Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[16.22.0] - 2024-12-16

https://github.com/MAIF/otoroshi/milestone/107?closed=1 https://github.com/MAIF/otoroshi/compare/v16.21.0...v16.22.0 https://github.com/MAIF/otoroshi/releases/tag/v16.22.0

Added

add user allowed/denied list to auth. modules (#2031)
add version endpoint on the new admin api (#2039)
add infos endpoint on the new admin api (#2040)
add health endpoint on the new admin api (#2041)
add metrics endpoint on the new admin api (#2042)
add cluster members endpoint on the new admin api (#2043)
new plugin to provide OCSP Responder as a user endpoint (#2044)
new plugin to provide Authority Information Access as a user endpoint (#2045)
new plugin to provide Otoroshi JWKS as a user endpoint (#2046)
new plugin to provide Otoroshi Health informations as a user endpoint (#2047)
new plugin to provide Otoroshi Metrics as a user endpoint (#2048)
add env. variable for session sameSite attribute (#2054)
plugin to add very simple basic auth. without complex user management (#2055)

Changed

support a limited certificate set for the OCSP responder plugin (#2049)
support filter config for the otoroshi metrics endpoint plugin (#2050)
support a limited certificate set for the AIA plugin (#2051)

Fixed

handle request domain as case insensitive in router (#2029)
static assets plugin does not use the right host header (#2030)
apikeys table doesn't work anymore (#2032)
Routes exports as JwtVerifiers from the UI (#2033)
command + clic on routes doesn't work anymore (#2034)
Support pagination server and client side (#2035)
Admin API generates badly labeled AdminApiEvent (#2052)
Redirection if already logged in to a auth. modules creates a redirection loop (#2053)

Contributors

@mathieuancelin
@Zwiterrion

[16.21.0] - 2024-11-27

https://github.com/MAIF/otoroshi/milestone/105?closed=1 https://github.com/MAIF/otoroshi/compare/v16.20.0...v16.21.0 https://github.com/MAIF/otoroshi/releases/tag/v16.21.0

Added

Introduce a new Drafts API to manage the lifecycle of entities (#2005)
ability to restrict apikey as jwt usage based on audience (#2022)
new external consumer profile mode for the Otoroshi infos plugins (#2023)
plugin to easily serve external assets on a route (#2028)

Changed

Update coraza distrib. to use the latest CRS (#2021)

Fixed

Coraza events must include route details when available (#2020)
websocket client unnecessarily splits cookie header (#2024)
OPA support broken (#2025)
Throttling per IP counter not reset in entities table (#2026)

Contributors

@Zwiterrion
@mathieuancelin
@dmorvant-altima

[16.20.1] - 2024-10-31

https://github.com/MAIF/otoroshi/milestone/106?closed=1 https://github.com/MAIF/otoroshi/compare/v16.20.0...v16.20.1 https://github.com/MAIF/otoroshi/releases/tag/v16.20.1

Fixed

OIDCAuthToken plugin can fails to fetch user infos on M2M style calls (#2018)

Contributors

@mathieuancelin

[16.20.0] - 2024-10-31

https://github.com/MAIF/otoroshi/milestone/104?closed=1 https://github.com/MAIF/otoroshi/compare/v16.19.0...v16.20.0 https://github.com/MAIF/otoroshi/releases/tag/v16.20.0

Added

Use generic APIs on routes and apikeys tables. (#1935)
add a new kind of plugin to validate request as soon as possible in the proxy engine (#1987)
add an incoming request validator plugin that apply Coraza on incoming requests (#1988)
add an incoming request validator plugin that validates domain name against valid domain names list (#1989)
add an incoming request validator plugin that validates domain name against denied domain names list (#1990)
add a new "consumer" concept in EL to handle user or apikey at the same time (#1993)
store initial request in attrs (#1994)
add the ability for generic admin api to produce/consumer kind with group/kind (#2015)
plugin to enforce authentication of an OIDC auth. module based the access_token passed in a header (#2016)

Changed

Change "create" label in sidebar (#1992)
add a way to override change callback on the select widget (#1996)
Make generic api output pretty json format (#2011)
Make generic api support gzip output (#2012)
Make generic api capable of wrapping response in an envelope (#2013)

Fixed

apikey secret can't have a value containing : when using basic auth (#1985)
Build, Global and Maintenance Mode plugins should provide a way to overwrite the default error template and status (#2002)
Prevents codeInput to update the editor view when typing json (#2003)
Prevents the number input from changing an empty value to 0 while the user is typing (#2004)
auth. module logout sometimes does not work as expected when using multiple modules in the same browser session (#2008)
PrivateApps action sometimes does not work as expected when using multiple modules in the same browser session (#2009)

Documentation

Document projection operators (#1999)

Contributors

@Zwiterrion
@mathieuancelin
@ptitFicus

[16.19.0] - 2024-09-19

https://github.com/MAIF/otoroshi/milestone/103?closed=1 https://github.com/MAIF/otoroshi/compare/v16.18.7...v16.19.0 https://github.com/MAIF/otoroshi/releases/tag/v16.19.0

Added

customize headers size in/out (#1971)
add operators in projection utils to include/exclude wildcard names (#1972)
add custom fields in the info token directly at the root (#1973)
new plugin to remove headers with long value going to backend (#1974)
new plugin to remove headers with long value going back to client (#1975)
new plugin to limit headers with long value going to backend (#1976)
new plugin to limit headers with long value going back to client (#1977)
alert when proxy engine removes/limits headers (#1978)
proxy engine can globally limit headers size in and out (#1979)
add api for developers to facilitate alerts events sending (#1981)
add api for developers to facilitate audit events sending (#1982)
add api for developers to facilitate analytics events sending (#1983)

Changed

Saml Auth Module - Get all attributes in otoroshi-claim header (#1962)
Allow info token payload customization (#1966)
Add capabilities to the html patcher plugin (#1980)

Fixed

Otoroshi 16.18.4 - Unable to reset quotas consumption (#1967)
Analytics Issue with Empty Body and Content-Length Header Set to 0 (#1969)

Contributors

@Zwiterrion
@quentinproust
@ptitFicus
@sadmin91
@mathieuancelin

[16.18.7] - 2024-09-01

https://github.com/MAIF/otoroshi/milestone/102?closed=1 https://github.com/MAIF/otoroshi/compare/v16.18.6...v16.18.7 https://github.com/MAIF/otoroshi/releases/tag/v16.18.7

Added

documentation of the admin API leads to deprecated resources (#1954)
Support remote validation hooks after auth. module login (#1955)
new plugin that returns request content (#1960)
new plugin that return request body content (#1961)

Changed

Update Authentication Module SAML with Extra metadata (#1959)

Fixed

Fix release process to make maven central artifact publishing work again (#1956)
ApiKeyConstraints formatter failed when otoBearerAuth is undefined (#1957)
Fix the Otoroshi Info plugin form to select only one certId instead of an array. (#1958)

Contributors

@mathieuancelin
@Zwiterrion
@jva-altima

[16.18.6] - 2024-07-25

https://github.com/MAIF/otoroshi/milestone/101?closed=1 https://github.com/MAIF/otoroshi/compare/v16.18.5...v16.18.6 https://github.com/MAIF/otoroshi/releases/tag/v16.18.6

Fixed

kubernetes cacert decoding fails when not read from kubeconfig file (#1953)

Contributors

@mathieuancelin

[16.18.5] - 2024-07-25

https://github.com/MAIF/otoroshi/milestone/100?closed=1 https://github.com/MAIF/otoroshi/compare/v16.18.4...v16.18.5 https://github.com/MAIF/otoroshi/releases/tag/v16.18.5

Added

add endpoints to know the schema of entities from the admin apis (#1938)
polyfill.io mitigation plugin (#1939)
identity endpoint plugin (#1940)
consumer endpoint plugin (#1941)
polyfill.io detector plugin (#1942)
make the default route domain customizable (#1943)
Location header rewrite plugin (#1944)
alert when certifcates are almost expired (#1947)

Changed

enable vaults by default (#1937)

Contributors

@mathieuancelin

[16.18.4] - 2024-06-13

https://github.com/MAIF/otoroshi/milestone/99?closed=1 https://github.com/MAIF/otoroshi/compare/v16.18.3...v16.18.4 https://github.com/MAIF/otoroshi/releases/tag/v16.18.4

Changed

make throttling windows configurable (#1931)

Contributors

@mathieuancelin

[16.18.3] - 2024-06-13

https://github.com/MAIF/otoroshi/milestone/98?closed=1 https://github.com/MAIF/otoroshi/compare/v16.18.2...v16.18.3 https://github.com/MAIF/otoroshi/releases/tag/v16.18.3

Added

make an option to be able to use the redirect on login pattern (#1926)
Improve the frontend summary and the backend form in the designer. (#1927)

Changed

update documentation about updating rbac and crds (#1929)
detect missing entities on kubernetes and print helpful message (#1930)

Fixed

update kubernetes entities (#1928)

Contributors

@mathieuancelin
@Zwiterrion

[16.18.2] - 2024-06-07

https://github.com/MAIF/otoroshi/milestone/97?closed=1 https://github.com/MAIF/otoroshi/compare/v16.18.1...v16.18.2 https://github.com/MAIF/otoroshi/releases/tag/v16.18.2

Fixed

bad code cleanup generates bad login urls (#1925)

Contributors

@mathieuancelin

[16.18.1] - 2024-06-07

https://github.com/MAIF/otoroshi/milestone/96?closed=1 https://github.com/MAIF/otoroshi/compare/v16.18.0...v16.18.1 https://github.com/MAIF/otoroshi/releases/tag/v16.18.1

Added

OPA and http wasm plugin could have a specific UI (#1917)

Fixed

auth. module plugins shouldn't try to use redirect uris (#1922)
secure the direct usage of the private app login callback (#1923)
if an auth. module redirect uri has multiple query params, some can get lost through login redirections (#1924)

Documentation

Http wasm tutorial (#1918)

Contributors

@Zwiterrion
@mathieuancelin

[16.18.0] - 2024-05-31

https://github.com/MAIF/otoroshi/milestone/95?closed=1 https://github.com/MAIF/otoroshi/compare/v16.17.0...v16.18.0 https://github.com/MAIF/otoroshi/releases/tag/v16.18.0

Added

add infrastructure to support several http listeners per otoroshi instance (#1908)
bind routes only to specific http listeners (#1909)
make individual http listeners configurable from config. file or env. variables (#1910)
make individual http listeners dynamic (#1911)
Spec http-wasm (#1914)
Provide a plugin to block non HTTPS traffic (#1919)

Changed

Kubernetes integration : enhance findAndMerge methods to support one-way trust for CRD (#1907)
bump nimbus-jose-jwt version (#1915)
bump wasm4s version (#1916)

Fixed

Fix the misspelling of DataExporter (#1906)
auth. module login when already logged in should use current domain redirection (#1920)

Contributors

@Zwiterrion
@mathieuancelin

[16.17.0] - 2024-04-29

https://github.com/MAIF/otoroshi/milestone/94?closed=1 https://github.com/MAIF/otoroshi/compare/v16.16.1...v16.17.0 https://github.com/MAIF/otoroshi/releases/tag/v16.17.0

Added

Add plugins to implement Auth0 passwordless login flow (#1892)
support form-urlencoded payloads for write operations on generic admin apis (#1895)
support kubernetes armored payloads for read operations on generic admin apis (#1897)
JDK 22 support for docker images (#1898)

Changed

bump wasm4s version (#1893)
support kubernetes armored payloads for write operations on generic admin apis (#1896)
bump biscuit version (#1899)
bump netty version (#1902)
bump reactor netty version (#1903)

Fixed

zip backend plugin: stackoverflow when ttl expired (#1894)
http3 client send duplicated headers (#1900)
http3 client close connection pipe before end of body stream (#1901)
http3 server access log induce wrong http3 frame in the http3 decoder (#1904)
new netty version removes QuicConnectionEvent hence we're not able to get remote ip address (#1905)

Contributors

@mathieuancelin

[16.16.1] - 2024-04-03

https://github.com/MAIF/otoroshi/milestone/93?closed=1 https://github.com/MAIF/otoroshi/compare/v16.16.0...v16.16.1 https://github.com/MAIF/otoroshi/releases/tag/v16.16.1

Changed

bump acme4j version (#1885)
bump bouncycastle version (#1886)

Fixed

parsing error when reading letsEncrypt settings (#1884)
ACME challenge can be triggered before challenge authorization has been stored (#1887)

Contributors

@mathieuancelin

[16.16.0] - 2024-03-31

https://github.com/MAIF/otoroshi/milestone/89?closed=1 https://github.com/MAIF/otoroshi/compare/v16.15.4...v16.16.0 https://github.com/MAIF/otoroshi/releases/tag/v16.16.0

Changed

Default Jwt token : added values do not support expression language (#1867)
NgWebsocketBackendPlugin needs to be able to return an error instead on the WS flow (#1869)
upgrade to latest wasm4s version (#1871)

Fixed

login form is not responsive on mobile phone (#1827)
Default Jwt Token : The claim 'nbf' contained a non-numeric date value. (#1866)
Default Jwt token : the format of claim dates is in milliseconds (#1868)
JWT selector in Jwt plugins is too limited on types (#1870)

Contributors

@mathieuancelin
@Zwiterrion

[16.15.4] - 2024-03-21

https://github.com/MAIF/otoroshi/milestone/91?closed=1 https://github.com/MAIF/otoroshi/compare/v16.15.3...v16.15.4 https://github.com/MAIF/otoroshi/releases/tag/v16.15.4

Added

Add new kind of plugin for websocket backend calls (#1863)

Changed

Enhance jsonpath api for better performances and better DX (#1862)

Fixed

move scala-schema jar in lib as jitpack is not reliable enough (#1864)

Contributors

@mathieuancelin

[16.15.3] - 2024-03-15

https://github.com/MAIF/otoroshi/milestone/90?closed=1 https://github.com/MAIF/otoroshi/compare/v16.15.2...v16.15.3 https://github.com/MAIF/otoroshi/releases/tag/v16.15.3

