v6.26.0-rc1

🌟 Highlights

Ouath2 based Single Sign On Authentication

CodeChecker now provides Oauth2 based user authentication through various providers. It is now possible to configure up your CodeChecker server instance to accept user logins with their Google, Microsoft or GitHub accounts.
To enable this feature, you will first need to configure your CodeChecker server instance with the corresponding oauth provider and add a
new authentication method section in the codehchecker server configuration file.
If the user group memberships are managed by a Microsoft Entra identity server, these memberships will be fetched by CodeChecker through the graph API.

See CodeChecker authentication document document for configuration details.

The features was implemented in the following PRs:

• Implementation of Oauth of Github, Google and Microsoft by @feyruzb in #4298
• integrated signum fetching and using it as optional username by @feyruzb in #4517
• Add paging to the graph API query by @dkrupp in #4532

Personal Access token Management

Personal access tokens are generated "passwords" which can be used to login to CodeChecker. If MultiFacor Authentication is enabled, it is the only way to authenticate through the CLI.

• The personal access tokens now can be created on the GUI too, not only through the CLI.
• It is accessible if you click on you user name in the top right corner.
  

❗ Backward incompatible changes

• The personal Access tokens cannot be viewed after creation. It was possible to list the values of the personal access tokens after creation, but after this version it will only be possible to view once at creation time.

💻 CLI/Server improvements

• Cache __contains_no_intrinsic_headers and thus speedup parse_options ~2x by @irishrover in #4479
• [analyzer] debug_analyzer log level for analyzer commands by @bruntib in #4473
• [cmd] Emit errors instead of hiding flags by @Szelethus in #4465
• fix(report-converter): Support null column in eslint reports by @SweetVishnya in #4497
• [NFC] Eliminate the "W" form of clang-tidy warnings by @bruntib in #4438
• [fix] Unique key constraint violation fix by @bruntib in #4505
• [bugfix] Don't crash if clangsa binary is missing by @Szelethus in #4531
• Fix serving Bad request pages in case of some HTTP errors by @Discookie in #4506
• [feat] Display announcement message in the CLI by @noraz31 #4535

🔨 Other

• [fix] Adding run filter to router query by @cservakt in #4495
• [fix] Display chronological order in GUI by @bruntib in #4512
• fixed url strip error by @feyruzb in #4516
• [fix] Rename cmd modules to avoid conflict with built-in cmd by @gamesh411 in #4464
• E2E tests are flaky (fix) by @xb058t in #4493
• Make username-password login hidable by @gulyasgergely902 in #4537
• Simplify oauth interface by @gulyasgergely902 in #4539
• [fix] dead links, typos etc. in the documentation by @NagyDonat in #4526
• Fix a legacy mistake in the test by @irishrover #4543
• Fix issues in documentation by @gulyasgergely902 #4542

🌳 Environment

• [tools] bump sarif-tools version from 1.0.0 to 3.0.4 by @AlexFabre in #4466
• [fix] Fix missing CC_LIB_DIR when dev_package is used by @Szelethus in #4513
• [test] GitHub actions upgrade to 24.04 by @bruntib in #4524

New Contributors

• @AlexFabre made their first contribution in #4466
• @SweetVishnya made their first contribution in #4497
• @xb058t made their first contribution in #4493
• @gulyasgergely902 made their first contribution in #4537
• @NagyDonat made their first contribution in #4526

Full Changelog: v6.25.1...v6.26.0-rc1