP-4380 Corrected how database queries are built, which enables updating to newer Spring Boot version.
  • ONEP-4389 User export in Management UI produced empty files, this has been fixed.
  • ONEP-4391 API for running a Scheduled Task now uses a specific thread scheduler
  • ONEP-4392 Improved internal servlet registration methods to be compatible with new Spring Boot versions
  • ONEP-4406 OpenAPI descriptions of tags were not visible after servlet registration changes.

Improvements​

  • ONEP-2646 Added visual indication to namespace editor when related scheduled task is disabled but is required by namespace settings
  • ONEP-4117 Added OpenTelemetry instrumentation for OkHttp and enabled wherever OkHttpClient is used, including calls performed via Retrofit. This enables visibility into call timings, easier identification of slow calls, and supports ongoing performance improvements.
  • ONEP-4174 Added support for gzip compression in Management API JSON-responses. Send header Accept-Encoding: gzip with REST-requests to use.
  • ONEP-4219 Improved the Group Policy management UI to clarify order in which policies are processed
  • ONEP-4280 Added cluster settings view option to remove inactive cluster nodes manually
  • ONEP-4291 Archived users can now be fetched through the GET /users/{userId}-endpoint by setting the new includeSoftDeleted query parameter to true (defaults to false). User information responses now also include a read-only softDeleted field indicating whether the user is archived.
  • ONEP-4307 Replaced Slider fields with Textfields to allow more precise configuration.
  • ONEP-4330 Added new /health endpoint which can be used by load-balancer to check that service is alive and functional
  • ONEP-4362 Added support for RFC9440 formatted certificate headers to use with Smartcard based authentication
  • ONEP-4376 Updated dependency libraries.

Release 6.1.0​

Released 2026-06-05.

New features​

  • ONEP-4264 Added support for configuring which languages are available in the application. Administrators can now specify the supported languages in the system settings, and only these languages will be shown in the language selection menu. This configuration can be managed via the settings user interface or the API. Existing systems are automatically migrated to include this new setting.
  • ONEP-4321 Added a "Preview" page to API documentation site, which allows showing a preview version of planned API endpoints.

Bug fixes​

  • ONEP-4197 Added support for editing a groups user policies with the update operation of Groups API.
  • ONEP-4208 User strong identity identification via management UI now shows proper error notification if there is duplicate/conflicting Personal ID or Electronic Identity Code
  • ONEP-4271 Improved display of progress updates for upgrade steps in admin user interfaces.
  • ONEP-4325 Fixed an issue where multipart servlet requests failed to parse, causing 500 errors with “No multipart configuration element / bad multipart”. The change adds proper error handling.
  • ONEP-4332 Fixed issues with translations of certain claim names

Improvements​

  • ONEP-4068 DVV lookup/update endpoints now return 503 Service Unavailable status code when unable to communicate with DVV. Error code "dvv-failure" is included in response. Additionally, Trivore ID metrics dashboard now shows amount of DVV failures.
  • ONEP-4120 LDAP related errors are no longer sent to Sentry. Added new tool to test LDAP connection which supports clustered environment.
  • ONEP-4201 New API's have been added to allow fetching the event log for OAuth2 apps and API clients, either by actor or target. These endpoints provide paginated access and filtering options for event logs. This improvement ensures that event log data is now accessible through the API in the same way as through the user interface.
  • ONEP-4204 Refactored the legacy user consent data models: removed the obsolete GrantedPermissions and deprecated/misleading consent fields from User, updated REST and claim generation to serve only the current consent collection (using new resolver logic with UserConsentService), and aligned read/write behavior across the consent APIs.
  • ONEP-4229 Improved the Group Policy Security editor by increasing the range of values for password settings, and now allowing users to insert their own preferred value for individual settings.
  • ONEP-4234 Implemented human-readable captions for Event Log “Event ID” values in the Management UI.
  • ONEP-4243 Added support for signed user info and encrypted id_token and user info
  • ONEP-4292 Added support for property-based overrides to ID feature flags. Feature flags can now be enabled or disabled directly via Spring properties (e.g., featureflags.<name>.enabled), bypassing Unleash configuration if a property is set.
  • ONEP-4302 Added translation keys for hardcoded texts in ID Management UI.
  • ONEP-4317 Updated dependency libraries.

Release 6.0.0​

Released 2026-05-08.