Changed

Add state callback in the Table component (#1858)
better handling of Websockets errors when using the Websocket Wasm transform plugin (#1860)

Fixed

retrieving and updating wasmo settings from danger zone didn't work (#1857)

Contributors

@Zwiterrion
@mathieuancelin

[16.15.2] - 2024-03-15

https://github.com/MAIF/otoroshi/milestone/87?closed=1 https://github.com/MAIF/otoroshi/compare/v16.15.1...v16.15.2 https://github.com/MAIF/otoroshi/releases/tag/v16.15.2

Changed

Custom data exporters should support custom config. forms (#1854)
Supports NotContainedIn and ContainedIn expressions in EL (#1855)

Fixed

Missing template for Custom data exporter (#1853)
build does not publish the maif/otoroshi:xxxx image (#1856)

Contributors

@mathieuancelin
@Zwiterrion

[16.15.1] - 2024-02-29

https://github.com/MAIF/otoroshi/milestone/88?closed=1 https://github.com/MAIF/otoroshi/compare/v16.15.0...v16.15.1 https://github.com/MAIF/otoroshi/releases/tag/v16.15.1

Changed

Plugin can have a custom category (#1849)

Contributors

@mathieuancelin

[16.15.0] - 2024-02-29

https://github.com/MAIF/otoroshi/milestone/86?closed=1 https://github.com/MAIF/otoroshi/compare/v16.14.0...v16.15.0 https://github.com/MAIF/otoroshi/releases/tag/v16.15.0

Added

Bump to the latest wasm4s version to be able to use the Classpath source kind (#1842)
Coraza plugin could benefits from latest wasm4s enhancements (#1848)

Changed

prevent creating wasmo wasm plugin without source (#1838)

Fixed

routes created with admin api doesn't show plugins if they don't have nodeId/plugin_index (#1832)
Default Token Strategy doesn't include json content (#1835)
DataStoresBuilder does not extends NamedPlugin (#1839)
Custom data exporter list is not well displayed in the data exporter pages (#1840)
Some plugins API does not extends the right parent API (#1841)
the WasmPlugin entity does not provide template API (#1843)
There is no easy way to consume next gen apis from the backoffice (#1844)
wasm backendcall plugins must be able to delegate call if needed (#1845)
plugin without js form descriptor embedded in the backoffice cannot be displayed in the route designer (#1846)
wasmo configuration values are broken in documentation (#1847)

Documentation

wasmo configuration values are broken in documentation (#1847)

Contributors

@mathieuancelin
@Zwiterrion
@ptitFicus

[16.14.0] - 2024-02-07

https://github.com/MAIF/otoroshi/milestone/85?closed=1 https://github.com/MAIF/otoroshi/compare/v16.13.0...v16.14.0 https://github.com/MAIF/otoroshi/releases/tag/v16.14.0

Added

upgrade coraza (#1822)
pass identity tags and metadata to analytics events (#1829)

Fixed

wasm vm is released after each function call (#1821)
"Response chunk size read is different from the computed one logs" with coraza (#1824)
documentation style is broken on iOS (#1826)

Contributors

@mathieuancelin

[16.13.0] - 2024-01-22

https://github.com/MAIF/otoroshi/milestone/84?closed=1 https://github.com/MAIF/otoroshi/compare/v16.12.0...v16.13.0 https://github.com/MAIF/otoroshi/releases/tag/v16.13.0

Added

allow deep search in the findAll operation of the admin api (#1803)
read local state from the admin api when necessary (#1804)
plugin to block request based on an el expression (#1806)
plugin to allow request based on an el expression (#1807)
plugin to block request if an apikey does no have the specified metadata (#1808)
plugin to block request if an apikey does no have the specified tags (#1809)
plugin to validate the current request with an external service using http request (#1810)

Fixed

elastic search config. forms needs to be sanitized (#1801)
slf4j warning at startup (#1802)
backend call plugins do not sent content-length when not provided (#1805)
export buttons on entities are present two times in the UI (#1811)
in some cases, clientId is wrongly inferred as entity id (#1812)
extracting json or yaml on a route downloads an entity with kind JwtVerifier (#1813)
2.23.x of scala-schema is no longer available (#1814)
data exporter form does not work with exporters other than elasticsearch (#1815)
[data-exporter] elastic - cluster uris seems broken (#1817)

Contributors

@mathieuancelin
@Zwiterrion
@quentinovega

[16.12.0] - 2023-12-22

https://github.com/MAIF/otoroshi/milestone/76?closed=1 https://github.com/MAIF/otoroshi/compare/v16.11.2...v16.12.0 https://github.com/MAIF/otoroshi/releases/tag/v16.12.0

Added

Move build and release process on github actions (#788)
add a plugin to serve a zip file content as a backend (#1785)
add security checks to use env and config from the expression language (#1792)
plugin that let you choose how to configure throttling based on el expressions (#1793)
plugin that let you choose how to configure quotas based on el expressions (#1794)
introduce a new kind of safe single value apikey (#1795)
plugins blocklist to avoid security issues in some use cases (#1798)

Changed

redesign the route pages organisation (#1790)
redesign the topbar (#1791)

Fixed

leaving some route pages didn't clean the route sidebar (#1788)
upgrade old static jquery dist (#1789)
error in zip backend plugin (#1799)
JSON and YAML export buttons not working on route designer (#1800)

Contributors

@mathieuancelin
@Zwiterrion
@baudelotphilippe

[16.11.2] - 2023-12-05

https://github.com/MAIF/otoroshi/milestone/83?closed=1 https://github.com/MAIF/otoroshi/compare/v16.11.1...v16.11.2 https://github.com/MAIF/otoroshi/releases/tag/v16.11.2

Added

close milestone at the end of the release (#1783)
generate milestone in release process (#1784)

Contributors

@mathieuancelin

[16.11.1] - 2023-12-05

https://github.com/MAIF/otoroshi/milestone/82?closed=1 https://github.com/MAIF/otoroshi/compare/v16.11.0...v16.11.1 https://github.com/MAIF/otoroshi/releases/tag/v16.11.1

Fixed

Got an error NoClassDefFoundError io.otoroshi.wasm4s.impl.WasmVmPoolImpl when calling route with wasm plugin (#1781)
wasm not working with windows (#1782)

Contributors

@mathieuancelin
@Zwiterrion
@baudelotphilippe

[16.11.0] - 2023-11-29

https://github.com/MAIF/otoroshi/milestone/75?closed=1 https://github.com/MAIF/otoroshi/compare/v16.10.3...v16.11.0 https://github.com/MAIF/otoroshi/releases/tag/v16.11.0

Added

support pluggable datastores (#1722)
support pluggable data exporters (#1723)
add the ability to override existing admin api paths in extensions (#1738)
any otoroshi link could be a shortcut (#1761)

Changed

moving common-wasm project in its own repo (#1732)
rewrite wasm manager documentation (#1754)
bump wasm4s to 2.0.0 (#1779)

Fixed

Title not refresh (#1756)
Cancel not working (#1757)
Pb with link to User manual (abs/rel) (#1758)
The Routes only flag on danger zone has reverse operation (#1777)

Contributors

@mathieuancelin
@Zwiterrion
@baudelotphilippe

[16.10.3] - 2023-11-16

https://github.com/MAIF/otoroshi/milestone/81?closed=1 https://github.com/MAIF/otoroshi/compare/v16.10.2...v16.10.3 https://github.com/MAIF/otoroshi/releases/tag/v16.10.3

Fixed

common-wasm: caching process does not work (#1764)

Contributors

@mathieuancelin
@baudelotphilippe

[16.10.2] - 2023-11-14

https://github.com/MAIF/otoroshi/milestone/80?closed=1 https://github.com/MAIF/otoroshi/compare/v16.10.1...v16.10.2 https://github.com/MAIF/otoroshi/releases/tag/v16.10.2

Added

add new documentation search engine (#1762)

Fixed

select are sometimes blank even with a value (#1763)

Contributors

@mathieuancelin
@Zwiterrion

[16.10.1] - 2023-11-10

https://github.com/MAIF/otoroshi/milestone/79?closed=1 https://github.com/MAIF/otoroshi/compare/v16.10.0...v16.10.1 https://github.com/MAIF/otoroshi/releases/tag/v16.10.1

Fixed

selects are empty (#1759)
fix integration of wasmo (#1760)

Contributors

@mathieuancelin
@Zwiterrion
@baudelotphilippe

[16.10.0] - 2023-10-31

https://github.com/MAIF/otoroshi/milestone/73?closed=1 https://github.com/MAIF/otoroshi/compare/v16.9.2...v16.10.0 https://github.com/MAIF/otoroshi/releases/tag/v16.10.0

Added

support route designer tabs in admin extensions (#1693)
provide an extension to compute green score of your apis (#1704)
WasmManager : create a public API (#1725)
Github version of the Wasm Manager (#1728)
display version in wasm-manager (#1737)
add jdk21 temuring build back in release process (#1741)
add the ability to customize otoroshi sidebar per user (#1746)

Changed

Migration to aws-sdk v3 (#1743)
Migrate from wapm to wasmer (#1745)
moving wasm-manager in its own repository (#1740)

Fixed

analytics dashboard seems to be broken with elastic 8 (#1709)
WasmManager : endpoint /wasm/name/version does not work in 16.9.0 (#1724)
delete groups on greenscore generate errors (#1734)
investigate around local backoffice proxy that behaves weirdly (#1739)
missing algorithm on encrypted private key (#1747)
netty http client sends empty cookie header in some cases (#1751)
query param transformer is broken in some cases (#1752)"

Contributors

@mathieuancelin
@Zwiterrion
@baudelotphilippe

[16.9.2] - 2023-10-11

https://github.com/MAIF/otoroshi/milestone/78?closed=1 https://github.com/MAIF/otoroshi/compare/v16.9.1...v16.9.2 https://github.com/MAIF/otoroshi/releases/tag/v16.9.2

Added

support one time jobs (#670)

Fixed

missing entity kind in postgresql datastore implementation (#1735)

Contributors

@mathieuancelin
@Zwiterrion
@baudelotphilippe

[16.9.1] - 2023-10-09

https://github.com/MAIF/otoroshi/milestone/77?closed=1 https://github.com/MAIF/otoroshi/compare/v16.9.0...v16.9.1 https://github.com/MAIF/otoroshi/releases/tag/v16.9.1

Added

make optional Extism runtime for launching the wasm manager (#1727)
add button in plugin view to download WASM binaries (#1729)

Fixed

bad overhead out computing in case of circuit breaker opening (#1731)

Contributors

@mathieuancelin
@Zwiterrion

[16.9.0] - 2023-09-29

https://github.com/MAIF/otoroshi/milestone/74?closed=1 https://github.com/MAIF/otoroshi/compare/v16.8.1...v16.9.0 https://github.com/MAIF/otoroshi/releases/tag/v16.9.0

Added

support entity validators per admin api consumer (user or apikey) using opa rules (#1629)
support Infisical as secret vault (#1688)
add JDK21 docker image (#1705)
add support for custom vaults in admin extensions (#1708)
restore request size computation if not too sluggish (#1710)
ALPN customization per domain name (#1720)
remove protocol specific headers when backend target use lower protocol version (#1721)

Changed

split wasm runtime into a separate library (#1702)
rework on the cluster protocol (#1713)
react-select 1.2.1 -> 5.x (#1718)

Fixed

WasmManager : it should be launched with pm2 or similar tool (#1698)
Wasm manager docker image build warnings (#1699)
wasm manager project query param sometimes has bad value (#1703)
wasm manager is not built with a version (#1707)
Backend : Cannot reach HTTP/1.1 (no SSL) Backend ? (#1711)
admin rights sometimes fails when super admin (#1712)

Contributors

@mathieuancelin
@Zwiterrion
@ptitFicus
@baudelotphilippe

[16.8.1] - 2023-09-07

https://github.com/MAIF/otoroshi/milestone/72?closed=1 https://github.com/MAIF/otoroshi/compare/v16.8.0...v16.8.1 https://github.com/MAIF/otoroshi/releases/tag/v16.8.1

Changed

update coraza to 0.1.2 (#1697)

Fixed

force elastic version read from server even if applyTemplate not checked (#1700)
update default elastic version in code with 8.0.0 (#1701)

[16.8.0] - 2023-08-31

https://github.com/MAIF/otoroshi/milestone/71?closed=1 https://github.com/MAIF/otoroshi/compare/v16.7.0...v16.8.0 https://github.com/MAIF/otoroshi/releases/tag/v16.8.0

Added

allow different mutual auth. settings on play server and netty server (#1691)
add endpoints to get otoroshi version and cluster infos (#1696)

Fixed

tls session issue with first request using TLS 1.3 (#1695)
issue when consuming backoffice with the netty backend and tls (#1694)
issue in el add on 16.7.0 with this kind of EL '${now.plus_ms(300000).epoch_ms}' (#1689)

[16.7.0] - 2023-08-01

https://github.com/MAIF/otoroshi/milestone/70?closed=1 https://github.com/MAIF/otoroshi/compare/v16.6.0...v16.7.0 https://github.com/MAIF/otoroshi/releases/tag/v16.7.0

Added

X-Forwarded-Prefix not send with other X-Forwarded-* (#1626)
new kind of data exporter for opentelemetry metrics (#1637)
new kind of data exporter for opentelemetry logs (#1636)
integration with opentelemetry logs (#1635)
add new endpoint to get one simple admin at a time (#1681)
support opentelemetry for internal metrics (#1686)
support date manipulation in expression language (#1682)
Allow to access script by url (#1670)
SAMLv2 improvements (#1685)

Fixed

updating admin with api leads to an error because its expected to provide a backoffice user (#1684)
Auth module - SAML : Authentication successfull, but loop to login page (#1671)
bad SAML2 url composition in some cases (#1683)
circuit breaker help labels broken (#1687)

[16.6.0] - 2023-07-19

https://github.com/MAIF/otoroshi/milestone/67?closed=1 https://github.com/MAIF/otoroshi/compare/v16.5.2...v16.6.0 https://github.com/MAIF/otoroshi/releases/tag/v16.6.0

