authentik/website/docs/releases/v2022.4.md

---
title: Release 2022.4
slug: "2022.4"
---

## Breaking changes

-   Removal of HTTP Basic authentication for API requests

    For legacy reasons, authentik used to support HTTP-Basic authenticated requests, using the token as a password. This has been removed.

-   Removal of deprecated context in Expression policies used in prompt stages

    Before this version, you could use both `context['*field_name*']` and `context['prompt_data']['*field_name*']`. The former one has been removed as it could overwrite other data in the context if the field name is the same as another context value.

-   Added name field for invitations

    Invitations now require a name, used to better identify their purpose.

## New features

-   Application Grouping

    Applications can now be grouped together to better organise connected applications in the user dashboard.

-   JWT authentication for `client_credentials` grants

    Providers can now be configured to accept JWTs signed by configured certificates, which makes it a lot easier to services access to authentik, when an existing machine/service identity is provided (for example, this can be used to let Kubernetes Pods authenticate themselves to authentik via their service account)

## Minor changes/fixes

-   core: add method to set key of token
-   core: add num_pk to group for applications that need a numerical group id
-   internal: disable HTML encoding in go-generated log messages
-   lifecycle: fix password and hostname in redis URI not properly quoted
-   outposts: check if docker ports should be mapped before comparing ports
-   policies: add policy log messages to test endpoints
-   providers/oauth2: map internal groups to GitHub teams in GHE OAuth emulation (#2497)
-   providers/oauth2: pass scope and other parameters to access policy request context
-   stages/email: allow overriding of destination email in plan context
-   stages/invitation: add invitation name
-   stages/prompt: filter rest_framework.fields.empty when field is not required
-   stages/prompt: fix non-required fields not allowing blank values
-   stages/prompt: set field default based on placeholder
-   tenants: add tenant-level attributes, applied to users based on request
-   web: live-convert to slug in fields where only slugs are allowed
-   web: migrate dropdowns to wizards (#2633)
-   web/admin: allow editing of invitations
-   web/admin: fix missing protocols on generated nginx config
-   web/admin: trigger update when provider wizard finishes
-   web/user: add column layouts

## Upgrading

This release does not introduce any new requirements.

### docker-compose

Download the docker-compose file for 2022.4 from [here](https://goauthentik.io/version/2022.4/docker-compose.yml). Afterwards, simply run `docker-compose up -d`.

### Kubernetes

Update your values to use the new images:

```yaml
image:
    repository: ghcr.io/goauthentik/server
    tag: 2022.4.1
```