v10 Changelog
10.0.0 (4 Sept 2025)
[AR-2974] Authentication overhaul — replaced the entire authentication system with Pac4j security framework for standardized, modern, and extensible security handling.
Core Changes
-
AR-2983 Replaced legacy security filter with pac4j filters (security and callback).
-
AR-2984 Integrated role and authorization mapping into pac4j profiles and authorizers.
-
AR-2986 Added support for AD, LDAP, Azure, and Google authentication providers through pac4j clients.
-
AR-2989 Migrated in-memory login handling to pac4j session and profile management.
-
AR-2991 Replaced legacy session management with pac4j ProfileManager.
-
AR-2992 Migrated custom MailArchivaPrincipal to pac4j CommonProfile.
-
AR-2993 Re-implemented two-factor authentication using pac4j client chaining.
-
AR-2994 Added multi-tenancy support to authentication flows.
-
AR-2995 Replaced legacy BASIC authentication
Fixes and Adjustments Post-Migration
-
AR-3104 Multi-tenant: fixed issue where tenant certificate imports were incorrectly stored in central config.
Found this information useful? Visit mailarchiva.com to learn more about MailArchiva.