Added

add generic pooling support for mono-threaded WASM VMs (#1642)
add routine to automatically kill unused vm, vm with too much memory consumed, etc (#1649)
tweak extism to provide efficient vm instanciation with scoped host functions (#1621)
include $jq operator in Projection utils (#1656)
documentation fo jsonpath based projections (#1662)
documentation for matcher operators (#1631)
add the ability to test filtering and projection from data-exporter view (#1675)
use wasm-opt in the wasm manager to cleanup produced wasm (#1630)
doc: add circuit breaker topic (#1641)

Changed

remove lifetime from wasm vm config. (#1654)
support wasm vm pool on non wasm plugin configs. (#1652)
support coraza calls in wasm vm pools (#1643)
support OPA calls in wasm vm pools (#1646)
rewrite wasm plugins to use vm pools (#1645)
rewrite coraza plugin to avoid blocking (#1644)
rewrite wasm data exporters to use vm pools (#1647)
rewrite wasm auth plugins to use vm pools (#1653)

Fixed

make template update work in multi-thread env. (#1648)
handle requests burst on wasm plugin (#1650)
auth module - SAML : Using wizard, Single Logout URL is mandatory? (#1663)
removing all lines from a file make it impossible to edit (#1673)
saml request should be deflated before base64 encoding (#1678)

[16.5.2] - 2023-07-04

https://github.com/MAIF/otoroshi/milestone/69?closed=1 https://github.com/MAIF/otoroshi/compare/v16.5.1...v16.5.2 https://github.com/MAIF/otoroshi/releases/tag/v16.5.2

Fixed

ServiceDescriptor to route conversion does not copy IP whitelist (#1639)
fix bad value resolution in cluster config (#1640)

[16.5.1] - 2023-07-03

https://github.com/MAIF/otoroshi/milestone/68?closed=1 https://github.com/MAIF/otoroshi/compare/v16.5.0...v16.5.1 https://github.com/MAIF/otoroshi/releases/tag/v16.5.1

Fixed

Plugins that synchronously transform response are not merged correctly (#1632)
Chaos monkey body length related faults does not work propertly (#1634)

[16.5.0] - 2023-06-30

https://github.com/MAIF/otoroshi/milestone/66?closed=1 https://github.com/MAIF/otoroshi/compare/v16.4.0...v16.5.0 https://github.com/MAIF/otoroshi/releases/tag/v16.5.0

enhance gRPC support (#1299)
support entity validators per admin api consumer (user or apikey) using opa rules (#1629)
use wasm-gc in the wasm manager to cleanup produced wasm (#1630)
support plugins thats ships their own custom UI (#1300)
Externals vault - Support getting certificates (#1364)
support entity validators per admin api consumer (user or apikey) (#1617)
user rights check is broken on the admin api (#1618)
add more validation to avoid data override in the admin api (#1619)
upgrade netty dependencies (#1620)
update coraza version (#1622)
fix opa execution crash on second invocation (#1623)
play framework add default content-type on response with no content-type (#1624)
otoroshi does not support application/json mediatype with open charset (#1625)

[16.4.0] - 2023-05-25

https://github.com/MAIF/otoroshi/milestone/63?closed=1 https://github.com/MAIF/otoroshi/compare/v16.3.2...v16.4.0 https://github.com/MAIF/otoroshi/releases/tag/v16.4.0

Added

provide a Brotli compression plugin (#1289)
support OWASP Coraza as WASM go plugin (#1497)
support wasm data exporters (#1565)
support wasm auth. modules (#1598)
handle ctrl+s shortcut to save route (#1594)
enable anonymous reporting (#1595)
make authentication modules pluggable (#1285)

Fixed

add the ability to extract informations from apikeys as jwt tokens (#1584)
avoid creating linear memory instance when non OPA plugin (#1586)
discard invitation link expired (#1587)
config. validation happens before configuration merge (#1588)
better concurrency handling when fetching wasm sources (#1589)
better handling of wasm resources to enhance performances at scale (#1590)
route events view does not allow filtering (#1591)
prohibit creation of new User with empty informations (#1596)
Content-Length missing due to akka-http-client model (#1597)
bad conversion of service descriptor to route for info. token (#1600)
host functions around attributes does not work when lifetime is forever (#1604)
data exporter duplication (#1610)
regex routing is broken (#1611)
handle target from service name and port in kubernetes crds for a route (#1612)
add otoroshi.mesh domains on route in kubernetes crds (#1613)

[16.3.2] - 2023-04-26

https://github.com/MAIF/otoroshi/milestone/65?closed=1 https://github.com/MAIF/otoroshi/compare/v16.3.1...v16.3.2 https://github.com/MAIF/otoroshi/releases/tag/v16.3.2

Fixed

wasm plugin can be an OPA policy (#1579)
add query params in plugin http request json representation (#1580)
wasm request transformer is never called (#1581)
handle left case or request/response transformers when using wasm (#1582)

[16.3.1] - 2023-04-25

https://github.com/MAIF/otoroshi/milestone/64?closed=1 https://github.com/MAIF/otoroshi/compare/v16.3.0...v16.3.1 https://github.com/MAIF/otoroshi/releases/tag/v16.3.1

Fixed

rust plugin does not produce version in wasm manager (#1574)
opa wasm plugin should produce a nice error page when forbidden (#1575)
wasm-plugin template has a static id (#1576)
rust wasm plugin template has bad path to lib.rs file (#1577)
go wasm plugin template is not right by default (#1578)

[16.3.0] - 2023-04-25

https://github.com/MAIF/otoroshi/milestone/61?closed=1 https://github.com/MAIF/otoroshi/compare/v16.2.1...v16.3.0 https://github.com/MAIF/otoroshi/releases/tag/v16.3.0

Major features announcements in this release are

all legacy plugins have been migrated to the new plugin model
a new kind of plugin has been introduced to extend otoroshi api easily
new spring cloud config. vault backend
new http vault backend
new local vault backend where secrets are stored in the otoroshi global config.

Added

add the ability to run jobs/data-exporters only on specific network zones with specific configuration per zone (#1472)
add a new kind of vault that stores values in otoroshi (#1522)
support vaults in EL (#1523)
support spring cloud config as a vault backend (#1527)
support http as a vault backend (#1528)
support memberUid based ldap groups (#1560)
provide an admin. extension api to make core contributions easier#1510

Changed

enhance the health check possibilities (#1372)
remember sidebar state (#1524)

Fixed

cannot instantly add and modify an old plugin on a route (#1511)
fix synchronous plugins step merge (#1260)
some service-descriptor -> route conversions does not work (#1521)
wasmManager : give plugin name as package.json name (#1529)
JWT claim extraction may not work (#1564)
can't create a route with multi instance plugins more than one (#1566)
prevent chunking response when content length is equal to zero (#1571)
can't find my route's apikey in route/apikeys tab (#1570)
fix CRDs v1alpha1 served (#1512)
rewrite legacy plugins as ng plugins (#1148)
rewrite legacy HMAC validator as ng plugins (#1513)
rewrite legacy HMAC Caller plugin (#1514)
rewrite legacy Basic Auth Caller plugin (#1515)
rewrite legacy OAuth 1 Caller plugin (#1516)
rewrite legacy OAuth 2 Caller plugin (#1517)
rewrite legacy response cache plugin (#1518)
rewrite legacy OIDC plugins (#1520)
rewrite ClientCertChainHeader (#1531)
rewrite HasClientCertMatchingValidator (#1532)
rewrite HasClientCertMatchingApikeyValidator (#1533)
rewrite HasClientCertValidator (#1534)
rewrite CertificateAsApikey (#1535)
rewrite BiscuitExtractor (#1536)
rewrite BiscuitValidator (#1537)
rewrite HasClientCertMatchingHttpValidator (#1538)
rewrite HasAllowedUsersValidator (#1539)
rewrite UserAgentExtractor (#1540)
rewrite UserAgentInfoEndpoint (#1541)
rewrite UserAgentInfoHeader (#1542)
rewrite SecurityTxt (#1543)
rewrite ServiceQuotas (#1544)
rewrite MirroringPlugin (#1545)
rewrite Log4ShellFilter (#1546)
rewrite JwtUserExtractor (#1547)
rewrite IzanamiProxy (#1548)
rewrite IzanamiCanary (#1549)
rewrite HMACValidator (#1550)
rewrite MaxMindGeolocationInfoExtractor (#1551)
rewrite IpStackGeolocationInfoExtractor (#1552)
rewrite GeolocationInfoHeader (#1553)
rewrite GeolocationInfoEndpoint (#1554)
rewrite DiscoverySelfRegistrationSink (#1555)
rewrite DiscoverySelfRegistrationTransformer (#1556)
rewrite DiscoveryTargetsSelector (#1557)
rewrite DeferPlugin (#1558)
rewrite ClientCredentialService (#1559)

[16.2.1] - 2023-04-03

https://github.com/MAIF/otoroshi/milestone/62?closed=1 https://github.com/MAIF/otoroshi/compare/v16.2.0...v16.2.1 https://github.com/MAIF/otoroshi/releases/tag/v16.2.1

fix release java version
creation of wizard route failed (#1505)
clean array of string in a plugin form doesn't work (#1506)
bad header names in otoroshi challenge and info. plugins (#1507)

[16.2.0] - 2023-03-31

https://github.com/MAIF/otoroshi/milestone/60?closed=1 https://github.com/MAIF/otoroshi/compare/v16.1.0...v16.2.0 https://github.com/MAIF/otoroshi/releases/tag/v16.2.0

Major features announcements in this release are

new plugin kind to handle routing decisions
WASM host functions
new WASM plugin entities
New wasm plugin kind supported (request handlers, jobs, ...)
Lots of improvements on the WASM manager
New backup feature to improve resilience of otoroshi workers
JDK20 docker images

Added

add an anonymous telemetry agent to gather usage statistics (#1305)
research around open policy agent integration (#1315)
support file versioning through git integration (#1453)
support versioned binary releases (#1454)
support selecting a binary release from the wasm manager (#1455)
add otoroshi integration through host functions (#1456)
add graphql directive to handle wasm targets (#1457)
support github repo as sources of the wasm manager (#1460)
implement host functions and flags to enable special access for wasm plugins (#1464)
ensure wasm execution happens in a dedicated execution context outside of main one (#1478)
support S3 import during first leader sync if leader down (#1479)
support wasm jobs (#1480)
support wasm RequestHandlers (#1481)
support fetching wapm artifacts (#1482)
new kind of plugin that can take routing decisions (#1483)
refactor wasm related plugin stuff to have a common infrastructure (#1484)
let wasm vm run during the whole request lifecycle to speed up reuse (#1485)
add a new kind of entity to handle wasm scripts at one place (#1486)
support WASI allowed paths for wasm (#1488)
provide host function wrappers (#1491)
add documentations for wasm plugins (#1492)
support call to "native" WASM functions (#1494)
upload/donwload plugin sources (zip) (#1498)
Support JDK20 (#1500)
rewrite wasm plugins creation process in wasm manager (#1503)
support request attributes access from wasm (#1504)

Fixed

fix openapi generator to handle generic apis (#1487)
potential memory leak caused by big timeouts in kubernetes client (#1489)
fix otoroshi exchange protocol form (#1495)
bad cors translation to ng plugins (#1496)
Prevent multiples plugins with same name (#1499)
function name override does not seems to work (#1502)

[16.1.0] - 2023-02-28

https://github.com/MAIF/otoroshi/milestone/59?closed=1 https://github.com/MAIF/otoroshi/compare/v16.0.5...v16.1.0 https://github.com/MAIF/otoroshi/releases/tag/v16.1.0

Major features announcements in this release are

WASM plugin support in otoroshi
WASM manager to help you build WASM plugins
Tailscale integration

Added

tailscale cert job wants to get cert not handled by tailscale (#1451)
add documentation for tailscale documentation (#1462)
tailscale TLS integration (#1448)
tailscale machines integrations (#1449)
http cache plugin (#1423)
error response rewrite plugin (#1424)
missing request body plugin (#1425)
full state exporter for disaster recovery (#1426)
support .pfx files import (#1427)

Changed

elastic export improvments (#1466)
ability to use tls settings in the SOAPAction plugin (#1469)
upgrade to Play framework version 2.8.19 (#1447)
enhance vault mechanism (#1296)

Fixed

http3 request failure (#1468)
do not show save button on jwt verifiers page when path contains 'edit' (#1465)
proxy settings in route backend parsing fails (#1450)
plain text h2c calls failing (#1446)
netty native transport fails on linux (#1428)
fix missing resources in documentation (#1429)
fix errors in kubernetes documentation (#1430)
jobs cannot be added in danger zone plugins, only in scripts (#1431)
fix coredns integration on azure (#1432)
fix coredns integration on kubernetes (#1433)

[16.0.5] - 2023-01-26

https://github.com/MAIF/otoroshi/milestone/58?closed=1 https://github.com/MAIF/otoroshi/compare/v16.0.4...v16.0.5 https://github.com/MAIF/otoroshi/releases/tag/v16.0.5

resources loader - Certificate (#1420)
handle coredns integration on AKS (#1421)
bad query string forward (#1422)

[16.0.4] - 2023-01-23

https://github.com/MAIF/otoroshi/milestone/57?closed=1 https://github.com/MAIF/otoroshi/compare/v16.0.3...v16.0.4 https://github.com/MAIF/otoroshi/releases/tag/v16.0.4

bad url path when using tls (#1419)

[16.0.3] - 2023-01-23

https://github.com/MAIF/otoroshi/milestone/56?closed=1 https://github.com/MAIF/otoroshi/compare/v16.0.2...v16.0.3 https://github.com/MAIF/otoroshi/releases/tag/v16.0.3

certificate with bad from/to does not update until next expiration job (#1407)
create a prometheus exporter with custom metrics (#1409)
resources loader - Backend (#1411)
enabling exporters from list does not work anymore (#1412)
can create missing labels in metrics exporters (#1413)
sometimes cert resolver choose the wrong wildcard certificate (#1418)

