Supplement release for 3.11.5 for Moodle 3.11

Release 3.11.5 of Microsoft plugins for Moodle 3.11

This release contains:

• Support Microsoft Identity Platform (oauth2 v2.0) and certificate authentication #1453
• Send notification to site administrator on secret expiry #2115
• Other bug fixes and small changes.

Support Microsoft Identity Platform (oauth2 v2.0) and certificate authentication

It is now possible to configure the Moodle plugins to integrate with Microsoft using oauth2 v2.0 (https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-overview), which supports authenticating app using certificates besides client secret.

The auth_oidc plugin configuration pages were redesigned to allow for this.

For differences between Azure Active Directory Endpoints (oauth2 v1) and Microsoft Identity Platform Endpoints (oauth2 v2), please refer to https://devblogs.microsoft.com/premier-developer/azure-ad-endpoint-v1-vs-v2/.

Send notification to site administrator on secret expiry

For sites using client secret authentication, main site admin will get daily notification if the secret will expire within the next 4 weeks.

Bug fixes and small changes

• Fix a bug in the unit test class namespace declaration of assignsubmission_onenote plugin. Thanks to @tlock. (microsoft/moodle-assignsubmission_onenote#4)
• Add missing language string for cache definition. Thanks to @aspark21 (microsoft/moodle-local_o365#35 and microsoft/moodle-local_o365#36)
• Hide error message in behat test. Thanks to @aspark21 (microsoft/moodle-local_o365#34)
• Consider course enrolments, besides role assignments, when finding team owners/members. #2101
• Remove use of legacy APIs. #1323
• Improve how match users by emails are handled. #2034, #2173
• Fix multiple database errors specific to PostgreSQL. #2083, #2084
• When a user logs in using auth_oidc for the first time to create an account, treat this action as "creation" rather than "login" when applying field mapping. #2087
• Fix a bug in course reset observer function to check if the user exists before creating events. #2092
• Fix a bug in the sync of "roles" remote field. #2099
• Avoid PHP warning messages when syncing manually connected users in the user sync task.
• Fix a bug in DB query to check if there are existing users with duplicate emails. #2102
• Support the use of filters in auth_oidc opname setting. #1827
• Bug fix in processing adding additional tenant. #2158
• Update check on mailNickname length when creating group from course. #2183
• Update observer functions to delete outdated records when local_o365 configurations are updated.
• Add Microsoft SECURITY.MD. #2160