all the packages have been updated

.github/FUNDING.yml

@@ -0,0 +1 @@
+github: chirpstack

.github/workflows/main.yml

@@ -29,6 +29,8 @@ jobs:
       -
         name: Checkout
         uses: actions/checkout@v2
+        with:
+          fetch-depth: 0
       -
         name: Configure AWS credentials
         uses: aws-actions/configure-aws-credentials@v1
@@ -51,21 +53,23 @@ jobs:
         run: |
           aws s3 sync dist/upload s3://builds.loraserver.io/chirpstack-application-server
 
+  # Runs on pull request to ensure the docker build works,
+  # but pushes only on commits to master and on PRs.
   docker:
     needs: test
     runs-on: ubuntu-latest
-    if: startsWith(github.ref, 'refs/tags/v')
     steps:
       -
         name: Checkout
         uses: actions/checkout@v2
+        with:
+          fetch-depth: 0
       -
         name: Docker meta
         id: meta
         uses: docker/metadata-action@v3
         with:
-          images: |
-            chirpstack/chirpstack-application-server
+          images: chirpstack/${{ github.event.repository.name }}
           tags: |
             type=semver,pattern={{version}}
             type=semver,pattern={{major}}
@@ -78,6 +82,7 @@ jobs:
         uses: docker/setup-buildx-action@v1
       -
         name: Login to DockerHub
+        if: startsWith(github.ref, 'refs/tags/v')
         uses: docker/login-action@v1 
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
@@ -87,8 +92,8 @@ jobs:
         id: docker_build
         uses: docker/build-push-action@v2
         with:
-          context: .
-          push: true
+          platforms: linux/amd64,linux/arm64,linux/arm/v7,linux/arm/v6
+          push: ${{ startsWith(github.ref, 'refs/tags/v') }}
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
       -

Dockerfile

@@ -1,4 +1,4 @@
-FROM golang:1.16-alpine AS development
+FROM golang:1.19.3-alpine3.16 AS development
 
 ENV PROJECT_PATH=/chirpstack-application-server
 ENV PATH=$PATH:$PROJECT_PATH/build
@@ -14,7 +14,7 @@ WORKDIR $PROJECT_PATH
 RUN make dev-requirements ui-requirements
 RUN make
 
-FROM alpine:3.13.2 AS production
+FROM alpine:3.17.0 AS production
 
 RUN apk --no-cache add ca-certificates
 COPY --from=development /chirpstack-application-server/build/chirpstack-application-server /usr/bin/chirpstack-application-server

Dockerfile-devel

@@ -1,4 +1,4 @@
-FROM golang:1.16-alpine
+FROM golang:1.19.3-alpine3.16
 
 ENV PROJECT_PATH=/chirpstack-application-server
 ENV PATH=$PATH:$PROJECT_PATH/build
@@ -13,4 +13,5 @@ RUN mkdir -p $PROJECT_PATH
 COPY . $PROJECT_PATH
 WORKDIR $PROJECT_PATH
 
+RUN git config --global --add safe.directory $PROJECT_PATH
 RUN make dev-requirements

README.md

@@ -10,6 +10,13 @@ with a web-interface and API (RESTful JSON and gRPC) and supports authorization
 by using JWT tokens (optional). Received payloads are published over MQTT
 and payloads can be enqueued by using MQTT or the API.
 
+## !!! ChirpStack v4 note !!!
+
+With the release of ChirpStack v4, the source-code has been migrated to
+[https://github.com/chirpstack/chirpstack/](https://github.com/chirpstack/chirpstack/).
+Please refer to the [v3 to v4 migration guide](https://www.chirpstack.io/docs/v3-v4-migration.html)
+for information on how to migrate your ChirpStack v3 instance.
+
 ## Architecture
 
 ![architecture](https://www.chirpstack.io/static/img/graphs/architecture.dot.png)
@@ -31,12 +38,6 @@ and payloads can be enqueued by using MQTT or the API.
   * [Support forum](https://forum.chirpstack.io)
   * [Bug or feature requests](https://github.com/brocaar/chirpstack-application-server/issues)
 