[16.0.2] - 2023-01-13

https://github.com/MAIF/otoroshi/milestone/55?closed=1 https://github.com/MAIF/otoroshi/compare/v16.0.1...v16.0.2 https://github.com/MAIF/otoroshi/releases/tag/v16.0.2

weird behavior of the "authorized on" select in apikeys (#1399)
weird behavior of the "groups" select in routes / services (#1400)
handle errors correctly in the new engine (#1403)
handle oauth server communication errors (#1404)
missing ui descriptor for cp:otoroshi.next.plugins.OtoroshiHeadersIn (#1405)
avoid one more http call when backoffice call admin api (#1406)

[16.0.1] - 2023-01-11

https://github.com/MAIF/otoroshi/milestone/54?closed=1 https://github.com/MAIF/otoroshi/compare/v16.0.0...v16.0.1 https://github.com/MAIF/otoroshi/releases/tag/v16.0.1

Change the way requests from the admin backoffice are forwarded to the admin api (#1390)
Rollout the features dashboard with rights management (#1391)
fix bad request/response body forward through request transformer wrapper (#1392)
fix possible rights escalation on the teams/organizations apis (#1393)
weird behavior of the ObjectInput component that leads to reload loop (#1394)
Add a new plugin to mimic behavior of old service on otoroshi specific headers in (#1395)
/.well-known/otoroshi/me does not work with routes (#1401)
/.well-known/otoroshi/logout does not work on routes (#1402)

[16.0.0] - 2022-12-16

https://github.com/MAIF/otoroshi/milestone/53?closed=1 https://github.com/MAIF/otoroshi/compare/v16.0.0-rc3...v16.0.0 https://github.com/MAIF/otoroshi/releases/tag/v16.0.0

remove leveldb support (#466)
remove mongodb support (#467)
ensure everything is wired for the rollout of the new proxy engine (#1161)
introduce new versioning scheme (#1275)
improve externals vault secrets-ttl (#1339)
admin login does not work anymore after upgrading webauthn-server-core to 2.1.0 (#1340)
switch lettuce as default redis driver (#1363)
remove StoredNgTargets (#1365)
creating an apikey from a route fails miserably (#1366)
creating an auth. module from a route fails miserably (#1367)
otoroshi challenge plugin ui is not completely setup with version selectors (#1368)
add deprecation message on service descriptor pages (#1369)
add conversion button on service descriptor (#1370)
upgrade sbt-paradox (#1371)
healthcheck not working with routes (#1373)
sometimes job locks does not have ttl and are blocked (#1374)
remove the react-paginate dependency (#1375)
force advanced form view on jwt verifier creation (#1377)
documentation updates (#1379)
add missing entities in the sidebar (#1380)
add features page (#1381)

[16.0.0-rc.3] - 2022-12-15

https://github.com/MAIF/otoroshi/milestone/53?closed=1 https://github.com/MAIF/otoroshi/compare/v16.0.0-rc.2...v16.0.0-rc.3 https://github.com/MAIF/otoroshi/releases/tag/v16.0.0-rc.3

healthcheck not working with routes (#1373)
sometimes job locks does not have ttl and are blocked (#1374)
Remove the react-paginate dependency (#1375)

[16.0.0-rc.2] - 2022-12-14

https://github.com/MAIF/otoroshi/milestone/53?closed=1 https://github.com/MAIF/otoroshi/compare/v16.0.0-rc.1...v16.0.0-rc.2 https://github.com/MAIF/otoroshi/releases/tag/v16.0.0-rc.2

creating an apikey from a route fails miserably (#1366)
creating an auth. module from a route fails miserably (#1367)
otoroshi challenge plugin ui is not completely setup with version selectors (#1368)
add deprecation message on service descriptor pages (#1369)
add conversion button on service descriptor (#1370)
upgrade sbt-paradox (#1371)

[16.0.0-rc.1] - 2022-12-13

https://github.com/MAIF/otoroshi/milestone/53?closed=1 https://github.com/MAIF/otoroshi/compare/v1.5.20...v16.0.0-rc.1 https://github.com/MAIF/otoroshi/releases/tag/v16.0.0-rc.1

ensure everything is wired for the rollout of the new proxy engine (#1161)
Remove leveldb support (#466)
Remove mongodb support (#467)
introduce new versioning scheme (#1275)
Improve externals vault secrets-ttl (#1339)
admin login does not work anymore after upgrading webauthn-server-core to 2.1.0 (#1340)
switch lettuce as default redis driver (#1363)
remove StoredNgTargets (#1365)

[1.5.20] - 2022-11-30

https://github.com/MAIF/otoroshi/milestone/51?closed=1 https://github.com/MAIF/otoroshi/compare/v1.5.19...v1.5.20 https://github.com/MAIF/otoroshi/releases/tag/v1.5.20

missing clientSideSessionEnabled flag in auth. modules ui (#1331)
doc rewrite with routes (#1332)

[1.5.19] - 2022-11-24

https://github.com/MAIF/otoroshi/milestone/52?closed=1 https://github.com/MAIF/otoroshi/compare/v1.5.18...v1.5.19 https://github.com/MAIF/otoroshi/releases/tag/v1.5.19

finalize server side tables (#1329)

[1.5.18] - 2022-11-23

https://github.com/MAIF/otoroshi/milestone/50?closed=1 https://github.com/MAIF/otoroshi/compare/v1.5.17...v1.5.18 https://github.com/MAIF/otoroshi/releases/tag/v1.5.18

server side pagination for entities (#1256)
provide QUIC remote address when using http3 (#1317)
tls session extraction fails with HTTP/1.1 on netty backend (#1319)
uriCache causes memory leaks in some cases (#1321)
cleanup cache usage in codebase to avoid unbounded behaviors (#1322)
upgrade swagger-ui (#1324)
bad error message when using jwt verifiers (#1328)

[1.5.17] - 2022-11-14

https://github.com/MAIF/otoroshi/milestone/49?closed=1 https://github.com/MAIF/otoroshi/compare/v1.5.16...v1.5.17 https://github.com/MAIF/otoroshi/releases/tag/v1.5.17

make the auth module plugin on route behaves like service descriptor does (#1314)

[1.5.16] - 2022-11-10

https://github.com/MAIF/otoroshi/milestone/48?closed=1 https://github.com/MAIF/otoroshi/compare/v1.5.15...v1.5.16 https://github.com/MAIF/otoroshi/releases/tag/v1.5.16

button stay displayed inside Breadcrumb (#1264)
fix public/private patterns issue again when converting service descriptors (#1274)
fix bad default value for target protocol (#1306)
fix long running issues on apikey plugin conversion on routes from service descriptors (#1307)
otoroshi docker image not running on Apple Silicon (#1308)

[1.5.15] - 2022-10-28

https://github.com/MAIF/otoroshi/milestone/47?closed=1 https://github.com/MAIF/otoroshi/compare/v1.5.14...v1.5.15 https://github.com/MAIF/otoroshi/releases/tag/v1.5.15

support gRPC calls (#45)
add experimental HTTP/3 support for netty client backend (#1255)
bad public/private path translation for apikeycalls plugin (#1259)
fix qpack dynamic table compression in http3 server when called from a browser (#1265)
add an alt-svc plugin for h3 (#1266)
fix CHACHA20 incompatibility with JDK11 (#1267)
migrate HtmlPatcher plugin to new plugin API (#1268)
do not fail jwks gen. on cert error (#1269)
jvm dependencies upgrade (#1270)
support trailer headers passing with http3 (#1271)
reporting on subsystems initialization failures (#1272)

[1.5.14] - 2022-09-30

https://github.com/MAIF/otoroshi/milestone/46?closed=1 https://github.com/MAIF/otoroshi/compare/v1.5.13...v1.5.14 https://github.com/MAIF/otoroshi/releases/tag/v1.5.14

add experimental HTTP/3 support for netty server backend (#1254)
kafka exporter - SASL Authentication (#1211)
fix node communication behing load balancers for tunnels (#1234)
fix relay routing images in documentation (#1235)
generic docker image (#1236)
env variables for akka http settings (#1237)
new plugin to extract logged in user if any (#1241)
new plugin to ensure a logged in user exists (#1242)
fix ServiceDescriptor conversion when using detectApiKeySooner (#1243)
better TLS defaults (#1244)
add experimental server backend using netty and reactor-netty (#1245)
matching routes issue (#1247)
expose all keypairs in jwks endpoint (#1250)
add experimental client backend using netty and reactor-netty (#1253)

[1.5.13] - 2022-08-05

https://github.com/MAIF/otoroshi/milestone/45?closed=1 https://github.com/MAIF/otoroshi/compare/v1.5.12...v1.5.13 https://github.com/MAIF/otoroshi/releases/tag/v1.5.13

allow exposing remote services using tunnels (#1206)
Use eclipse-temurin as base image for docker builds (#1228)
bad config. read for OtoroshiChallenge (#1229)
first attempt at providing wizard for entity creation (#915)

[1.5.12] - 2022-07-08

https://github.com/MAIF/otoroshi/milestone/44?closed=1 https://github.com/MAIF/otoroshi/compare/v1.5.11...v1.5.12 https://github.com/MAIF/otoroshi/releases/tag/v1.5.12

introduce relay routing (#1182)
metrics viewer (#1193)
add JDK20 build (#1194)
upgrade webpack 4 to webpack 5 (#1194)

[1.5.11] - 2022-06-29

https://github.com/MAIF/otoroshi/milestone/42?closed=1 https://github.com/MAIF/otoroshi/compare/v1.5.11...v1.5.11 https://github.com/MAIF/otoroshi/releases/tag/v1.5.11

Static files/folder based backend (#1154)
S3 bucket based backend (#1155)
Enhance resilience for auth. module in cluster mode (#1156)
Teams DELETE through UI and API return 404 (#1158)
event exclusion on multiple predicate fails in dataexporters (#1160)
used quotas are not displayed on apikeys anymore (#1163)
add option for encrypted client side sessions on auth. modules (#1164)
cached items should not be be synced across nodes (#1165)
ApikeyCalls plugins decrements 2 calls per call in quotas (#1166)
Upgrade playframework to 2.8.16 (#1167)
exporter should be able to check 'otoroshi.instance' (#1177)
Resource Loader - kind Organization or Tenant (#1173)
Resource Loader - Global Config - YAML (#1176)
Resource Loader - JwtVerifier (#1178)
Resource Loader - Admin (#1179)

[1.5.10] - 2022-05-16

https://github.com/MAIF/otoroshi/milestone/41?closed=1 https://github.com/MAIF/otoroshi/compare/v1.5.9...v1.5.10 https://github.com/MAIF/otoroshi/releases/tag/v1.5.10

redis key conflict between healthcheck and StoredNgTarget (#1145)
GraphQL Caller plugin (#1146)
Avoid breaking legacy plugins (#1147)
Introduce a new kind of plugin to handle backend call (#1149)
do not fail ip address validation on X-Forwarded-For containing proxy address(es) (#1150)
Fix bad regex value for default data exporter (#1151)
implements some kind of traffic capture feature (#1152)
Fix bad export for prometheus metrics (#1153)

[1.5.9] - 2022-04-22

https://github.com/MAIF/otoroshi/milestone/40?closed=1 https://github.com/MAIF/otoroshi/compare/v1.5.8...v1.5.9 https://github.com/MAIF/otoroshi/releases/tag/v1.5.9

fix bad config. reference that prevents otoroshi to start (#1144)

[1.5.8] - 2022-04-21

https://github.com/MAIF/otoroshi/milestone/39?closed=1 https://github.com/MAIF/otoroshi/compare/v1.5.7...v1.5.8 https://github.com/MAIF/otoroshi/releases/tag/v1.5.8

THIS RELEASE IS BROKEN, PLEASE UPGRADE DIRECTLY TO 1.5.9

fix bad config. reference that prevents otoroshi to start (#1143)

[1.5.7] - 2022-04-21

https://github.com/MAIF/otoroshi/milestone/38?closed=1 https://github.com/MAIF/otoroshi/compare/v1.5.6...v1.5.7 https://github.com/MAIF/otoroshi/releases/tag/v1.5.7

THIS RELEASE IS BROKEN, PLEASE UPGRADE DIRECTLY TO 1.5.8

Admin login not working while running the app in the default mode (#1137)
fix ${otoroshi.domain} reference in config. file for cookie domain (#1138)
Apikey plugin does not catch user cookie when possible (#1139)
Implement token fetch for the Azure Key Vault (#1140)
Enhance JSONPath validators (#1141)
Think about the possibility to fetch vault secrets only on the leader nodes (#1142)

[1.5.6] - 2022-04-19

https://github.com/MAIF/otoroshi/milestone/36?closed=1 https://github.com/MAIF/otoroshi/compare/v1.5.5...v1.5.6 https://github.com/MAIF/otoroshi/releases/tag/v1.5.6

Upgrade biscuit-java lib to be able to use biscuit V2 (#1103)
resources loader broken for apikeys (#1132)
fix missing JDK17 build (#1133)
fix context validation plugin (#1134)
plugins missing in route designer (#1135)
change log level for JWKS verifier (#1136)

[1.5.5] - 2022-04-01

https://github.com/MAIF/otoroshi/milestone/35?closed=1 https://github.com/MAIF/otoroshi/compare/v1.5.4...v1.5.5 https://github.com/MAIF/otoroshi/releases/tag/v1.5.5

Add hostname validation flag for kafka exporter (#1102)

[1.5.4] - 2022-03-31

https://github.com/MAIF/otoroshi/milestone/34?closed=1 https://github.com/MAIF/otoroshi/compare/v1.5.3...v1.5.4 https://github.com/MAIF/otoroshi/releases/tag/v1.5.4

Add storage section in documentation (#993)
robots plugin (#1038)
ordering issue with spread projection (#1047)
fix gzip compression application (#1048)
introduce plugins to handle payload transformation json <-> xml (#1049)
introduce plugin to call soap actions (#1050)
user validation post successful login (#1052)
Support pluggable secret vaults throught EL and proxy state job (#1074)
Kafka data exporter does not send events by default (#1077)
Default templates for entities (#1078)
Support new entities in kubernetes (#1079)
New engine triggers weird behavior on resources when proxying simple website (#1084)
Add docker image with JDK19 (#1089)

