diff --git a/CHANGELOG.md b/CHANGELOG.md
index bc871bcdb..1fb15e06f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,188 @@
 # Changelog
 
+## [1.22.0](https://github.com/canonical/identity-platform-admin-ui/compare/v1.21.0...v1.22.0) (2024-12-03)
+
+
+### Features
+
+* actual link authentication users to authorization model + tests ([8063b73](https://github.com/canonical/identity-platform-admin-ui/commit/8063b737c085cc3cd50e59231bfc8b5b870958ec))
+* add `/auth/me` endpoint handler to return json with principal info ([9fa92a3](https://github.com/canonical/identity-platform-admin-ui/commit/9fa92a35ce0b0886cfc3caefc2af41281b0748a9))
+* add `github.com/wneessen/go-mail v0.4.4` dependency ([5182270](https://github.com/canonical/identity-platform-admin-ui/commit/5182270dd83e5126a0caa9e2a182d328e350830f))
+* add `HTTPClientFromContext` + improved OtelHTTPClientFromContext func ([fa1b3e8](https://github.com/canonical/identity-platform-admin-ui/commit/fa1b3e875319b4acb6e7359634e610b02708c308))
+* add `payload_validation_enabled` config key ([419b042](https://github.com/canonical/identity-platform-admin-ui/commit/419b042e22fe2d741afec7acfe0d54c10889b07d))
+* add 2 implementations of token verifier + tests ([1d1c5f9](https://github.com/canonical/identity-platform-admin-ui/commit/1d1c5f995ffbf5b63917248503d066a69b7d0334))
+* add 3rd party validator to API structs + setupValidation func + initial noop middleware ([1de0006](https://github.com/canonical/identity-platform-admin-ui/commit/1de0006c1db9b7d7f32c79f13de797420427db2b))
+* add AuthCookieManager implementation ([ed18cf5](https://github.com/canonical/identity-platform-admin-ui/commit/ed18cf52cc7ae8ab4410c6b566edb528db6688da))
+* add authn middleware for disabled authentication ([c232cfe](https://github.com/canonical/identity-platform-admin-ui/commit/c232cfe53dcbbd5189ba8840d02b78accb941c34))
+* add built verification email ([5a43aef](https://github.com/canonical/identity-platform-admin-ui/commit/5a43aef097284068e51d4c14fc1f5758b0130397))
+* add constructor for validator + use json tags for validation errors ([44d7223](https://github.com/canonical/identity-platform-admin-ui/commit/44d7223b6466d5cab9fadf851d4830e7d8ae0062))
+* add context path spec to correctly handle redirect ([71aef28](https://github.com/canonical/identity-platform-admin-ui/commit/71aef28352d86504959d1a9fd5e40c803ac80d11))
+* add custom axios instance ([722a331](https://github.com/canonical/identity-platform-admin-ui/commit/722a3310058be87184a155538b6ef1a1b23a82fc))
+* add encrypt implementation ([1a88aad](https://github.com/canonical/identity-platform-admin-ui/commit/1a88aadeb196f6827af41dbcd790cfc050ea3724))
+* add entitlements service by Rebac ([64b8326](https://github.com/canonical/identity-platform-admin-ui/commit/64b83262dde21da721dba203855ad57c4b251b74))
+* add env vars for mail client ([3ab1acb](https://github.com/canonical/identity-platform-admin-ui/commit/3ab1acbc15de44843632a918856526066a6777e9))
+* add externalized Kube config file env var ([9a63fe3](https://github.com/canonical/identity-platform-admin-ui/commit/9a63fe3f544784d4a420b88ed3529a1514d9e7bd))
+* add full validation implementation for schemas ([45993ed](https://github.com/canonical/identity-platform-admin-ui/commit/45993ed14506cd90f9f019d5317b4df29d726e22))
+* add granular checks method to interface + expose BatchCheck from client ([645a9fd](https://github.com/canonical/identity-platform-admin-ui/commit/645a9fd2a0c208cb307f43c1417e233a1e0a48e9))
+* add hydra admin url to config + add comment for env var expectation ([b36e498](https://github.com/canonical/identity-platform-admin-ui/commit/b36e49817e2e38881d9c33b2c6166a9e8b415d6e))
+* add hydra clients to OAuth2Context struct ([0072078](https://github.com/canonical/identity-platform-admin-ui/commit/0072078283797ab407a6d622268431161ae191c1))
