> For the complete documentation index, see [llms.txt](https://docs.openg2p.org/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.openg2p.org/platform/platform-services/identity-and-access-management/versions.md).

# Versions

IAM Service Versions

Source, images, and the Helm chart live in [`iam`](https://github.com/OpenG2P/iam) (the former `iam-service` repository is archived).

<table><thead><tr><th width="123.34967041015625">Helm version</th><th width="247.93975830078125">IAM Runtime Versions</th><th width="133.2740478515625">Last modified</th><th>Description</th></tr></thead><tbody><tr><td><a href="https://github.com/OpenG2P/iam/tree/develop/deployments/charts/openg2p-iam-service">0.0.0-develop.98</a></td><td><a href="https://hub.docker.com/r/openg2p/iam-staff-portal-api/tags">iam-staff-portal-api:develop</a><br><br><a href="https://hub.docker.com/r/openg2p/iam-agent-portal-api/tags">iam-agent-portal-api:develop</a><br><br><a href="https://hub.docker.com/r/openg2p/iam-staff-ui/tags">iam-staff-ui:develop</a></td><td>02-Sep-2026</td><td>In progress. Active development branch on <code>iam</code>; published chart is <code>0.0.0-develop.N</code> and images are tagged <code>develop</code>.</td></tr><tr><td><a href="https://github.com/OpenG2P/iam/tree/1.4.2/deployments/charts/openg2p-iam-service">1.4.2</a></td><td><a href="https://hub.docker.com/r/openg2p/iam-staff-portal-api/tags">iam-staff-portal-api:1.4.2</a><br><br><a href="https://hub.docker.com/r/openg2p/iam-agent-portal-api/tags">iam-agent-portal-api:1.4.2</a><br><br><a href="https://hub.docker.com/r/openg2p/iam-staff-ui/tags">iam-staff-ui:1.4.2</a></td><td>04-Sep-2026</td><td><ol><li><code>openg2p-fastapi-common</code> bumped to <code>1.2.1</code></li><li>DB sessions use the shared <code>get_async_session_maker</code> across services</li></ol></td></tr><tr><td><a href="https://github.com/OpenG2P/iam/tree/1.4.1/deployments/charts/openg2p-iam-service">1.4.1</a></td><td><a href="https://hub.docker.com/r/openg2p/iam-staff-portal-api/tags">iam-staff-portal-api:1.4.1</a><br><br><a href="https://hub.docker.com/r/openg2p/iam-agent-portal-api/tags">iam-agent-portal-api:1.4.1</a><br><br><a href="https://hub.docker.com/r/openg2p/iam-staff-ui/tags">iam-staff-ui:1.4.1</a></td><td>02-Sep-2026</td><td><ol><li>Separate agent vs staff auth cookies; return <code>401</code> when a token cannot be verified</li><li>Agent API auth matches staff (logout, logged-in user); seed the agent-realm login provider</li><li>Fix Keycloak base URL templating; point the agent app at the agent portal host</li></ol></td></tr><tr><td><a href="https://github.com/OpenG2P/iam/tree/1.4.0/deployments/charts/openg2p-iam-service">1.4.0</a></td><td><a href="https://hub.docker.com/r/openg2p/iam-staff-portal-api/tags">iam-staff-portal-api:1.4.0</a><br><br><a href="https://hub.docker.com/r/openg2p/iam-agent-portal-api/tags">iam-agent-portal-api:1.4.0</a><br><br><a href="https://hub.docker.com/r/openg2p/iam-staff-ui/tags">iam-staff-ui:1.4.0</a></td><td>01-Sep-2026</td><td><ol><li><strong>IAM Staff UI</strong> — admin console for applications, roles, permissions, login providers, and data policies</li><li><strong>Data policies</strong> — ALLOW/DISALLOW filters published to Keycloak; evaluate API for PEPs</li><li><strong>Agent portal API</strong> shipped in Helm on by default</li><li><code>openg2p-fastapi-common</code> <code>1.2.0</code> — partner