[1.5.3] - 2022-02-14

https://github.com/MAIF/otoroshi/milestone/33?closed=1 https://github.com/MAIF/otoroshi/compare/v1.5.2...v1.5.3 https://github.com/MAIF/otoroshi/releases/tag/v1.5.3

bad certificate parsing with jdk18 (#975)
plugin Html Patcher - appendHead not working (#1015)
otoroshi 1.5.2 - API Key usage not show (#1024)
data exporter error log (#1026)
experiment around rust tls termination proxy (#1027)
bug in SSL cert selector (#1028)
allow negative projection in DataExporter (#1029)
bad ttl handling for the pg datastore (#1030)
introduce the next proxy engine as a plugin (#1036)

[1.5.2] - 2022-01-03

https://github.com/MAIF/otoroshi/milestone/32?closed=1 https://github.com/MAIF/otoroshi/compare/v1.5.1...v1.5.2 https://github.com/MAIF/otoroshi/releases/tag/v1.5.2

Fix issue with CRD definition (#994)
Upgrade log4j-api to avoid CVE-2021-44832 (#995)

[1.5.1] - 2021-12-21

https://github.com/MAIF/otoroshi/milestone/31?closed=1 https://github.com/MAIF/otoroshi/compare/v1.5.0...v1.5.1 https://github.com/MAIF/otoroshi/releases/tag/v1.5.1

Upgrade Log4J to 2.17.0 to mitigate CVE-2021-45105 (#992)

[1.5.0] - 2021-12-17

https://github.com/MAIF/otoroshi/milestone/6?closed=1 https://github.com/MAIF/otoroshi/compare/v1.4.22...v1.5.0 https://github.com/MAIF/otoroshi/releases/tag/v1.5.0

Add pluggable authentication modules for services instead of Auth0 only (#3)
More JWT support from Otoroshi to Backends (#4)
Include Kubernetes ingress controller as a Job (#91)
Mirror traffic (#118)
Scoping otoroshi sources (#130)
HealthCheck disable service strategy (#221)
Add support for Redis cluster (#252)
add bulk apis for main entities (#285)
Cleanup documentation (#295)
Support full OIDC / OAuth2 lifecycle with forwarded access token (#298)
Make the UI multi-tenant (#311)
Streaming input issue (#331)
Identity aware TCP forwarding over HTTPS (#332)
Add a geoloc target matcher (#338)
Use ndjson raw export for the import/export feature instead of partial json (#343)
Compatibility issues with Elastic 7.x (#344)
Document tcp tunneling (#356)
Update U2F documentation (#357)
add a button to test LDAP connection (#426)
Work on documentation (#445)
cleanup datastore code (#464)
Remove U2F support (#468)
Customize UI title from config. (#469)
Update all JS deps (#470)
Webauthn support multiple devices for the same user (#471)
Support for client_credentials flow backed by apikeys (#472)
Rewrite SSL/TLS part with new Dynamic SSLContext (#473)
accesslog plugins - the referred is not in the response (#477)
If script description is empty, then take the programmatic one (#478)
multi-tenant / multi-teams (#479)
plugins to populate user from jwt token and use it in otoroshi token (#481)
Move third-party apikeys OIDC to a plugin and deprecate the original feature (#482)
Add email address in let's encrypt settings (#484)
add kubernetes deployment descriptors examples (#485)
add Helm chart to deploy otoroshi (#486)
Add routing constraint based on meta keys (#536)
Have a unique name for groups (#539)
Handle initial data import with a merge option (#544)
Read initial secrets from files path (#545)
Do not support enabled in kubernetes entities (#546)
override httpOnly and secure in private apps session cookie from module config (#547)
Typo in security header key X-Frame-Options (#548)
Delete non existant (in otoroshi) secrets (#551)
Try to find entities by id then merge it (#552)
Avoid phishing during private-apps authentication (#553)
Revamping secrets and testing them at startup (#555)
Duplicate auth. module configs. (#557)
back <- after consulting a service don't refresh the menu (#558)
Error after suppressing a Service target (#559)
Multiple authorized entities on apikeys (#560)
Multiple groups on service descriptors (#561)
Generic data exporters (#588)
Assign worker to handle only selected tenant data (#590)
Support Kubernetes 1.18 IngressClass (#591)
Generic notifier support in exporters (#592)
Add liveness probe check in service descriptors health check (crd, ingress) (#593)
Add usage of custom configuration file in configfile (#633)
Handle samesite in cookies (#660)
Support sendgrid for alert emails (#665)
enhance coredns patching to handle config changes (#667)
Fix the version checker to understand alpha and beta (#669)
Better coredns config patch (#671)
Include jwt token fields in the elContext (#672)
Add a clever cloud generator in doc page (#673)
service registration fails when no endpoints (#674)
Increase default chunk size for akka http (#676)
kubernetes job improvments (#677)
disabling global script should stop current jobs (#678)
add button to export form data to YAML descriptor (#679)
fix kubernetes job watch (#680)
Experiment with a MutatingAdmissionWebhook to add a helper as a sidecar (#681)
Experiment with a ValidatingAdmissionWebhook to return useful errors when deploying otoroshi entities (#682)
Job for apikeys rotation (#683)
Rename 'mtlsSettings' to 'tlsSettings' in the UI (#684)
Add entries in the ApiKey secret to have Base64(client_id:client_secret) ready (#686)
Provide job context to various duration function in Job api (#687)
Use standard kubernetes service names in target transformation (#688)
Add tenants and teams to crds (#689)
Get kubernetes job interval from config. (#691)
fix watch for ingress and certs (#692)
add env in coredns customization (#693)
handle coredns customization removal (#694)
add various watch timeout in KubernetesConfig (#695)
deprecate HasAllowedApiKeyValidator plugin (#696)
Remove whitelist/blacklist from UI (#697)
Custom template button does not work anymore (#698)
Cleanup possible hostnames for the kubernetes internal cluster calls (#700)
try to reduce memory impact of initial classpath scanning (#701)
only organization admins can create others admins (#704)
when an organization admin creates other admins, enforce new admin organizations and teams (#705)
flag in kubernetes config to accepts apikeys only with daikoku tokens (#706)
jwt-verifiers not imported with kubernetes job (#707)
workflow job (#708)
weird npe on job list since 1.5.0-alpha.3 (#709)
fix bad jsonpath functions (#710)
include jsonpath operator in transformation utils (#711)
include simple el in transformation utils (#712)
Add an api to get the availability of a service over time (#713)
json editor adds '{}' at the end when pasting a json document (#714)
strip path removes too much stuff (#715)
io.otoroshi/id is not in annotations in documentation (#716)
Support private key passwords on certificates (#717)
Add a flag in service to avoid adding default hosts (#718)
watch does not handle new namespaces until restart (#719)
watch does not use namespace label filtering (#720)
Add support for kubedns and openshift dns operator (#721)
Add documentation about coredns stubdomain for openshift and kubedns (#722)
Make global client_credential flow available by default (#723)
Exporter to fill internal metrics (#725)
issue when generating subcas (#726)
Support EC certificates in the pki (#727)
Title not displayed after cancel a TCP service (#728)
Fix issuer DN in certificate to avoid certificate check in go (#729)
change apiversion in crds (#730)
fix the findCertMatching in DynamicKeyManager to chose the most client specific cert (#733)
Some "add" doesn't work for HTTP headers in Service descriptor (#734)
enhance pki (#735)
default jwks.json route (#736)
authenticated apis calls plugins (#737)
verify that everything that checks certificates DN uses comparison (#741)
create default team and orga at first startup (#742)
Team selector is broken in UI (#743)
Unleash the snow monkey seems broken (#744)
Add specific JVM flags in kubernetes manifests (#745)
Session management does not work in cluster mode (#752)
Login tokens does not work in cluster mode (#753)
Add an OCSP responder API to the pki (#754)
Chaining jwt verifier in non strict mode generate more events than needed (#755)
Experiment postgresql support (#757)
Improve PostgreSQL support (#758)
Add JWT EC token sign/valid from keypair (#759)
On status page, when ES instance isn't setup, an undefined sort error occured (#765)
add something to the target UI components to avoid passing a "path" (#766)
When adding a target, we can't do show more without saving first (#767)
strip path seems to be broken (#768)
handle keypair renew in jwt verifier (#769)
Plugin to support canary stuff from izanami AB testing campaign (#770)
Add informations about OCSP and Authority informations access in cert extensions (#782)
Biscuit basic support (#783)
Add hash and line count in response header when exporting cluster state (#785)
Limit classpath scanning to the bare minimum (#786)
Introduce generic plugins (#787)
Publish otoroshi_lib on maven central (#789)
Use exposed ports instead of regular ports (#790)
Try to parse datetime as string in json readers (#791)
Add alerts when kubernetes jobs fails crd parsing (#792)
fix documentation about kubernetes webhooks (#793)
openapi descriptor generation (#795)
Provide plugins to perform service discovery (#797)
Enhance de LDAP auth module (#799)
remove log on server (service/global) options (#806)
Support mTLS for PG connection (#810)
Missing kid when signing with RSAKPAlgoSettings and ESKPAlgoSettings (#832)
Add support for S3 persistence for the in-memory datastore (#834)
Local authentication doesn't works (#836)
add google floc specific headers in ui (#837)
fix docker build (#838)
add auto cleanup in the cache plugin (#839)
Missing kid in default token (#841)
Default rights to admins (#846)
Fix admin creation from super admin (#848)
fix the target component when pasting URL with trailing slash (#849)
check if custom error templates works in worker mode (#850)
add metadata tags check in ApikeyAuthModule (#851)
remove validation from crds definitions (#852)
missing namespace in subject from clusterrolebinding (#853)
version in crds becomes versions (#854)
CRDs manifest evolution for kubernetes 1.22 (#855)
button to hide/toggle plugin configuration (#856)
additionnal host added indefinitely (#857)
kubernetes watch fails on otoroshi crds (#858)
Hashed Password visible when infos token is enabled on service (#859)
Rename SAML to SAML v2 in auth module list (#861)
Admin api seems to be in default group at first startup (#862)
check if multi purpose plugins works as they should be (#863)
display instance name in window title (#864)
do not hardcode otoroshi.mesh, use config (#865)
add a flag to nuke openshift coredns operator customization that uses otoroshi.mesh (#866)
Add form description for the kubernetes jobs config (#870)
expose new plugins settings (#871)
Add migration button for old plugins in services (#872)
Add migration button for old plugins in danger zone (#873)
add prefix in plugins excluded path to apply only on one specific plugin (#874)
Plugin documentation extractor (#875)
Dynamic root domains (#879)
Seeking configuration for Read timeout to XXX after 120000 ms (#880)
configure input MTLS in the danger zone (#881)
static response plugin (#882)
circuit breaker cache too aggressive (#883)
add tags and meta on targets (#884)
Select trusted CAs for server mtls from global config (#886)
Add env. variables to enable server MTLS in documentation (#887)
when using circuit breaker with akka client, need to discardBytes (#888)
Unable to change api key status from all api keys view (#889)
Return http error when ES statistics cannot be returned (#890)
When I clicked on the stats button of an api key (from all Api keys view), I got an undefined analytics view (#891)
Add options in pki api to avoid certificate save (#893)
investigate about kube secret changing even if apikey didn't change (#894)
JDK17 breaks TLS ... (#896)
client certificate lookup strategy is broken (#899)
use akka-http cached host level client behind a feature flag (#901)
try to put trustXForwarded in danger zone (#906)
error while parsing certificate with bag attributes (#907)
Do not display type in elastic config if version greater than 7 (#909)
Enable index per day pattern in elastic exporter or not (#910)
Add a "test connection" buttin in elastic config (#911)
dark/light css theme for admin ui (#913)
Error when displaying elasticsearch config (#918)
Service Group list view - No filter for service associated with Service Group (#920)
Fix bad apikey parsing (#921)
bad playframework behavior with JDK17/JDK18 (#922)
Add CRDs loader in UI to create resources from yaml/json file (#929)
OAuth1 caller plugin (#930)
HMAC caller plugin (#931)
HMAC access validator plugin (#932)
ES data exporter fail to export events with to field (#940)
Add quotas exceeded alerts (#941)
fix target ui (#943)
request sink plugins should not be visible in service plugins select box (#945)
Support Authorization code + PKCE flow in OAuth2/OIDC auth. module (#947)
Handle OAuth2 service redirection using cookies only (#951)
Errors while installing with helm to Minikube (#956)
Avoid importing empty chain certificates in kubernetes plugin (#969)
Fix TLS engine weird behavior (#974)
fix log4j dependency (CVE-2021-44228) (#976)
fix http2 TLS issue (#977)
JQ plugin (#984)
fix log4j dependency - CVE-2021-45046 (#985)
Move manual (#986)
New dev mode (#987)
PEM bundle import endpoint (#988)
Add a log4shell mitigation plugin (#989)

[1.5.0-rc.4] - 2021-12-17

https://github.com/MAIF/otoroshi/issues?q=is%3Aissue+label%3A1.5.0-rc.4+is%3Aclosed https://github.com/MAIF/otoroshi/compare/v1.5.0-rc.3...v1.5.0-rc.4 https://github.com/MAIF/otoroshi/releases/tag/v1.5.0-rc.4

Add a log4shell mitigation plugin (#989)
fix typos in documentation
add helm package publication in the release process

[1.5.0-rc.3] - 2021-12-15

https://github.com/MAIF/otoroshi/issues?q=is%3Aissue+label%3A1.5.0-rc.3+is%3Aclosed https://github.com/MAIF/otoroshi/compare/v1.5.0-rc.2...v1.5.0-rc.3 https://github.com/MAIF/otoroshi/releases/tag/v1.5.0-rc.3

JQ plugin (#984)
fix log4j dependency - CVE-2021-45046 (#985)
Move manual (#986)
New dev mode (#987)
PEM bundle import endpoint (#988)

