[eduVPN-deploy] [2018-11-23] VPN server update

[François Kooman]

Hi all,

The following components had a new release:

* vpn-server-api: 1.4.7 [1]
* vpn-user-portal: 1.8.4 [2]

Major changes:

- Deprecate all ACL backends (determine which user gets access to which
profile) in vpn-server-api and move this functionality to vpn-user-portal;
- Synchronize the expiry of client certificate, OAuth refresh token and
browser session to make sure they all expire at the exact same moment;
- Frontend (vpn-user-portal) will from now on cache ACL for the duration
of the session mentioned above, to no longer need "backchannel" calls
when connecting to the VPN.

These changes are part of ongoing work to simplify the software
substantially and make it more robust against external systems failing.
Next up is reworking 2FA.

All distribution packages are updated: CentOS / Red Hat Enterprise,
Fedora and Debian. The Debian repository URL changed! There will be a
separate announcement about this shortly.

Let me know if you have any questions or remarks!

Regards,
François

[1] https://github.com/eduvpn/vpn-server-api/blob/master/CHANGES.md
[2] https://github.com/eduvpn/vpn-user-portal/blob/master/CHANGES.md