+* add interfaces + implement emailservice ([b2f0ae9](https://github.com/canonical/identity-platform-admin-ui/commit/b2f0ae920fdec2630446090748ce2c4d40568059))
+* add interfaces for oauth2 integration ([684abac](https://github.com/canonical/identity-platform-admin-ui/commit/684abacdd462ea47057958af84aa165b7960d7e5))
+* add log tailing to skaffold run ([a9725da](https://github.com/canonical/identity-platform-admin-ui/commit/a9725da88b358cc487e84117de82ba4e98ee38ae))
+* add login screen ([1befe87](https://github.com/canonical/identity-platform-admin-ui/commit/1befe87ce968dc0b4c9badc6a8b8543d3b281096))
+* add Logout function and HTTPClientInterface ([98e4ec3](https://github.com/canonical/identity-platform-admin-ui/commit/98e4ec31e1fc843f84a605a67f197f39eb6bf41a))
+* add logout handler ([5ea5742](https://github.com/canonical/identity-platform-admin-ui/commit/5ea5742da45708db8eab97b3ec370541fc77d869))
+* add logout implementation ([3c435d4](https://github.com/canonical/identity-platform-admin-ui/commit/3c435d4ab0fc4571d11607e3dd86aee2fa771c75))
+* add NextTo cookie handling to cookie manager and interface ([5a5cc30](https://github.com/canonical/identity-platform-admin-ui/commit/5a5cc309fcdaefc15201b23ea7c14976b3b158bf))
+* add OAuth2 and OIDC related env vars to the Spec struct ([b900cc4](https://github.com/canonical/identity-platform-admin-ui/commit/b900cc40e8cf9edf98f0b6d636b54ab24b4173e4))
+* add OAuth2 authentication middleware + tests ([e054552](https://github.com/canonical/identity-platform-admin-ui/commit/e0545528b811d608b3003c3d0e950397cf48043f))
+* add oauth2 context to manage oauth2/oidc operations + tests ([62bff44](https://github.com/canonical/identity-platform-admin-ui/commit/62bff44252b349a5fbd9a2ebdf2628e39ad953cf))
+* add OAuth2 login handler + tests ([88c29e6](https://github.com/canonical/identity-platform-admin-ui/commit/88c29e672a0fe2b256e8248ea9d086e4b9957587))
+* add OAuth2Helper implementation ([00c5bc1](https://github.com/canonical/identity-platform-admin-ui/commit/00c5bc1d20eb93e5b2486550fb9542dd10daec4d))
+* add pagination to clients, schemas and identity lists in ui. Add identity creation form WD-10253 ([5f55463](https://github.com/canonical/identity-platform-admin-ui/commit/5f554639a669404b5e468fd93c77af9e52cd946b))
+* add ResourcesService ([f5a2008](https://github.com/canonical/identity-platform-admin-ui/commit/f5a20086f204291dd3c4436f326535c460c8ee2e))
+* add SendUserCreationEmail method ([0cc1d3f](https://github.com/canonical/identity-platform-admin-ui/commit/0cc1d3f64997a8cdbda6f14fabe767c1914849b6))
+* add template loading + test + TEMPORARY mail template ([6c95a25](https://github.com/canonical/identity-platform-admin-ui/commit/6c95a259bf25ff3e21b2767f985c5c045d29dd67))
+* add the cli command for compensating user invitation email failure ([55f557e](https://github.com/canonical/identity-platform-admin-ui/commit/55f557e816ef1cb3f436f7b612d9511fd50e059d))
+* add the create-identity CLI ([464c697](https://github.com/canonical/identity-platform-admin-ui/commit/464c697f512f8b6d54fa5df3f3360b3b37485cef))
+* add URL param validation for groups handlers ([24c8d99](https://github.com/canonical/identity-platform-admin-ui/commit/24c8d99319e1782cd742451d9b09f6846bd6fa3e))
+* add user invite email template ([64743cf](https://github.com/canonical/identity-platform-admin-ui/commit/64743cf67a97ed90f6a6b7663a2eadfa3e350590))
+* add user session cookies ttl external config ([b4da23d](https://github.com/canonical/identity-platform-admin-ui/commit/b4da23da8513c3d5535eec54836aa91bae091d2b))
+* add validation implementation for `clients` ([549d985](https://github.com/canonical/identity-platform-admin-ui/commit/549d985ed5ded7f8b1522479208d1637bb5e6855))
+* add validation implementation for `groups` ([700cf04](https://github.com/canonical/identity-platform-admin-ui/commit/700cf0401d657a771e56511bd04f95cea93675e6))
