0.12.3 (September 8, 2026)

• Chg: Set the maximum HumHub version to 1.19 — from HumHub 1.20 on the HTTP API framework ships in core, and this module line would register its own rules next to it; use 0.13.x there
• Fix: Impersonate token authentication crashed on HumHub 1.19 (isImpersonated was removed by the core impersonation refactor, core #8372)

0.12.2 (July 16, 2026)

• Chg: Removed the obsolete twofa.beforeCheck listener (Module::ignoreTwofaCheck()) — the event no longer exists since the twofa module moved to the core user gate system; token-authenticated API requests are not intercepted by the gate, so the REST API keeps working for users with 2FA enabled without any opt-out

0.12.1 (July 8, 2026)

• Fix #245: Update user images
• Enh #246: Add aria-label attribute for icon-only buttons

0.12.0 (June 4, 2026)

• Enh: Raised minimum HumHub version to 1.19 (UserSource architecture)
• Enh: Replaced legacy authclient / authclient_id response fields on /user with user_source to match the new core schema. Requests using the authclient field are still accepted as an alias for user_source for one release.
• Enh: /user/get-by-authclient now looks up external identities via the user_auth table only — the legacy user.auth_mode / user.authclient_id columns were dropped in core 1.19.
• Enh: Automated code refactoring for HumHub 1.18 using Rector

0.11.6 (Unreleased)

• Enh: Automated code refactoring for HumHub 1.18 using Rector

0.11.5 (July 8, 2026)

• Fix: Make m230401_174208_add_allow_jwt_auth migration resilient when module is not bootstrapped
• Enh: Automated code refactoring for HumHub 1.18 using Rector

0.11.4 (May 28, 2026)

• Fix #240: Fix activity and notification definitions with deleted/obsolete related objects

0.11.3 (May 15, 2026)

• Enh: Automated code refactoring for HumHub 1.18 using Rector
• Fix #238: Skip 2FA checks for module REST API controllers

0.11.2 (February 24, 2026)

• Enh: Automated code refactoring for HumHub 1.18 using Rector
• Enh #232: Add custom notification endpoint

0.11.1 (November 19, 2025)

• Enh #219: Improved Module Test GitHub Actions
• Enh #220: Implement module-coding-standards
• Enh #224: Convert swagger docs to OpenAPI 3.0

0.11.0 (July 26, 2025)

• Enh #210: Migration to Bootstrap 5 for HumHub 1.18
• Fix #167: Update module resources path

0.10.11 (September 10, 2025)

• Fix #209: Invite created via user/invite endpoint now sets the language correctly
• Fix #211: Update test user passwords
• Fix #214: Switch to using PolymorphicRelation::getObjectModel() in LikeController::actionFindByObject so likes can be fetched for ContentAddon models

0.10.10 (May 20, 2025)

• Fix #206: UserPickerField version compatibility

0.10.9 (May 19, 2025)

• Enh #204: Bearer Token Auth Improvements

0.10.8 (May 15, 2025)

• Enh #198: Add doc for Auth Methods
• Enh #199: Disable auth/login endpoint when JWT is disabled
• Enh #201: Remove session data from legal user data export
• Enh #202: Add upload support for user image and banner

0.10.7 (April 22, 2025)

• Fix #192: Authentication of unregistered LDAP Users fails

0.10.6 (April 17, 2025)

• Enh #192: Ignore all actions from 2FA check
• Fix #194: Fix failing tests

0.10.5 (March 3, 2025)

• Enh #182: Use PHP CS Fixer
• Enh #189: Added new endpoint POST /user/{id}/auth-client to insert entries directly into the user_auth table

0.10.4 (September 9, 2024)

• Enh #180: Improved user/get-by-authclient endpoint to support additional authentication clients.
• Enh #181: Added user profile image_url and banner_url
• Enh #179: Added new resend and cancel endpoints for user invite

0.10.3 (September 13, 2024)

• Enh #177: Collect user data for Legal module

0.10.2 (September 5, 2024)

• Enh #175: User language will be used by default
• Fix #176: Fix controller to invite users

0.10.1 (July 31, 2024)

• Enh #173: Added possibility to change created_at of content
• Enh #116: Allow to set show_at_dashboard and can_cancel_membership on space membership creating