[1.5.0-rc.2] - 2021-12-13

https://github.com/MAIF/otoroshi/issues?q=is%3Aissue+label%3A1.5.0-rc.2+is%3Aclosed https://github.com/MAIF/otoroshi/compare/v1.5.0-rc.1...v1.5.0-rc.2 https://github.com/MAIF/otoroshi/releases/tag/v1.5.0-rc.2

fix log4j dependency (#976)
fix http2 TLS issue (#977)

[1.5.0-rc.1] - 2021-12-10

https://github.com/MAIF/otoroshi/issues?q=is%3Aissue+label%3A1.5.0-rc.1+is%3Aclosed https://github.com/MAIF/otoroshi/compare/v1.5.0-beta.8...v1.5.0-rc.1 https://github.com/MAIF/otoroshi/releases/tag/v1.5.0-rc.1

Work on documentation (#445)
bad playframework behavior with JDK17/JDK18 (#922)
Avoid importing empty chain certificates in kubernetes plugin (#969)
Fix TLS engine weird behavior (#974)

[1.5.0-beta.8] - 2021-11-08

https://github.com/MAIF/otoroshi/issues?q=is%3Aissue+label%3A1.5.0-beta.8+is%3Aclosed https://github.com/MAIF/otoroshi/compare/v1.5.0-beta.7...v1.5.0-beta.8 https://github.com/MAIF/otoroshi/releases/tag/v1.5.0-beta.8

Add CRDs loader in UI to create resources from yaml/json file (#929)
OAuth1 caller plugin (#930)
HMAC caller plugin (#931)
HMAC access validator plugin (#932)
ES data exporter fail to export events with to field (#940)
Add quotas exceeded alerts (#941)
fix target ui (#943)
request sink plugins should not be visible in service plugins select box (#945)
Support Authorization code + PKCE flow in OAuth2/OIDC auth. module (#947)
Handle OAuth2 service redirection using cookies only (#951)
Errors while installing with helm to Minikube (#956)

[1.5.0-beta.7] - 2021-09-16

https://github.com/MAIF/otoroshi/issues?q=is%3Aissue+label%3A1.5.0-beta.7+is%3Aclosed https://github.com/MAIF/otoroshi/compare/v1.5.0-beta.6...v1.5.0-beta.7 https://github.com/MAIF/otoroshi/releases/tag/v1.5.0-beta.7

Service Group list view - No filter for service associated with Service Group (#920)
Fix bad apikey parsing (#921)

[1.5.0-beta.6] - 2021-09-13

https://github.com/MAIF/otoroshi/issues?q=is%3Aissue+label%3A1.5.0-beta.6+is%3Aclosed https://github.com/MAIF/otoroshi/compare/v1.5.0-beta.5...v1.5.0-beta.6 https://github.com/MAIF/otoroshi/releases/tag/v1.5.0-beta.6

Error when displaying elasticsearch config (#918)

[1.5.0-beta.5] - 2021-09-13

https://github.com/MAIF/otoroshi/issues?q=is%3Aissue+label%3A1.5.0-beta.5+is%3Aclosed https://github.com/MAIF/otoroshi/compare/v1.5.0-beta.4...v1.5.0-beta.5 https://github.com/MAIF/otoroshi/releases/tag/v1.5.0-beta.5

Do not display type in elastic config if version greater than 7 (#909)
Enable index per day pattern in elastic exporter or not (#910)
Add a "test connection" button in elastic config (#911)

[1.5.0-beta.4] - 2021-08-30

https://github.com/MAIF/otoroshi/issues?q=is%3Aissue+label%3A1.5.0-beta.4+is%3Aclosed https://github.com/MAIF/otoroshi/compare/v1.5.0-beta.3...v1.5.0-beta.4 https://github.com/MAIF/otoroshi/releases/tag/v1.5.0-beta.4

try to put trustXForwarded in danger zone (#906)
error while parsing certificate with bag attributes (#907)

[1.5.0-beta.3] - 2021-08-06

https://github.com/MAIF/otoroshi/issues?q=is%3Aissue+label%3A1.5.0-beta.3+is%3Aclosed https://github.com/MAIF/otoroshi/compare/v1.5.0-beta.2...v1.5.0-beta.3 https://github.com/MAIF/otoroshi/releases/tag/v1.5.0-beta.3

Seeking configuration for Read timeout to XXX after 120000 ms (#880)
use akka-http cached host level client behind a feature flag (#901)
slow down worker retries to avoid flooding leader api #900

[1.5.0-beta.2] - 2021-08-05

https://github.com/MAIF/otoroshi/issues?q=is%3Aissue+label%3A1.5.0-beta.2+is%3Aclosed https://github.com/MAIF/otoroshi/compare/v1.5.0-beta.1...v1.5.0-beta.2 https://github.com/MAIF/otoroshi/releases/tag/v1.5.0-beta.2

client certificate lookup strategy is broken (#899)

[1.5.0-beta.1] - 2021-07-30

https://github.com/MAIF/otoroshi/issues?q=is%3Aissue+label%3A1.5.0-beta.1+is%3Aclosed https://github.com/MAIF/otoroshi/compare/v1.5.0-alpha.20...v1.5.0-beta.1 https://github.com/MAIF/otoroshi/releases/tag/v1.5.0-beta.1

Make SameSite cookie flags works with both http clients

[1.5.0-alpha.20] - 2021-07-29

https://github.com/MAIF/otoroshi/issues?q=is%3Aissue+label%3A1.5.0-alpha.20+is%3Aclosed https://github.com/MAIF/otoroshi/compare/v1.5.0-alpha.19...v1.5.0-alpha.20 https://github.com/MAIF/otoroshi/releases/tag/v1.5.0-alpha.20

Seeking configuration for Read timeout to XXX after 120000 ms (#880)
Select trusted CAs for server mtls from global config (#886)
Add env. variables to enable server MTLS in documentation (#887)
when using circuit breaker with akka client, need to discardBytes (#888)
Unable to change api key status from all api keys view (#889)
Return http error when ES statistics cannot be returned (#890)
When I clicked on the stats button of an api key (from all Api keys view), I got an undefined analytics view (#891)
Add options in pki api to avoid certificate save (#893)
investigate about kube secret changing even if apikey didn't change (#894)

[1.5.0-alpha.19] - 2021-06-30

https://github.com/MAIF/otoroshi/issues?q=is%3Aissue+label%3A1.5.0-alpha.19+is%3Aclosed https://github.com/MAIF/otoroshi/compare/v1.5.0-alpha.18...v1.5.0-alpha.19 https://github.com/MAIF/otoroshi/releases/tag/v1.5.0-alpha.19

dynamic root domains (#879)
configure input MTLS in the danger zone (#881)
static response plugin (#882)
circuit breaker cache too aggressive (#883)
add tags and meta on targets (#884)

[1.5.0-alpha.18] - 2021-06-10

https://github.com/MAIF/otoroshi/issues?q=is%3Aissue+label%3A1.5.0-alpha.18+is%3Aclosed https://github.com/MAIF/otoroshi/compare/v1.5.0-alpha.17...v1.5.0-alpha.18 https://github.com/MAIF/otoroshi/releases/tag/v1.5.0-alpha.18

Add migration button for old plugins in services (#872)
Add migration button for old plugins in danger zone (#873)
add prefix in plugins excluded path to apply only on one specific plugin (#874)
Plugin documentation extractor (#875)

[1.5.0-alpha.17] - 2021-06-09

https://github.com/MAIF/otoroshi/issues?q=is%3Aissue+label%3A1.5.0-alpha.17+is%3Aclosed https://github.com/MAIF/otoroshi/compare/v1.5.0-alpha.16...v1.5.0-alpha.17 https://github.com/MAIF/otoroshi/releases/tag/v1.5.0-alpha.17

expose new plugins settings (#871)

[1.5.0-alpha.16] - 2021-06-09

https://github.com/MAIF/otoroshi/issues?q=is%3Aissue+label%3A1.5.0-alpha.16+is%3Aclosed https://github.com/MAIF/otoroshi/compare/v1.5.0-alpha.15...v1.5.0-alpha.16 https://github.com/MAIF/otoroshi/releases/tag/v1.5.0-alpha.16

Add form description for the kubernetes jobs config (#870)

[1.5.0-alpha.15] - 2021-06-09

https://github.com/MAIF/otoroshi/issues?q=is%3Aissue+label%3A1.5.0-alpha.15+is%3Aclosed https://github.com/MAIF/otoroshi/compare/v1.5.0-alpha.14...v1.5.0-alpha.15 https://github.com/MAIF/otoroshi/releases/tag/v1.5.0-alpha.15

Default rights to admins (#846)
Fix admin creation from super admin (#848)
fix the target component when pasting URL with trailing slash (#849)
check if custom error templates works in worker mode (#850)
add metadata tags check in ApikeyAuthModule (#851)
remove validation from crds definitions (#852)
missing namespace in subject from clusterrolebinding (#853)
version in crds becomes versions (#854)
button to hide/toggle plugin configuration (#856)
additionnal host added indefinitely (#857)
kubernetes watch fails on otoroshi crds (#858)
Hashed Password visible when infos token is enabled on service (#859)
Rename SAML to SAML v2 in auth module list (#861)
Admin api seems to be in default group at first startup (#862)
check if multi purpose plugins works as they should be (#863)
display instance name in window title (#864)
do not hardcode otoroshi.mesh, use config (#865)
add a flag to nuke openshift coredns operator customization that uses otoroshi.mesh (#866)

[1.5.0-alpha.14] - 2021-05-25

https://github.com/MAIF/otoroshi/issues?q=is%3Aissue+label%3A1.5.0-alpha.14+is%3Aclosed https://github.com/MAIF/otoroshi/compare/v1.5.0-alpha.13...v1.5.0-alpha.14 https://github.com/MAIF/otoroshi/releases/tag/v1.5.0-alpha.14

Fix bad js function reference

[1.5.0-alpha.13] - 2021-05-21

https://github.com/MAIF/otoroshi/issues?q=is%3Aissue+label%3A1.5.0-alpha.13+is%3Aclosed https://github.com/MAIF/otoroshi/compare/v1.5.0-alpha.12...v1.5.0-alpha.13 https://github.com/MAIF/otoroshi/releases/tag/v1.5.0-alpha.13

Missing kid in default token (#841)

[1.5.0-alpha.12] - 2021-05-19

https://github.com/MAIF/otoroshi/issues?q=is%3Aissue+label%3A1.5.0-alpha.12+is%3Aclosed https://github.com/MAIF/otoroshi/compare/v1.5.0-alpha.11...v1.5.0-alpha.12 https://github.com/MAIF/otoroshi/releases/tag/v1.5.0-alpha.12

Publish otoroshi_lib on maven central (#789)

[1.5.0-alpha.11] - 2021-05-19

https://github.com/MAIF/otoroshi/issues?q=is%3Aissue+label%3A1.5.0-alpha.11+is%3Aclosed https://github.com/MAIF/otoroshi/compare/v1.5.0-alpha.10...v1.5.0-alpha.11 https://github.com/MAIF/otoroshi/releases/tag/v1.5.0-alpha.11

Publish otoroshi_lib on maven central (#789)
Local authentication doesn't works (#836)
Add google floc specific headers in ui (#837)
Fix docker build (#838)
Add auto cleanup in the cache plugin (#839)

[1.5.0-alpha.10] - 2021-05-12

https://github.com/MAIF/otoroshi/issues?q=is%3Aissue+label%3A1.5.0-alpha.10+is%3Aclosed https://github.com/MAIF/otoroshi/compare/v1.5.0-alpha.9...v1.5.0-alpha.10 https://github.com/MAIF/otoroshi/releases/tag/v1.5.0-alpha.10

Provide plugins to perform service discovery (#797)
Enhance de LDAP auth. module (#799)
remove log on server (service/global) options (#806)
Support mTLS for PG connection (#810)
Missing kid when signing with RSAKPAlgoSettings and ESKPAlgoSettings (#832)
Add support for S3 persistence for the in-memory datastore (#834)
Add support for SAML V2 auth. module (#815)
Add support for OAuth1 auth. module (#865)

[1.5.0-alpha.9] - 2021-03-12

https://github.com/MAIF/otoroshi/issues?q=is%3Aissue+label%3A1.5.0-alpha.9+is%3Aclosed https://github.com/MAIF/otoroshi/compare/v1.5.0-alpha.8...v1.5.0-alpha.9 https://github.com/MAIF/otoroshi/releases/tag/v1.5.0-alpha.9

Scoping otoroshi sources (#130)
Biscuit basic support (#783)
Add hash and line count in response header when exporting cluster state (#785)
Limit classpath scanning to the bare minimum (#786)
Introduce generic plugins (#787)
Use exposed ports instead of regular ports (#790)
Try to parse datetime as string in json readers (#791)
Add alerts when kubernetes jobs fails crd parsing (#792)
fix documentation about kubernetes webhooks (#793)
openapi descriptor generation (#795)

[1.5.0-alpha.8] - 2021-02-24

https://github.com/MAIF/otoroshi/issues?q=is%3Aissue+label%3A1.5.0-alpha.8+is%3Aclosed https://github.com/MAIF/otoroshi/compare/v1.5.0-alpha.7...v1.5.0-alpha.8 https://github.com/MAIF/otoroshi/releases/tag/v1.5.0-alpha.8

Add an OCSP responder API to the pki (#754)
On status page, when ES instance isn't setup, an undefined sort error occured (#765)
add something to the target UI components to avoid passing a "path" (#766)
When adding a target, we can't do show more without saving first (#767)
strip path seems to be broken (#768)
handle keypair renew in jwt verifier (#769)
Plugin to support canary stuff from izanami AB testing campaign (#770)
Add informations about OCSP and Authority informations access in cert extensions (#782)

[1.5.0-alpha.7] - 2021-02-10

https://github.com/MAIF/otoroshi/issues?q=is%3Aissue+label%3A1.5.0-alpha.7+is%3Aclosed https://github.com/MAIF/otoroshi/compare/v1.5.0-alpha.6...v1.5.0-alpha.7 https://github.com/MAIF/otoroshi/releases/tag/v1.5.0-alpha.7