+* add validation middlewareonly if payload validation is enabled + reorder middleware and endpoints registration ([32814e8](https://github.com/canonical/identity-platform-admin-ui/commit/32814e89103c5abfc8be4a144e4343f26ff85012))
+* add validation setup for `groups` endpoint ([06fb9f4](https://github.com/canonical/identity-platform-admin-ui/commit/06fb9f4c777b880b4be1fb646360e9cf6b805095))
+* add validation setup for `identities` endpoint ([b4178c9](https://github.com/canonical/identity-platform-admin-ui/commit/b4178c95c2771b2149fb92cc80d43431b6c7028b))
+* add validation setup for `schemas` endpoint ([8c5e173](https://github.com/canonical/identity-platform-admin-ui/commit/8c5e17319243cc44dbe3d353acb2df57819334ac))
+* adjust identity api to accept page token ([beb0d42](https://github.com/canonical/identity-platform-admin-ui/commit/beb0d429af14d494b1d5edbe8598460acf4c4685)), closes [#256](https://github.com/canonical/identity-platform-admin-ui/issues/256)
+* adjust pagination for schemas endpoints ([e2a2df3](https://github.com/canonical/identity-platform-admin-ui/commit/e2a2df3c57e02377dd159e022e6de34fc44e1780)), closes [#44](https://github.com/canonical/identity-platform-admin-ui/issues/44)
+* adopt new oauth2 integration ([912029c](https://github.com/canonical/identity-platform-admin-ui/commit/912029ce63a34e481315a4ff816d0e672b401dd8))
+* cookie + refresh token support for middleware ([cab3f84](https://github.com/canonical/identity-platform-admin-ui/commit/cab3f84e8e106e6335263a6af7aae9d2a9c40b19))
+* **create-group:** allow creator user to view group ([efcaeec](https://github.com/canonical/identity-platform-admin-ui/commit/efcaeecc079040b02f89a4b87a8e1fe48e709076))
+* **delete-group:** delete all relation for group to delete ([883b513](https://github.com/canonical/identity-platform-admin-ui/commit/883b513909d0deadf4e7027f4c5f7f1ef998b5c8))
+* **dependencies:** add coreos/go-oidc v3 dependency ([fe20b2f](https://github.com/canonical/identity-platform-admin-ui/commit/fe20b2fa74516ea968f99cf7f71e218d3fd3a832))
+* display login on 401 responses ([5031b32](https://github.com/canonical/identity-platform-admin-ui/commit/5031b323bea49141bc8c7237c526a9ae099777c1))
+* drop LOG_FILE support ([1618b13](https://github.com/canonical/identity-platform-admin-ui/commit/1618b135b7ee5081eacbd3aa68d51a6b45088547))
+* enable authorization by default ([6f61651](https://github.com/canonical/identity-platform-admin-ui/commit/6f616518b08b761002dfb6a229aa9a0b5098e713))
+* enhance ValidationRegistry with PayloadValidator and adjust in handlers + enhance Middleware + add func for ApiKey retrieval from endpoint ([313617a](https://github.com/canonical/identity-platform-admin-ui/commit/313617a7faaf8292df5b0a5cfc509f9e40188290))
+* enhanced ValidationError with specific field errors and common errors ([a21462c](https://github.com/canonical/identity-platform-admin-ui/commit/a21462c78249d83961ad19a167ceeb57e5366e1f))
+* expand cookie manager interface + implementation for tokens cookies + tests ([a026e24](https://github.com/canonical/identity-platform-admin-ui/commit/a026e24ddd518c895179f010a7e8ce1eaee63934))
+* expand on Principal attributes + improve PrincipalFromContext ([4104b3a](https://github.com/canonical/identity-platform-admin-ui/commit/4104b3a7f319700c17f58a08a29d1026b8aa93bb))
+* **groups:** add CanAssignRoles and CanAssignIdentities implementation ([b5e551a](https://github.com/canonical/identity-platform-admin-ui/commit/b5e551a6d726f1858b547941e48507cf786bba13))
+* **groups:** add granular CanAssign{Identities,Roles} checks in handlers ([d25b430](https://github.com/canonical/identity-platform-admin-ui/commit/d25b430363ddffac04e82ebda0f9ba702afe8452))
+* handle case principal is not found in authorizer middleware + switch to `CheckAdmin` method ([182e469](https://github.com/canonical/identity-platform-admin-ui/commit/182e469e3b727685ff5cef585e180a2708a043ca))