-## Sponsors
-
-[![CableLabs](https://www.chirpstack.io/img/sponsors/cablelabs.png)](https://www.cablelabs.com/)
-[![SIDNFonds](https://www.chirpstack.io/img/sponsors/sidn_fonds.png)](https://www.sidnfonds.nl/)
-[![acklio](https://www.chirpstack.io/img/sponsors/acklio.png)](http://www.ackl.io/)
-
 ## License
 
 ChirpStack Application Server is distributed under the MIT license. See also

cmd/chirpstack-application-server/cmd/configfile.go

@@ -32,8 +32,6 @@ grpc_default_resolver_scheme="{{ .General.GRPCDefaultResolverScheme }}"
 
 
 # PostgreSQL settings.
-#
-# Please note that PostgreSQL 9.5+ is required.
 [postgresql]
 # PostgreSQL dsn (e.g.: postgres://user:password@hostname/database?sslmode=disable).
 #
@@ -86,8 +84,6 @@ max_idle_connections={{ .PostgreSQL.MaxIdleConnections }}
 
 
 # Redis settings
-#
-# Please note that Redis 2.6.0+ is required.
 [redis]
 
 # Server address or addresses.
@@ -211,6 +207,20 @@ id="{{ .ApplicationServer.ID }}"
     # The login label is used in the web-interface login form.
     login_label="{{ .ApplicationServer.UserAuthentication.OpenIDConnect.LoginLabel }}"
 
+    # Use UserInfo.
+    #
+    # Use a UserInfo call to retrieve the claim rather than extracting the claim from
+    # the idToken.
+    use_userinfo={{ .ApplicationServer.UserAuthentication.OpenIDConnect.UseUserInfo }}
+
+    # Assume email_verified.
+    #
+    # Assume that the email_verified field is always true, regardless of whether it
+    # is included in the token.
+    #
+    # This is required for identity providers that don't supply this claim, such as
+    # Microsoft Azure AD.
+    assume_email_verified={{ .ApplicationServer.UserAuthentication.OpenIDConnect.AssumeEmailVerified }}
 
   # JavaScript codec settings.
   [application_server.codec.js]

cmd/chirpstack-application-server/cmd/root.go

@@ -65,14 +65,15 @@ func init() {
 	viper.SetDefault("application_server.integration.amqp.event_routing_key_template", "application.{{ .ApplicationID }}.device.{{ .DevEUI }}.event.{{ .EventType }}")
 	viper.SetDefault("application_server.integration.enabled", []string{"mqtt"})
 	viper.SetDefault("application_server.codec.js.max_execution_time", 100*time.Millisecond)
+	viper.SetDefault("application_server.user_authentication.openid_connect.use_userinfo", true)
+	viper.SetDefault("application_server.user_authentication.openid_connect.assume_email_verified", false)
 
 	viper.SetDefault("metrics.timezone", "Local")
 	viper.SetDefault("metrics.redis.aggregation_intervals", []string{"MINUTE", "HOUR", "DAY", "MONTH"})
 	viper.SetDefault("metrics.redis.minute_aggregation_ttl", time.Hour*2)
 	viper.SetDefault("metrics.redis.hour_aggregation_ttl", time.Hour*48)
 	viper.SetDefault("metrics.redis.day_aggregation_ttl", time.Hour*24*90)
 	viper.SetDefault("metrics.redis.month_aggregation_ttl", time.Hour*24*730)
-
 	viper.SetDefault("monitoring.per_device_event_log_max_history", 10)
 
 	rootCmd.AddCommand(versionCmd)

cmd/chirpstack-application-server/cmd/root_run.go

@@ -52,7 +52,7 @@ func run(cmd *cobra.Command, args []string) error {
 		}
 	}
 
-	sigChan := make(chan os.Signal)
+	sigChan := make(chan os.Signal, 1)
 	exitChan := make(chan struct{})
 	signal.Notify(sigChan, os.Interrupt, syscall.SIGTERM)
 	log.WithField("signal", <-sigChan).Info("signal received")