JWT verification via <code>CryptoFactory</code></li></ol></td></tr><tr><td><a href="https://github.com/OpenG2P/iam/tree/v1.3.0/deployments/charts/openg2p-iam-service">v1.3.0</a></td><td><a href="https://hub.docker.com/r/openg2p/iam-staff-portal-api/tags">iam-staff-portal-api:1.3.0</a></td><td>17-Jul-2026</td><td><ol><li>Refresh tokens persisted in Redis with auto-refresh in middleware; logout + configurable refresh TTL</li><li>CSRF protection for authenticated requests</li><li><code>DataPolicyMiddleware</code> and data-policy role helpers</li><li>Staff portal app-registration auth/CSRF fixes; operational roles for register metadata and reference data</li></ol></td></tr><tr><td><a href="https://github.com/OpenG2P/iam/tree/v1.2.1">v1.2.1</a></td><td><a href="https://hub.docker.com/layers/openg2p/iam-staff-portal-api/1.2.1/images/sha256-d99f2cec33e9cf48b4c01e318b69df0e84116204c29d53121f96ffa3a56b1b74">iam-staff-portal-api:v1.2.1</a></td><td>19-Jun-2026</td><td><ol><li>Auth middleware fix — <code>AuthMiddleware</code> now correctly resolves nested FastAPI routes (needed for FastAPI 0.137+), so permission checks hit the right endpoint handler</li><li>Dependency bump — <code>openg2p-fastapi-common</code> updated from <code>v1.1.6</code> → <code>v1.1.7</code> in Dockerfiles, CI workflows, and Helm chart</li></ol></td></tr><tr><td><a href="https://github.com/OpenG2P/iam/tree/v1.2.0">v1.2.0</a></td><td><a href="https://hub.docker.com/layers/openg2p/iam-staff-portal-api/1.2.0/images/sha256-2e7810ef82a501e9a581a24ff037d08663a0a230c488c9a83a1adeded5da1bbd">iam-staff-portal-api:v1.2.0</a></td><td>15-Jun-2026</td><td><ol><li>Added Auth verify as optional parameter</li><li>Restructured the codebase and deployment</li></ol></td></tr><tr><td><a href="https://github.com/OpenG2P/openg2p-iam-service-deployment/tree/1.0.0">1.1.0</a></td><td><a href="https://hub.docker.com/layers/openg2p/iam-staff-portal-api/1.0.1/images/sha256-47a7dff1ba5c12f214c920d22b89f1901a141e714995db4aa46fe38f3d927059">iam-staff-portal-api:v1.1.0</a></td><td>08-May-2026</td><td><ol><li>Removed user_type and all the business logic depending on it</li><li>Improvement in middleware handling</li><li>OIDC specification refinement</li></ol></td></tr><tr><td><a href="https://github.com/OpenG2P/openg2p-iam-service-deployment/tree/1.0.0">1.0.0</a></td><td><a href="https://hub.docker.com/layers/openg2p/iam-staff-portal-api/1.0.1/images/sha256-47a7dff1ba5c12f214c920d22b89f1901a141e714995db4aa46fe38f3d927059">iam-staff-portal-api:v1.0.1</a></td><td>17-Apr-2026</td><td><ol><li>IAM Staff Portal API - gateway for Staff Login using the Staff Portal - Interfaces with ID Providers for Token issuance and validation</li><li>Bug fixes as part of QA<br></li></ol></td></tr></tbody></table>

{% hint style="info" %}
On the `develop` branch the published chart version is `0.0.0-develop.<run-number>` and every Docker image is tagged `develop` (the image tag matches the `iam` repository ref — a branch name or git tag). Tagged releases carry semantic versions here. The **Last modified** date of the develop row should be updated whenever that version changes.
{% endhint %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.openg2p.org/platform/platform-services/identity-and-access-management/versions.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.