+* handle optional `next` parameter for FE use ([1f4ca15](https://github.com/canonical/identity-platform-admin-ui/commit/1f4ca1553c50637cdd6f81b9062fa32c9bff22d7))
+* **handler:** add state check + improve structure/implementation ([2c29251](https://github.com/canonical/identity-platform-admin-ui/commit/2c29251f1b2a307faf3c4321db8ad1fc0abe37aa))
+* identities service implementation ([b840cf4](https://github.com/canonical/identity-platform-admin-ui/commit/b840cf4c97aa2e6754825a90e4a2ca4747a7897b))
+* **idp:** add validation implementation ([71ff661](https://github.com/canonical/identity-platform-admin-ui/commit/71ff6612485dd73374e09508143d50f455a46270))
+* implement GroupService based on the rebac lib ([709906b](https://github.com/canonical/identity-platform-admin-ui/commit/709906b1bed8d2cb3c546849a1927db2c130e44c))
+* implement new Create{Group,Role} interface + adjust handlers ([0adce3c](https://github.com/canonical/identity-platform-admin-ui/commit/0adce3cd75227c7cfa1d479ca94b69ef8eea6b86))
+* implement RolesService for the rebac module ([8835e29](https://github.com/canonical/identity-platform-admin-ui/commit/8835e29d5a1206e9408d6fc406ee47e88c69663d))
+* include roles and groups from ReBAC Admin ([5d03914](https://github.com/canonical/identity-platform-admin-ui/commit/5d03914cd12732584d37f0d0e31c5668ce960c25))
+* introduce hierarchy for can_relations ([596b448](https://github.com/canonical/identity-platform-admin-ui/commit/596b448a3e8ccada33f9d6d1d50e0fd0259b3cd6))
+* introduce IdentityProviders v1 api ([7a2719d](https://github.com/canonical/identity-platform-admin-ui/commit/7a2719d00e6e7e44c28c7db84084452b05bd40bb))
+* introduce UserPrincipal and ServicePrincipal + move Principal structs and logic to ad hoc file + tests ([69dbeb9](https://github.com/canonical/identity-platform-admin-ui/commit/69dbeb9bd82fd722980da2405ccca640c5c1235d))
+* invoke setup validation on registered APIs ([de16a0b](https://github.com/canonical/identity-platform-admin-ui/commit/de16a0bc7829bf1a849c1f06b408408e0845e365))
+* let Create{Group,Role} return newly created object ([e1ba968](https://github.com/canonical/identity-platform-admin-ui/commit/e1ba96806f98fdf05d56104f44632f6bb935c274))
+* log in via OIDC ([9fbf310](https://github.com/canonical/identity-platform-admin-ui/commit/9fbf31012819137ea98271609082141dad6c468c))
+* log out with OIDC ([4b268aa](https://github.com/canonical/identity-platform-admin-ui/commit/4b268aac9ab337a982daa06dce0cab2e0fcbb9d2))
+* parse and expose link header from hydra ([7c2d3f6](https://github.com/canonical/identity-platform-admin-ui/commit/7c2d3f656f57e0594f890656df34f941fd0fce78))
+* return to URL that initiated login ([99da50a](https://github.com/canonical/identity-platform-admin-ui/commit/99da50a0803b16b9a0075f37879297bd0a931b72))
+* **roles:** add validation implementation ([6bf72e5](https://github.com/canonical/identity-platform-admin-ui/commit/6bf72e5d75d94daca1fdf028ed1a3f7744e67b4b))
+* **rules:** add validation implementation ([c42bd45](https://github.com/canonical/identity-platform-admin-ui/commit/c42bd45cf7af8b1fe46858c8480693bda8dc9145))
+* set tokens cookies in callback and redirect to UI url + adjust tests ([f6e8277](https://github.com/canonical/identity-platform-admin-ui/commit/f6e82777ca290bd80e22a397c4a08d6853c60f16))
+* switch to html/template for rendering context path dynamically for index.html ([81f8a9c](https://github.com/canonical/identity-platform-admin-ui/commit/81f8a9c559b541028c49b1fabf705f0b4c3cadcf))
+* uniform rules handlers to pageToken pagination ([7c70cc6](https://github.com/canonical/identity-platform-admin-ui/commit/7c70cc69c76a8cd1a9e4e17b4d9a6e21a86f63e8))
+* upgrade rebac-admin to 0.0.1-alpha.3 ([96aca77](https://github.com/canonical/identity-platform-admin-ui/commit/96aca771bfe328bc27e8e656bd471345a5c43b25))