New features​

  • ONEP-4033 Update to java 17, Spring Boot 3.x, Vaadin 24, jakarta namespace

Bug fixes​

Improvements​

  • ONEP-3194
  • ONEP-3196
  • ONEP-3198
  • ONEP-3199
  • ONEP-3243
  • ONEP-3251
  • ONEP-3282
  • ONEP-3284
  • ONEP-3286
  • ONEP-3300
  • ONEP-3301
  • ONEP-3302
  • ONEP-3331
  • ONEP-3333
  • ONEP-3334 Split Flow theme into multiple css files
  • ONEP-3336
  • ONEP-3338 Re-implement DashboardView using Vaadin Flow
  • ONEP-3339 Re-implement AccountsView and AccountEditor using Vaadin Flow
  • ONEP-3340 Re-implement groups view and editor using Vaadin Flow
  • ONEP-3341
  • ONEP-3342 Re-implement group policy view and editor using Vaadin Flow
  • ONEP-3343
  • ONEP-3344 Re-implement user agreement view and editor using Vaadin Flow
  • ONEP-3345 Re-implement CustomEmailMessagesView using Vaadin Flow
  • ONEP-3346
  • ONEP-3347
  • ONEP-3348 Re-implement authorisation view and editor using Vaadin Flow
  • ONEP-3349 AI GENERATED! CLEAN THIS UP! The SSOTargetsView and SSOTargetEditor have been successfully re-implemented using Vaadin Flow, enhancing the user interface and improving overall performance. This update modernizes the components, providing a more seamless and efficient user experience.
  • ONEP-3350 Re-implement UserDirectoriesView and UserDirectoryEditor using Vaadin Flow
  • ONEP-3351 Re-implement SmsMessagesView using Vaadin Flow
  • ONEP-3352 Re-implement PersonalDataRequestAdminView using Vaadin Flow
  • ONEP-3353 Re-implement OAuth2AppsView and OAuth2AppEditor using Vaadin Flow
  • ONEP-3354 Re-implement ManagementApiClientsView and ManagementApiClientEditor using Vaadin Flow
  • ONEP-3355 Re-implement WebhooksView and WebhookEditor using Vaadin Flow
  • ONEP-3356 Re-implement ApplicationTokensView using Vaadin Flow
  • ONEP-3357 Re-implement DataStoragesView using Vaadin Flow
  • ONEP-3358 Re-implement FileStoragesView and FileStorageEditor using Vaadin Flow
  • ONEP-3359
  • ONEP-3360 Re-implement ContextsView and ContextConfigurationEditor using Vaadin Flow
  • ONEP-3361 Re-implement CustomMessagesView using Vaadin Flow
  • ONEP-3362 Re-implement Email/Web templates views and editors using Vaadin Flow
  • ONEP-3364 Re-implement (DVV) ConnectionProfilesView and ConnectionProfileEditor using Vaadin Flow
  • ONEP-3365 Re-implement BaseSettingsView using Vaadin Flow
  • ONEP-3366 Re-implement ClusterSettingsView using Vaadin Flow
  • ONEP-3367 Re-implement BrandingSettingsView using Vaadin Flow
  • ONEP-3368 Re-implement MaintenanceSettingsView using Vaadin Flow
  • ONEP-3369 Re-implement SupportSettingsView using Vaadin Flow
  • ONEP-3370 Re-implement SchedulingSettingsView using Vaadin Flow
  • ONEP-3371 Re-implement IpInfoConfigurationView using Vaadin Flow
  • ONEP-3372 Re-implement PersonalDataRequestConfigView using Vaadin Flow
  • ONEP-3373 Re-implement Namespaces view and editor using Vaadin Flow
  • ONEP-3374 Re-implement DefaultsGroupPolicyView using Vaadin Flow
  • ONEP-3375 Re-implement EmailSettingsView using Vaadin Flow
  • ONEP-3376 Re-implement SMSSettingsView using Vaadin Flow
  • ONEP-3377 Re-implement SMSRoutingView using Vaadin Flow
  • ONEP-3378 Re-implement WalletTypeConfigView using Vaadin Flow
  • ONEP-3379 Re-implement WalletTransactionConfigView using Vaadin Flow
  • ONEP-3380 Re-implement SalesHistoryConfigView using Vaadin Flow
  • ONEP-3381 Re-implement OpenIdSettingsView using Vaadin Flow
  • ONEP-3382 Re-implement (OpenID) AuthSystemDefaultsSettingsView using Vaadin Flow
  • ONEP-3383 Re-implement SuomiValtuudetSettingsView using Vaadin Flow
  • ONEP-3384 Re-implement VrkfiConfigView using Vaadin Flow
  • ONEP-3385 Re-implement HSLCustomerCareConfigView using Vaadin Flow
  • ONEP-3386 Re-implement HSLIDUIConfigView using Vaadin Flow
  • ONEP-3387 Re-implement EtbSettingsView using Vaadin Flow
  • ONEP-3388 Re-implement WalttiConfigView using Vaadin Flow
  • ONEP-3389 Re-implement TieraEduConfigurationView using Vaadin Flow
  • ONEP-3390 Re-implement main menu and settings menu using Vaadin Flow
  • ONEP-3391 Re-implement Header and Footer using Vaadin Flow
  • ONEP-3392 Re-implement EndUser UIs using Vaadin Flow (excluding OpenID)
  • ONEP-3393 Re-implement OpenID UIs using Vaadin Flow
  • ONEP-3956 Re-implement contact view related windows using Vaadin Flow
  • ONEP-3957 Remove all legacy Vaadin 8 related code (final conversion step)
  • ONEP-3958 Re-implement event log window using Vaadin Flow
  • ONEP-3959 Remove webtheme related code (not supported in Vaadin Flow)
  • ONEP-3961 Re-implement dashboard view related windows using Vaadin Flow
  • ONEP-3964 Re-implement LDAP editor and browser window using Vaadin Flow
  • ONEP-3971 Re-implement (HSL) AccountCareView using Vaadin Flow
  • ONEP-3972 Re-implement Waltti specific views using Vaadin FlowRe-implement Waltti specific views using Vaadin Flow
  • ONEP-3975 Re-implement commerce views using Vaadin Flow
  • ONEP-3988 Re-implement WalletConfigView using Vaadin Flow
  • ONEP-3997 Re-implement Account view related windows using Vaadin Flow
  • ONEP-4001 Re-implement LoginView using Vaadin Flow
  • ONEP-4061 Improve custom style system
  • ONEP-4067 Updated the project to use Java 25 and Spring Boot 4.x. The builder image, pom.xml, and build artifacts now support these new versions.
  • ONEP-4118 The Sentry SDK has been updated to version 8.39.1
  • ONEP-4217 Refactor UserService to be more manageable. Extracted code that is not directly related to User itself to it's own service. Also refactored inner exception classes to it's own classes.
  • ONEP-4247 Added support for FTN 3.1.1.1 required attributes.