0.10.0 (July 16, 2024)

• Enh #155: Add requirements.php
• Fix #164: Disable mustChangePassword check for impersonated access tokens
• Enh #170: Added new endpoint GET /user/invite for user pending invites
• Enh #171: Extended invite information in response of GET /user/invite endpoint

0.9.3 (December 8, 2023)

• Fix #135: Add "last login" value to user endpoint
• Enh #47: Implementation of the "Invite new users" endpoint
• Enh #134: Implementation of the user account visibility property in the "Update an existing user" endpoint
• Enh #141: Tests for next version
• Fix #142: Fix visibility of the method Controller::getAccessRules()
• Fix #143: On user creation, status is always 1 even if set to another value

0.9.2 (June 14, 2023)

• Enh #125: Add documentation for endpoint user/get-by-authclient
• Enh #128: Create User without Password
• Fix #130: Don't extend core User model

0.9.1 (May 26, 2023)

• Fix #126: Fix user component initialization

0.9.0 (May 17, 2023)

• Fix #110: Fix PHP Error in UserDefinition
• Enh #106: Allow to set authclient and authclient_id on user creating and updating
• Enh #112: Added support of HttpBearer and QueryParam auth methods
• Enh #117: Added support of user Impersonate
• Enh #113: Deleted unnecessary code used for Calendar And Task Modules
• Fix #114: Fix tests on soft delete of content
• Fix #122: Removed undefined properties

0.8.0 (March 10, 2023)

• Fix: Update for HumHub version 1.14

0.7.1 (January 6, 2023)

• Fix #102: Update for version 1.13
• Fix #95: Add updated_at in metadata

0.6.1 (June 06, 2022)

• Fix #91: Use Content-Type "application/json" for endpoint auth/login in request

0.6.0 (May 26, 2022)

• Enh #41: Add Comment API endpoints

0.5.1 (May 16, 2022)

• Fix #88: Increase min version for new field Content::locked_comments

0.5.0 (May 6, 2022)

• Enh #85: Allow update of Content Topics
• Enh #85: Allow update of Content Metadata (Visibility, Archived, Pinned)
• Enh #70: Content: Add sorting option

0.4.3 (February 1, 2022)

• Enh #73: Added "mustChangePassword" flag for users created using the API
• Enh: Don't provide auth token for disabled users on REST module side

0.4.2 (January 31, 2022)

• Enh #72: Added Visibility as Content MetaData

0.4.1 (January 25, 2022)

• Enh #74: Response space container ID
• Enh #75: Attach files to content

0.4.0 (January 19, 2022)

• Enh #33: Move endpoints to external modules
• Fix #60: Cleanup code for prepare params
• Enh #86: Docs for polls module
• Fix #67: Update docs for container(space/user) tags
• Enh #74: Response space container ID
• Enh #75: Attach files to content

0.3.1 (Unreleased)

• Enh: Use controller config for not intercepted actions
• Fix #57: Use getBodyParam() to extract the 'role' body parameter for the space membership

0.3.0 (February 22, 2021)

• Fix #51: Remove group.space_id for compatible with Humhub 1.8

0.2.1 (February 17, 2021)

• Enh #45: Files Endpoint - Don’t require target folder id to create root automatically

0.2.0-beta.1 (November 23, 2020)

• Enh: New Endpoints for Mail module
• Enh: Added permission checks for regular user access
• Fix #42: Activity Module Endpoint
• Fix #43: Swagger doc is incorrect for user "display_name" for User endpoints
• Fix: Renamed "/like/findByRecord" endpoint to "/like/find-by-object"

0.1.4 (October 13, 2020)

• Enh: User new endpoints, find-by-username and find-by-email
• Enh: Added current User details endpoint

0.1.3 (August 5, 2020)

• Fix: HumHub 1.6 compatibility issues

0.1.2 (January 31, 2020)

• Enh: Added User group endpoint

0.1.1 (January 17, 2020)

• Initial release in marketplace
• Chg: Removed 'members' attribute from 'Space' output object
• Enh: Added Space Membership Endpoint

0.1.0 (20 December, 2019)

• Initial release in marketplace
• Enh: Various new endpoints and features

0.0.1 (Unrelased)

Initial release