+* wire up all the rebac handlers ([f23cc1f](https://github.com/canonical/identity-platform-admin-ui/commit/f23cc1f538262cea7dfe2bc8f642aefc7661b794))
+
+
+### Bug Fixes
+
+* add back URL Param validation from previous commit ([ebe07a5](https://github.com/canonical/identity-platform-admin-ui/commit/ebe07a5d9b2badcdeb4616a0ccd5d753374fedac))
+* add check for mock calls in DeleteRole ([e9e3d54](https://github.com/canonical/identity-platform-admin-ui/commit/e9e3d54e685cc7235a15de7a243654fc45454ab3))
+* add contextual tuples to openfga ([03d313d](https://github.com/canonical/identity-platform-admin-ui/commit/03d313dd5b2adf51cb9ef62af913a7fecd06f4af))
+* add extra check on list schemas test for navigation ([2afec86](https://github.com/canonical/identity-platform-admin-ui/commit/2afec86c79e20912490e6bbcf5e3218f961d5b29))
+* add filters to listPermissions store method ([84b531a](https://github.com/canonical/identity-platform-admin-ui/commit/84b531a8d73172e0157a400476cd65766f0f5d79))
+* add helper function for constructing assignee ([cfa1a08](https://github.com/canonical/identity-platform-admin-ui/commit/cfa1a08d175661507a6a3979b5461b96ed19f8d6))
+* add id validation to make sure it's never empty ([fc7d560](https://github.com/canonical/identity-platform-admin-ui/commit/fc7d5606988a05a668a3a51c7458a2b32a4a0042)), closes [#239](https://github.com/canonical/identity-platform-admin-ui/issues/239)
+* add json parsing error ([8713366](https://github.com/canonical/identity-platform-admin-ui/commit/87133662aaa4058fb81c818162914b73c03ecb7e))
+* add page tokens to the response ([5a13e4e](https://github.com/canonical/identity-platform-admin-ui/commit/5a13e4e1105fe085230ac85d1fea127ea9ba8f23))
+* add resource creation logic to authz ([c8e3588](https://github.com/canonical/identity-platform-admin-ui/commit/c8e3588fe84e38ed145913cbc370b574e1bd7933))
+* add security headers to UI handler ([ea3c6ba](https://github.com/canonical/identity-platform-admin-ui/commit/ea3c6baf1ae9f95848ac8f8414226f25c2079c95))
+* add todo comment to catch issue with the user-identities sync ([ed66418](https://github.com/canonical/identity-platform-admin-ui/commit/ed66418499058ff26605b07f8b196a3d3ba2ab6d))
+* add uri permissions converters for v1 ([9e59915](https://github.com/canonical/identity-platform-admin-ui/commit/9e5991526dfc125c3c8641aa6104659079ec612a))
+* address empty schema id but enforce passing of the field ([fa915f2](https://github.com/canonical/identity-platform-admin-ui/commit/fa915f2211fd9056ff7872e3026cb03217acd1af))
+* adjust logic for pagination ([e852914](https://github.com/canonical/identity-platform-admin-ui/commit/e852914114414ee0eb3b78c36ca8df8fad5ad49d))
+* adjust page offset for oathkeeper apis ([7c22e06](https://github.com/canonical/identity-platform-admin-ui/commit/7c22e065f12503625a78b2a4e33f19314aaa376c))
+* adopt disabledAuthnMiddleware to not break app when authentication disabled ([963f07a](https://github.com/canonical/identity-platform-admin-ui/commit/963f07a77e1a8a1e8addb8c23f841b8e3ed9a219))
+* allow UI port to be set ([3da1b25](https://github.com/canonical/identity-platform-admin-ui/commit/3da1b2598253d2086f992e4c131e8bf59a29174b))
+* always add tuples for global read and admins ([992f283](https://github.com/canonical/identity-platform-admin-ui/commit/992f283cb924465c1e837d09c33fae538dbfd7f7))
+* annotate responses with the full type ([1cd4b98](https://github.com/canonical/identity-platform-admin-ui/commit/1cd4b98efe2262958155a186b7ac59431875aaa8))
+* api base path ([d83e0ab](https://github.com/canonical/identity-platform-admin-ui/commit/d83e0ab69e97323dfac45bdacfbc8e958473d502))
+* avoid escaping when passing URL to template ([0702053](https://github.com/canonical/identity-platform-admin-ui/commit/0702053e869366ae634920111ed08f65eafb3717))
