Release 2.14 (#4710)

- show "link has expired message" in password reset screen
- added date objects as hydrator variables - for custom date formats in invoice templates
- show meta-fields with null values (e.g. booleans with `false` where hidden)
- fix permission check: allow to remove `view_own_timesheet` but still record times
- prevent error 500 if customer country is empty
- fix API 500 error if project does not exist when creating new timesheet
- fix tags are not created in remote-search mode
- do not check "export items" by default
- fix daterange query, if user an request locale are different
- added logging for invalid SAML responses (see various discussions)

tests/Saml/SamlProviderTest.php

@@ -17,6 +17,7 @@ use App\Saml\SamlProvider;
 use App\Tests\Configuration\TestConfigLoader;
 use App\Tests\Mocks\SystemConfigurationFactory;
 use PHPUnit\Framework\TestCase;
+use Psr\Log\LoggerInterface;
 use Symfony\Component\Security\Core\Exception\AuthenticationException;
 use Symfony\Component\Security\Core\User\UserProviderInterface;
 
@@ -57,7 +58,7 @@ class SamlProviderTest extends TestCase
             $userProvider->method('loadUserByIdentifier')->willReturn(new User());
         }
 
-        $provider = new SamlProvider($repository, $userProvider, $samlConfig);
+        $provider = new SamlProvider($repository, $userProvider, $samlConfig, $this->createMock(LoggerInterface::class));
 
         return $provider;
     }
@@ -107,7 +108,7 @@ class SamlProviderTest extends TestCase
     public function testAuthenticateThrowsAuthenticationException(): void
     {
         $this->expectException(AuthenticationException::class);
-        $this->expectExceptionMessage('Failed creating or hydrating user "foo1@example.com": Missing user attribute: Email');
+        $this->expectExceptionMessage('Failed creating or hydrating user "foo1@example.com": Missing SAML attribute in response: Email');
 
         $user = new User();
         $user->setAuth(User::AUTH_SAML);