Add JWT EC token sign/valid from keypair (#759)

[1.5.0-alpha.6] - 2021-02-10

https://github.com/MAIF/otoroshi/issues?q=is%3Aissue+label%3A1.5.0-alpha.6+is%3Aclosed https://github.com/MAIF/otoroshi/compare/v1.5.0-alpha.5...v1.5.0-alpha.6 https://github.com/MAIF/otoroshi/releases/tag/v1.5.0-alpha.6

improve PostgreSQL support (#758)

[1.5.0-alpha.5] - 2021-02-05

https://github.com/MAIF/otoroshi/issues?q=is%3Aissue+label%3A1.5.0-alpha.5+is%3Aclosed https://github.com/MAIF/otoroshi/compare/v1.5.0-alpha.4...v1.5.0-alpha.5 https://github.com/MAIF/otoroshi/releases/tag/v1.5.0-alpha.5

kubernetes job improvments (#677)
Add an api to get the availability of a service over time (#713)
Support private key passwords on certificates (#717)
watch does not handle new namespaces until restart (#719)
watch does not use namespace label filtering (#720)
Add support for kubedns and openshift dns operator (#721)
Add documentation about coredns stubdomain for openshift and kubedns (#722)
Exporter to fill internal metrics (#725)
Support EC certificates in the pki (#727)
Title not displayed after cancel a TCP service (#728)
change apiversion in crds (#730)
fix the findCertMatching in DynamicKeyManager to chose the most client specific cert (#733)
enhance pki (#735)
default jwks.json route (#736)
create default team and orga at first startup (#742)
Team selector is broken in UI (#743)
Unleash the snow monkey seems broken (#744)
Add specific JVM flags in kubernetes manifests (#745)
Session management does not work in cluster mode (#752)
Login tokens does not work in cluster mode (#753)
Chaining jwt verifier in non strict mode generate more events than needed (#755)
Experiment postgresql support (#757)

[1.5.0-alpha.4] - 2020-12-18

https://github.com/MAIF/otoroshi/issues?q=is%3Aissue+label%3A1.5.0-alpha.4+is%3Aclosed https://github.com/MAIF/otoroshi/compare/v1.5.0-alpha.3...v1.5.0-alpha.4 https://github.com/MAIF/otoroshi/releases/tag/v1.5.0-alpha.4

[UI] : add button to export form data to YAML descriptor (#679)
Experiment with a MutatingAdmissionWebhook to add a helper as a sidecar (#681)
Experiment with a ValidatingAdmissionWebhook to return useful errors when deploying otoroshi entities (#682)
Rename 'mtlsSettings' to 'tlsSettings' in the UI (#684)
Use standard kubernetes service names in target transformation (#688)
deprecate HasAllowedApiKeyValidator plugin (#696)
Remove whitelist/blacklist from UI (#697)
Custom template button does not work anymore (#698)
Cleanup possible hostnames for the kubernetes internal cluster calls (#700)
try to reduce memory impact of initial classpath scanning (#701)
only organization admins can create others admins (#704)
when an organization admin creates other admins, enforce new admin organizations and teams (#705)
flag in kubernetes config to accepts apikeys only with daikoku tokens (#706)
jwt-verifiers not imported with kubernetes job (#707)
workflow job (#708)
weird npe on job list since 1.5.0-alpha.3 (#709)
fix bad jsonpath functions (#710)
include jsonpath operator in transformation utils (#711)
include simple el in transformation utils (#712)
json editor adds '{}' at the end when pasting a json document (#714)
strip path removes too much stuff (#715)
io.otoroshi/id is not in annotations in documentation (#716)
Add a flag in service to avoid adding default hosts (#718)
Make global client_credential flow available by default (#723)
issue when generating subcas (#726)
Fix issuer DN in certificate to avoid certificate check in go (#729)
Some "add" doesn't work for HTTP headers in Service descriptor (#734)

[1.5.0-alpha.3] - 2020-11-18

https://github.com/MAIF/otoroshi/issues?q=is%3Aissue+label%3A1.5.0-alpha.3+is%3Aclosed https://github.com/MAIF/otoroshi/compare/v1.5.0-alpha.2...v1.5.0-alpha.3 https://github.com/MAIF/otoroshi/releases/tag/v1.5.0-alpha.3

Add a clever cloud generator in doc page (#673)
service registration fails when no endpoints (#674)
Increase default chunk size for akka http (#676)
disabling global script should stop current jobs (#678)
fix kubernetes job watch (#680)
Job for apikeys rotation (#683)
Add entries in the ApiKey secret to have Base64(client_id:client_secret) ready (#686)
Provide job context to various duration function in Job api (#687)
Add tenants and teams to crds (#689)
Get kubernetes job interval from config. (#691)
fix watch for ingress and certs (#692)
add env in coredns customization (#693)
handle coredns customization removal (#694)
add various watch timeout in KubernetesConfig (#695)

[1.5.0-alpha.2] - 2020-11-06

https://github.com/MAIF/otoroshi/issues?q=is%3Aissue+label%3A1.5.0-alpha.2+is%3Aclosed https://github.com/MAIF/otoroshi/compare/v1.5.0-alpha01...v1.5.0-alpha.2 https://github.com/MAIF/otoroshi/releases/tag/v1.5.0-alpha.2

Fixed

Fix the version checker to understand alpha and beta (#669)
Better coredns config patch (#671)

Added

Include jwt token fields in the elContext (#672)

[1.5.0-alpha01] - 2020-10-29

https://github.com/MAIF/otoroshi/milestone/6?closed=1 https://github.com/MAIF/otoroshi/compare/v1.4.22...v1.5.0-alpha01 https://github.com/MAIF/otoroshi/releases/tag/v1.5.0-alpha01

Add pluggable authentication modules for services instead of Auth0 only (#3)
Include Kubernetes ingress controller as a Job (#91)
Add support for Redis cluster (#252)
More JWT support from Otoroshi to Backends (#4)
[plugin] - Mirror traffic (#118)
HealthCheck disable service strategy (#221)
add bulk apis for main entities (#285)
Cleanup documentation (#295)
Support full OIDC / OAuth2 lifecycle with forwarded access token (#298)
Streaming input issue (#331)
Identity aware TCP forwarding over HTTPS (#332)
Add a geoloc target matcher (#338)
Use ndjson raw export for the import/export feature instead of partial json (#343)
Compatibility issues with Elastic 7.x (#344)
Document tcp tunneling (#356)
Update U2F documentation (#357)
add a button to test LDAP connection (#426)
cleanup datastore code (#464)
Remove U2F support (#468)
Customize UI title from config. (#469)
Update all JS deps (#470)
Webauthn support multiple devices for the same user (#471)
Support for client_credentials flow backed by apikeys (#472)
Rewrite SSL/TLS part with new Dynamic SSLContext (#473)
accesslog plugins - the referred is not in the response (#477)
If script description is empty, then take the programmatic one (#478)
multi-tenant / multi-teams (#479)
plugins to populate user from jwt token and use it in otoroshi token (#481)
Move third-party apikeys OIDC to a plugin and deprecate the original feature (#482)
Add email address in let's encrypt settings (#484)
add kubernetes deployment descriptors examples (#485)
add Helm chart to deploy otoroshi (#486)
Add routing constraint based on meta keys (#536)
Have a unique name for groups (#539)
Handle initial data import with a merge option (#544)
Read initial secrets from files path (#545)
Do not support enabled in kubernetes entities (#546)
override httpOnly and secure in private apps session cookie from module config (#547)
Typo in security header key X-Frame-Options (#548)
Delete non existant (in otoroshi) secrets (#551)
Try to find entities by id then merge it (#552)
Avoid phishing during private-apps authentication (#553)
Revamping secrets and testing them at startup (#555)
Duplicate auth. module configs. (#557)
back <- after consulting a service don't refresh the menu (#558)
Error after suppressing a Service target (#559)
Multiple authorized entities on apikeys (#560)
Multiple groups on service descriptors (#561)
Generic data exporters (#588)
Assign worker to handle only selected tenant data (#590)
Support Kubernetes 1.18 IngressClass (#591)
Generic notifier support in exporters (#592)
Add liveness probe check in service descriptors health check (crd, ingress) (#593)
Add usage of custom configuration file in configfile (#633)
Handle samesite in cookies (#660)
Support sendgrid for alert emails (#665)
enhance coredns patching to handle config changes (#667)

[1.4.22] - 2020-03-17

https://github.com/MAIF/otoroshi/milestone/29?closed=1 https://github.com/MAIF/otoroshi/compare/v1.4.21...v1.4.22 https://github.com/MAIF/otoroshi/releases/tag/v1.4.22

Changed

Request handler refactoring (#462)

Fixed

Fix pre-routing (#461)

[1.4.21] - 2020-03-10

https://github.com/MAIF/otoroshi/milestone/28?closed=1 https://github.com/MAIF/otoroshi/compare/v1.4.20...v1.4.21 https://github.com/MAIF/otoroshi/releases/tag/v1.4.21

Added

Add provider JS url to hook into UI (#440)
Now preRoutes can cancel a request if necessary (#444)
Plugins can enrich analytics events (#446)
Experiments with Lettuce driver for redis (#448)
Add plugins that can be background jobs (#449)
Add some kind of scheduler to have distributed unique jobs that run only on one cluster member at a time (#450)
Use JSON path to validate user profile and meta (#451)
Old LDAP version : bypass authentification without password (#452)

Changed

cosmetic changes concerning plugins in UI (#441)
cosmetic changes to the service page (#442)

Fixed

Add request sinks in the plugin form (#443)
Healthcheck to removed services (#447)

[1.4.20] - 2020-02-11

https://github.com/MAIF/otoroshi/milestone/27?closed=1 https://github.com/MAIF/otoroshi/compare/v1.4.19...v1.4.20 https://github.com/MAIF/otoroshi/releases/tag/v1.4.20

Added

Allow changing password your own admin account (#172)
Add a "new service" button at the top of services list (#424)
Store cluster datastore content on file for faster restarts (#428)
Add env. var. for array values (redis connector) (#429)
Add apikey rotation plugin (#430)
Add option to block exposed domain name for the instance (#431)
Add option to inject provider UI (#432)
Add option to set global plugin per instance (#433)
Add plugin to limit global handled request per day and month per instance (#434)
Public quotas per service plugin (#438)
Provide a plugin to use client certs as apikey (#439)

Fixed

possible matching root fails from UI (#437)

[1.4.19] - 2020-01-20

https://github.com/MAIF/otoroshi/compare/v1.4.18...v1.4.19 https://github.com/MAIF/otoroshi/releases/tag/v1.4.19

Fixed

fix bad env. var name (thanks to my broken keyboard !!!)

[1.4.18] - 2020-01-17

https://github.com/MAIF/otoroshi/compare/v1.4.17...v1.4.18 https://github.com/MAIF/otoroshi/releases/tag/v1.4.18

Added

trust all in mtls config
template API for each API entity
new mode for cluster state export for leaders

[1.4.17] - 2020-01-16

https://github.com/MAIF/otoroshi/compare/v1.4.16...v1.4.17 https://github.com/MAIF/otoroshi/releases/tag/v1.4.17

Added

Really fine tuning of the trust part of the SSL context per target for better mTLS handlings

[1.4.16] - 2020-01-15

https://github.com/MAIF/otoroshi/milestone/26?closed=1 https://github.com/MAIF/otoroshi/compare/v1.4.15...v1.4.16 https://github.com/MAIF/otoroshi/releases/tag/v1.4.16

Added

Support Let's Encrypt certificate creation and renew (#178)
Customize created certificates (#182)
Integration with enterprise PKIs (#274)
Add internal PKI to Otoroshi
Automatically download maxmind db (#409)
Listen to internal events in plugins (#410)
Disable kafka event sending on demand (#411)
Add configuration access in EL (#412)
Trust X-Forwarded-* headers or not (#413)
Add request lifecycle handlers in request transformers (#416)
[plugin] Add configuration description in plugin to generate UI automatically (#420)
HMAC secret can be base64 encoded (#423)
Really fine tuning of the SSL context per target for better mTLS handlings

Changed

Add reponse format in query string for metrics (#417)

Fixed

Fix configuration access for plugins (#414)
Fix nano apps when request body involved (#415)
Certificate with SANs doesn't seems to work (#419)
constrainedServicesOnly does not work as expected (#422)
Quotas + 1 (#421)

[1.4.15] - 2019-12-02

https://github.com/MAIF/otoroshi/compare/v1.4.14...v1.4.15 https://github.com/MAIF/otoroshi/releases/tag/v1.4.15

Fixed

routing on /.well-known/otoroshi/*

[1.4.14] - 2019-11-29

https://github.com/MAIF/otoroshi/milestone/25?closed=1 https://github.com/MAIF/otoroshi/compare/v1.4.13...v1.4.14 https://github.com/MAIF/otoroshi/releases/tag/v1.4.14

Added

Added scripts status in /health (#403)
Add detailed client informations based on User-Agent (#335)
Add more user related user info (identity) in events (#336)
Add client geo info (from ip) in events (#337)
[plugin] introduce pre-routing plugins (#398)
[plugin] introduce request sink plugins (#407)
[plugin] add a plugin to expose prometheus metrics per service (#312)
[plugin] add body logger with graphical debugger (#400)
[plugin] add information extraction based on user-agent (#401)
[plugin] add geolocation extraction based on ip address (#402)
[plugin] add a plugin to pass OIDC tokens and profile in headers (#404)
[plugin] add a plugin to pass client cert. chain in headers (#405)
[plugin] add CLF logger (#406)
[plugin] resources caching (#76)
[plugin] support some kind of real time debugging (#94)
create new events (#334)
allow path strip or not (#393)
allow multi host (#394)
allow multi matching root (#395)

Changed

use another default domain name (#294)
use Parcel.js to build Otoroshi UI (#105)
update front build (#392)