+* clear cookie functions ([3a1b2e4](https://github.com/canonical/identity-platform-admin-ui/commit/3a1b2e40c8afbf5f80bed50a010b319fc6a643c3))
+* **clients:** validation and improved tests ([129a8a8](https://github.com/canonical/identity-platform-admin-ui/commit/129a8a8b40ae33cf2f531fae721c17837f12cb7e))
+* create openfga store to enhance basic client and offload core application logic ([3f0465b](https://github.com/canonical/identity-platform-admin-ui/commit/3f0465bd42d5d40cbc4ef4aee13c933b9e25de2c))
+* delete role implementation ([4b71734](https://github.com/canonical/identity-platform-admin-ui/commit/4b717346d354c54c31242cedfa7461a049faf0d7))
+* disable validation due to missing implementation of api validators ([5c06b9b](https://github.com/canonical/identity-platform-admin-ui/commit/5c06b9b540a881fa21eb03ecd07fa810ee5a7693))
+* drop ctx param from NewV1Service creation ([972bef4](https://github.com/canonical/identity-platform-admin-ui/commit/972bef432dc98d0356694b7430641e8bd43ac156))
+* enforce id on idp creation, moving validation to validator object ([9633937](https://github.com/canonical/identity-platform-admin-ui/commit/963393755c2c403fb2aee7db7c49faeb3964549a)), closes [#391](https://github.com/canonical/identity-platform-admin-ui/issues/391)
+* enhance registerValidation log message with error ([ae95fa8](https://github.com/canonical/identity-platform-admin-ui/commit/ae95fa8264cc1df58e69f2f50124b79f0fd4a354))
+* fix authorizer init logic ([a8fb9c3](https://github.com/canonical/identity-platform-admin-ui/commit/a8fb9c34c5eecaca553474155e941958665e26f0))
+* fix the kratos admin url ([4846fad](https://github.com/canonical/identity-platform-admin-ui/commit/4846fad41c8e37e7ad7450a303564b70ab31845f))
+* fix wrong title displayed once logged in ([5ef6371](https://github.com/canonical/identity-platform-admin-ui/commit/5ef63710875c2644f40ee0abee80cd4a006c4232))
+* get 404 with not found role (with can view) - get 403 (without can_view) ([2a22054](https://github.com/canonical/identity-platform-admin-ui/commit/2a22054c2cc1c63128dc5a75f050e4bf5df6c8d1))
+* **groups:** validation and improved tests ([255733e](https://github.com/canonical/identity-platform-admin-ui/commit/255733e3d5499181c2ef9b92f9145ae7997541ce))
+* handleDetail to return 404 on missing group for authorized users + typo ([b1a1e02](https://github.com/canonical/identity-platform-admin-ui/commit/b1a1e0222a5ba2f1d2c3c26e4fe566c1877f4dcd))
+* **identities:** validation and improved tests ([b4fa762](https://github.com/canonical/identity-platform-admin-ui/commit/b4fa7629306681e25b16c9d7cadcfdcd96fdef02))
+* improve validation error messages ([c20ff4a](https://github.com/canonical/identity-platform-admin-ui/commit/c20ff4a730a74dbfaefe5ec3a059bb27d02fc2dd))
+* initialize idps configmap.Data field if empty ([fba4479](https://github.com/canonical/identity-platform-admin-ui/commit/fba4479e3446270ad72873f4f7c826314da83736)), closes [#392](https://github.com/canonical/identity-platform-admin-ui/issues/392)
+* listing not working for user that created a role ([b54d681](https://github.com/canonical/identity-platform-admin-ui/commit/b54d6811be1d6f041cad64fa15c0586eec530f35))
+* local dev env for OIDC provider discovery ([03f5499](https://github.com/canonical/identity-platform-admin-ui/commit/03f549962fb8ea128c595582ca02f280d03bb788))
+* offload idp types to constant ([d15ecf2](https://github.com/canonical/identity-platform-admin-ui/commit/d15ecf206f6b67307674cca99b5c3865b33cbdcc))
+* remove assignees tuples on DeleteGroup ([1107165](https://github.com/canonical/identity-platform-admin-ui/commit/1107165dc59998915a88b4e5ad7ec35db53161ee))
+* remove assignees tuples on DeleteRole ([5772334](https://github.com/canonical/identity-platform-admin-ui/commit/57723345d44f50e5faac89547779cafe5c644dab)), closes [#285](https://github.com/canonical/identity-platform-admin-ui/issues/285)