Fixed

filter with dates range don't return expected events (#385)
sometimes services can't be found (#391)
// in services events (#396)
fix bad behavior for /metrics and /health (#397)
enhance UDP tunneling support (#399)

[1.4.13] - 2019-10-30

https://github.com/MAIF/otoroshi/milestone/24?closed=1 https://github.com/MAIF/otoroshi/compare/v1.4.12...v1.4.13 https://github.com/MAIF/otoroshi/releases/tag/v1.4.13

Added

Add an "all events" view (#374)
Support Webauthn authentication for backoffice login (#352)
Integration of mTLS tests (#359)
Chaining transformers enhancement (#313)
Support DefaultToken strategy in JWT Verifiers (#373)
Early apikey extraction even if service is public (#351)
Expression language in targets (#353)
Introducing global validators and transformers (#372)
Support UDP tunneling (#361)
Use webauthn for U2F login of the backoffice (#340)
Addionnal headers only if missing (#364)
Use webauthn for U2F login of private apps (#358)
Global EL (#369)
Add extra metadata in auth modules (#370)

Changed

Improve tunneling (#354)
Improve request transformer request object (#299)
Can we use external access validation without client cert ? (#333)
Handle multiple JWT verifiers refs, with matchOne strategy (#363)
Rewrite validation authorities (#360)
Refactor transformer to only take a context as param like AccessValidator (#366)
Replace all in EL for multiple values (#371)

Fixed

Issues with target component (#355)
Created Global Jwt Verifiers not appears in global list (#362)
Fix overflow of icons in public column of services page (#365)
JWTVerifier cannot be saved (#368)
Case sensitivity issue in headers manipulation bug (#367)

[1.4.12] - 2019-09-27

https://github.com/MAIF/otoroshi/compare/v1.4.11...v1.4.12 https://github.com/MAIF/otoroshi/releases/tag/v1.4.12

Fixed

Fixed version display in UI

[1.4.11] - 2019-09-27

https://github.com/MAIF/otoroshi/milestone/23?closed=1 https://github.com/MAIF/otoroshi/compare/v1.4.10...v1.4.11 https://github.com/MAIF/otoroshi/releases/tag/v1.4.11

Added

Experimental: Identity aware TCP tunneling over HTTPS (#349)
Otoroshi version available on the dashboard (#346)
Support something like urn:ietf:wg:oauth:2.0:oob in private apps. (#297)

Fixed

Weird behavior with chunked transfer encoding (#350)
Logout does not work properly when using a In Memory Basic Auth config (#348)
Use 'storageRoot' when deleting all keys from Redis Storage (#347)
Cannot set Api Keys Restrictions (#345)
Allow multiple master nodes (ip address) in cluster config with client loadbalancing to avoid DNS setup (#342)
Delete Elastic config (#341)

[1.4.10] - 2019-08-02

https://github.com/MAIF/otoroshi/milestone/22?closed=1 https://github.com/MAIF/otoroshi/compare/v1.4.9...v1.4.10 https://github.com/MAIF/otoroshi/releases/tag/v1.4.10

Added

Removing incoming and outgoing headers (#326)

Changed

Improve cassandra support (#325)

Fixed

Api Keys could have a ttl (#328)
Fix empty String and Option[String] JSON parsing (#330)
Navigating on a group cause a 'Page not found' page (#329)
Some apiKeys disappears after apiKey creation (#322)
Problem to empty the Url field of Service Targets (#327)
Remove bintray links (#324)

[1.4.9] - 2019-07-15

https://github.com/MAIF/otoroshi/milestone/21?closed=1 https://github.com/MAIF/otoroshi/compare/v1.4.8...v1.4.9 https://github.com/MAIF/otoroshi/releases/tag/v1.4.9

Added

Http method and path validation per apikey (#315)
Add new new concepts on targets like matcher, manual DNS resolution, etc (#309, #310)
Support new loadbalancing policies (#80, #79, #77)
Add expression language to headers in/out values (#308)
Routing based on apikey roles and metadata (#307)
Live switching of the default http client (#300)

Changed

Improve otoroshi exchange protocol settings exchange protocol (#320)
Support CIDR notation in ip address whitelists / blacklists (#318)
Add "items in arrays" validation in JWT verifiers (#290)
Transfer more tags and metadata in third party api key from OIDC tokens (#317)
Remove support for ahc: http client (#302)
Better timeout management with the akka http client (#301)

Fixed

Enforce TTL on secured exchange protocol v2 bug (#316)
Remove default ssl context dump (#303)
APP_STORAGE is missing for AWS configuration (#304)
Cannot read property 'data.dataIn' of null in Analytics (#305)

[1.4.8] - 2019-05-06

https://github.com/MAIF/otoroshi/milestone/20?closed=1 https://github.com/MAIF/otoroshi/compare/v1.4.7...v1.4.8 https://github.com/MAIF/otoroshi/releases/tag/v1.4.8

Added

Support datastores other than redis for clusterings cluster
Support enterprise proxy to access outside world enterprise
Introduce secure exchange v2
Provide a "serverless" trait for request transformer
Disable HTTP/1.0 per service
Provide a root CA to trust at startup through config.
Add api key constraints
Third party apikeys (OIDC) verification module
Support Mailjet as alert mailer
Implements /me endpoint for private apps

Changed

Drop support for leveldb store datastore
Consider using a JsValue instead of Option[String, String] in private apps sesssions
Remove dev centric features
Add last sync date in /health of cluster workers
OAuth: do not send client_secret if not specified
Display event content in service events
Add query param to filter response body on analytics apis
Add documentation about /metrics and /health

Fixed

Use password input in 'in memory auth. module'
Fix missing doc in request transformer scripts section
Fix self signed certificate
Fix certificate generation at startup
Disabled service should not be used in routing

[1.4.7] - 2019-03-08

https://github.com/MAIF/otoroshi/milestone/19?closed=1 https://github.com/MAIF/otoroshi/compare/v1.4.6...v1.4.7 https://github.com/MAIF/otoroshi/releases/tag/v1.4.7

Added

documentation to deploy otoroshi en AWS Elastic Beanstalk
Support for Mailgun EU
Support for Prometheus metrics
Support for json metrics
New analytics apis that are more flexible
Header value verification post routing
additional headers out
shortcut to add security headers
gzip support

Changed

Show sessions profile and metadata in modal window
Do not use native modals in browser anymore
OIDC auto config is more reliable
Chunked response handling has been rewritten

Fixed

reload admins table after adding a new admin
Content-Encoding is not missing anymore in responses

[1.4.6] - 2019-02-18

https://github.com/MAIF/otoroshi/milestone/18?closed=1 https://github.com/MAIF/otoroshi/compare/v1.4.5...v1.4.6 https://github.com/MAIF/otoroshi/releases/tag/v1.4.6

Changed

Updated swagger according to last API changes
Fixed OAuth / OIDC scope settings reading from datastore

[1.4.5] - 2019-02-18

https://github.com/MAIF/otoroshi/milestone/17?closed=1 https://github.com/MAIF/otoroshi/compare/v1.4.4...v1.4.5 https://github.com/MAIF/otoroshi/releases/tag/v1.4.5

Added

flag to enabled Host header override
flag for global maintenance mode
env. var for global maintenance mode
support for X-Forwarded-* headers between otoroshi and targets
support for additional headers between otoroshi and clients
auto configuration of OIDC module from its well known public configuration URL

Changed

OAuth2 / OIDC option to read profile from JWT token or user info endpoint
OAuth2 / OIDC option to use URL Form Encoded or JSON for payloads

[1.4.4] - 2019-01-28

https://github.com/MAIF/otoroshi/milestone/16?closed=1 https://github.com/MAIF/otoroshi/compare/v1.4.3...v1.4.4 https://github.com/MAIF/otoroshi/releases/tag/v1.4.4

Changed

improve analytics dashboards (hits by apikeys and users)
improve cluster reporting (display all members of the cluster)
fix corner cases where some routing data does not have the correct TTL

[1.4.3] - 2019-01-23

https://github.com/MAIF/otoroshi/milestone/15?closed=1 https://github.com/MAIF/otoroshi/compare/v1.4.2...v1.4.3 https://github.com/MAIF/otoroshi/releases/tag/v1.4.3

Added

Request transformers

Changed

Xmas logo feature flipped

[1.4.2] - 2018-12-21

https://github.com/MAIF/otoroshi/compare/v1.4.1...v1.4.2 https://github.com/MAIF/otoroshi/releases/tag/v1.4.2

Changed

Xmas logo feature flipped

[1.4.1] - 2018-12-21

https://github.com/MAIF/otoroshi/milestone/13?closed=1 https://github.com/MAIF/otoroshi/compare/v1.4.0...v1.4.1 https://github.com/MAIF/otoroshi/releases/tag/v1.4.1 https://medium.com/oss-by-maif/otoroshi-v1-4-1-is-out-9e11eaa78354

Added

Support redirection per service
Support HTTP/2 targets (using experimental http client behind a flag)
Update to Bootstrap 3.4.0
Support dynamic SSL/TLS termination
Support dynamic mTLS connections between the client and Otoroshi
Support dynamic mTLS connection between the Otoroshi and the target
Support client certificate validation

[1.4.0] - 2018-11-22

https://github.com/MAIF/otoroshi/milestone/9?closed=1 https://github.com/MAIF/otoroshi/compare/v1.3.1...v1.4.0 https://github.com/MAIF/otoroshi/releases/tag/v1.4.0

Added

Otoroshi clustering

[1.3.1] - 2018-11-02

https://github.com/MAIF/otoroshi/milestone/11?closed=1 https://github.com/MAIF/otoroshi/compare/v1.3.0...v1.3.1 https://github.com/MAIF/otoroshi/releases/tag/v1.3.1

Added

Dynamic TLS support

[1.3.0] - 2018-10-18

https://github.com/MAIF/otoroshi/milestone/10?closed=1 https://github.com/MAIF/otoroshi/compare/v1.2.0...v1.3.0 https://github.com/MAIF/otoroshi/releases/tag/v1.3.0

Added

Auth modules
OAuth 2 auth module
In memory auth module
LDAP auth module
CORS support
Elastic support

[1.2.0] - 2018-07-27

https://github.com/MAIF/otoroshi/milestone/3?closed=1 https://github.com/MAIF/otoroshi/compare/v1.1.2...v1.2.0 https://github.com/MAIF/otoroshi/releases/tag/v1.2.0

Added

Otoroshi first open-source release
Mongo support
JWT token verification
Otoroshi exchange protocol customization
Snow Monkey (chaos engineering)
API Key as JWT token inside cookie

[1.1.2] - 2018-06-01

https://github.com/MAIF/otoroshi/milestone/7?closed=1 https://github.com/MAIF/otoroshi/compare/v1.1.1...v1.1.2 https://github.com/MAIF/otoroshi/releases/tag/1.1.2

[1.1.1] - 2018-03-22

https://github.com/MAIF/otoroshi/compare/v1.1.0...v1.1.1 https://github.com/MAIF/otoroshi/releases/tag/1.1.1

[1.1.0] - 2018-03-19

https://github.com/MAIF/otoroshi/milestone/1?closed=1 https://github.com/MAIF/otoroshi/compare/v1.0.2...v1.1.0 https://github.com/MAIF/otoroshi/releases/tag/1.1.0

[1.0.2] - 2018-02-13

https://github.com/MAIF/otoroshi/milestone/5?closed=1 https://github.com/MAIF/otoroshi/compare/1.0.1...v1.0.2 https://github.com/MAIF/otoroshi/releases/tag/1.0.2

Changed

#54 - cache invalidation is missing when a group is modified
#56 - Docker image should provide a volume for import files
#55 - Expiration does not work like it should in other datastores than Redis
#53 - Set the cookie domain using the app.domain property
#49 - Add flag to avoid exposition of admin dashboard and admin API
#52 - Provide a demo instance of Otoroshi oss
#50 - Product name is not propagated in analytic events

[1.0.1] - 2018-02-07

https://github.com/MAIF/otoroshi/milestone/4?closed=1 https://github.com/MAIF/otoroshi/compare/1.0.0...1.0.1 https://github.com/MAIF/otoroshi/releases/tag/1.0.1

Changed

#44 - fix the 'No ApiKey provided' response when calling with an ApiKey
#39 - Update Auth0 lock signin
#37 - Fix the "SEND_TO_ANALYTICS_ERROR" error
#38 - Fix the "Server Error Clock is running backward" error
#42 - Fix a bug preventing the edition of a service url
#41 - Fix the "Open group link" button in "All service groups" page

[1.0.0] - 2018-01-18

https://github.com/MAIF/otoroshi/releases/tag/1.0.0 Otoroshi first open-source release

Files

CHANGELOG.md

Latest commit

History

CHANGELOG.md

File metadata and controls

Changelog

[16.22.0] - 2024-12-16

Added

Changed

Fixed

Contributors

[16.21.0] - 2024-11-27

Added

Changed

Fixed

Contributors

[16.20.1] - 2024-10-31

Fixed

Contributors

[16.20.0] - 2024-10-31

Added

Changed

Fixed

Documentation

Contributors

[16.19.0] - 2024-09-19

Added

Changed

Fixed

Contributors

[16.18.7] - 2024-09-01

Added

Changed

Fixed

Contributors

[16.18.6] - 2024-07-25

Fixed

Contributors

[16.18.5] - 2024-07-25

Added

Changed

Contributors

[16.18.4] - 2024-06-13

Changed

Contributors

[16.18.3] - 2024-06-13

Added

Changed

Fixed

Contributors

[16.18.2] - 2024-06-07

Fixed

Contributors

[16.18.1] - 2024-06-07

Added

Fixed

Documentation

Contributors

[16.18.0] - 2024-05-31

Added

Changed

Fixed

Contributors

[16.17.0] - 2024-04-29

Added

Changed

Fixed

Contributors

[16.16.1] - 2024-04-03

Changed

Fixed

Contributors

[16.16.0] - 2024-03-31

Changed

Fixed

Contributors

[16.15.4] - 2024-03-21

Added

Changed