+* remove fetch mock definition ([2a1889e](https://github.com/canonical/identity-platform-admin-ui/commit/2a1889e161437cacd90d6fb76320dc4e84dcfaa1))
+* remove login component from ui ([51deb06](https://github.com/canonical/identity-platform-admin-ui/commit/51deb06c231155e39236eda4863b68ef67de648b))
+* remove page param ([585f713](https://github.com/canonical/identity-platform-admin-ui/commit/585f71374cc1b2cb4af6d21f05daa410f616d502))
+* remove page_token field in meta response ([3756f0d](https://github.com/canonical/identity-platform-admin-ui/commit/3756f0d7493afafe4649da22cce814fb7acf8952)), closes [#271](https://github.com/canonical/identity-platform-admin-ui/issues/271)
+* removing extra #member on assignIdentities service call ([bfde070](https://github.com/canonical/identity-platform-admin-ui/commit/bfde070133a505f5f38b89ec19c12e4378c63ca9)), closes [#283](https://github.com/canonical/identity-platform-admin-ui/issues/283)
+* removing extra #member on removeIdentities service call ([74ab0ff](https://github.com/canonical/identity-platform-admin-ui/commit/74ab0fff68c20196387a0a32c5226110ffcf6ed5))
+* rename admin user ([2f01a27](https://github.com/canonical/identity-platform-admin-ui/commit/2f01a27a40d47045aa38aebd6180b108b1cbec02))
+* rename Urn to URN ([603418d](https://github.com/canonical/identity-platform-admin-ui/commit/603418d507dddd9b8519fc439bba336f44707f66))
+* return empty slice when no idps found ([429591a](https://github.com/canonical/identity-platform-admin-ui/commit/429591a9ec014b283cdb866b0b36f84886f7b039)), closes [#388](https://github.com/canonical/identity-platform-admin-ui/issues/388)
+* **role:** error out when ID is passed for creation ([2a46a5e](https://github.com/canonical/identity-platform-admin-ui/commit/2a46a5ec7a04a3aafbe6a899167acfe8ea8ff00e))
+* **role:** use `Name` field for creation ([e63fdaa](https://github.com/canonical/identity-platform-admin-ui/commit/e63fdaa70fb58e8c3001a23cc2ecc9e140e9cb81))
+* **schemas:** validation and improved tests ([ab8652f](https://github.com/canonical/identity-platform-admin-ui/commit/ab8652f13c437cf64ca6978726b252059f4fb324))
+* serve the same file for all ui routes ([29ee190](https://github.com/canonical/identity-platform-admin-ui/commit/29ee190d9a8ee5620521745375c889f2d9ab4fea))
+* serve ui assets under relative path ([c3f21a9](https://github.com/canonical/identity-platform-admin-ui/commit/c3f21a9404bdf2f1ef04b3e01de9758626620d74))
+* serve UI files ([9007b77](https://github.com/canonical/identity-platform-admin-ui/commit/9007b77f9489f57c1a557870644affa622948db9))
+* serve UI from root path ([e5ecf42](https://github.com/canonical/identity-platform-admin-ui/commit/e5ecf42857ce26cf590ea9052a52133e4da750e5))
+* set cookie path to / ([9c95b0b](https://github.com/canonical/identity-platform-admin-ui/commit/9c95b0bcdd2dd1a63740c065702e66c8cbd5f6a9))
+* set necessary oauth2 scopes as default ([9c36e95](https://github.com/canonical/identity-platform-admin-ui/commit/9c36e950a137bf3203e3a4af998ac4fad2384be8))
+* set OtelHTTPClient in context correctly ([e514b37](https://github.com/canonical/identity-platform-admin-ui/commit/e514b3747ddcabcc182aa17cc91fe3c99cbf2649))
+* standardize on types.Response ([02cc8ce](https://github.com/canonical/identity-platform-admin-ui/commit/02cc8ceafe338bd75910bb307415af668d1d1761)), closes [#244](https://github.com/canonical/identity-platform-admin-ui/issues/244)
+* standardize page token in clients api ([7bdd3e7](https://github.com/canonical/identity-platform-admin-ui/commit/7bdd3e7b61bda2675f757861195af87d063e59db))
+* sync resource creation/delation with authz ([55d02df](https://github.com/canonical/identity-platform-admin-ui/commit/55d02df2dff9830f9e92db39c4d3fed1ad250aec))
+* temporary fix to allow time for new solution on the frontend ([6ee0ac3](https://github.com/canonical/identity-platform-admin-ui/commit/6ee0ac30bfe2babb2a49ead783e8407e8117dfbd))
+* typo in variable name ([4558fd0](https://github.com/canonical/identity-platform-admin-ui/commit/4558fd08646c109d87a0ac75f542812b7ac6adda))
+* ui redirection with context path ([61451f6](https://github.com/canonical/identity-platform-admin-ui/commit/61451f63700ac3c8b2888448122c70e001110556))
+* UI serving handlers ([b4070b1](https://github.com/canonical/identity-platform-admin-ui/commit/b4070b1c244fef40b03388e6df3d069dbcf9b801))
+* ui use react routers base path and add tests for base path calculation ([85da4c0](https://github.com/canonical/identity-platform-admin-ui/commit/85da4c0e9ae985671d562d30f277128f9f19108e))
+* ui uses relative base path. in case /ui/ is found in the current page url, all urls and api routes use the found prefix from the path. If /ui/ is not found, fall back to / as the base path. Fixes [#317](https://github.com/canonical/identity-platform-admin-ui/issues/317) Fixes IAM-911 Fixes WD-12306 ([709399c](https://github.com/canonical/identity-platform-admin-ui/commit/709399ceb80bc42e6847312b124df09ca518b61e))
+* unauthenticated handlers were called twice ([1d7ebb9](https://github.com/canonical/identity-platform-admin-ui/commit/1d7ebb9b8290639b156f2f09f85fe618c5b6bd12))
+* update email template to fix issues in email clients ([3f9726b](https://github.com/canonical/identity-platform-admin-ui/commit/3f9726baa071b99ebed5bd7cca2f0906f612d998))
+* update rock to go 1.23.2 to deal with CVE-2024-34156 ([db82abd](https://github.com/canonical/identity-platform-admin-ui/commit/db82abdfc165d311f4666eb1fddb9c47da6444ef)), closes [#449](https://github.com/canonical/identity-platform-admin-ui/issues/449)
+* update tracing signature ([d22fad9](https://github.com/canonical/identity-platform-admin-ui/commit/d22fad9414c214e7699ca585a277a39b43e6d345))
+* use BASE_URL to add trailing slash ([30b7b1b](https://github.com/canonical/identity-platform-admin-ui/commit/30b7b1b4792f528c34512683d0d3b182621c6916))
+* use contextPath to redirect to UI ([8a7540d](https://github.com/canonical/identity-platform-admin-ui/commit/8a7540d0775a9db3f19e5288da79db5690319a52))
+* use contextual tuples for admin role ([37efc1e](https://github.com/canonical/identity-platform-admin-ui/commit/37efc1e62ae157253382a8e9dfe5eef31d0fbfaf))
+* use contextual tuples to give admin access to all APIs ([0e27337](https://github.com/canonical/identity-platform-admin-ui/commit/0e2733726d83fa7a07de47f680eeadf8668a3b8e))
+* use correct method to invoke backend ([64f68a6](https://github.com/canonical/identity-platform-admin-ui/commit/64f68a64896d0966340f6338a6837f942d776bc5))
+* use idp ID if passed in ([023c8e3](https://github.com/canonical/identity-platform-admin-ui/commit/023c8e3a0642ec27c90c40eaa55eef02ce7660f4))
+* use worker pool in authorizer ([67bf82d](https://github.com/canonical/identity-platform-admin-ui/commit/67bf82d693317e425fea90cddc8dd6be18779d9a))
+
 ## [1.21.0](https://github.com/canonical/identity-platform-admin-ui/compare/v1.20.0...v1.21.0) (2024-10-18)
 
 
diff --git a/internal/version/const.go b/internal/version/const.go
index 904052fe1..4e35ac845 100644
--- a/internal/version/const.go
+++ b/internal/version/const.go
@@ -3,4 +3,4 @@
 
 package version
 
-const Version = "1.21.0" // x-release-please-version
+const Version = "1.22.0" // x-release-please-version
diff --git a/rockcraft.yaml b/rockcraft.yaml
index ffa92f41c..6b84c35d5 100644
--- a/rockcraft.yaml
+++ b/rockcraft.yaml
@@ -2,7 +2,7 @@ name: identity-platform-admin-ui
 
 base: bare
 build-base: ubuntu@22.04
-version: '1.21.0' # x-release-please-version
+version: '1.22.0' # x-release-please-version
 summary: Canonical Identity platform Admin UI
 description: |
   This is the Canonical Identity platform admin UI used for connecting