blob: 35f4b8fdd8cccd11ff1ddb86a1d876a3b1deca9b [file] [log] [blame]
margaretha287cf862025-05-22 13:16:06 +02001# version 0.78
2
3- Renamed free resource to resource.
margaretha663752e2025-05-23 10:35:04 +02004- Add required access to resources.
5- Determine corpus access dynamically using koralQuery for resources without
6 predefined required_access.
margarethad5f82f52025-06-02 11:51:53 +02007- Added useful VC (https://korap.ids-mannheim.de/doc/corpus) to resources.json.
8 (#800)
margarethae12de8b2025-05-28 11:40:33 +02009- Omit empty resource description.
margarethad5f82f52025-06-02 11:51:53 +020010- Added URL-encoding for corpus query at in the resource service.
margaretha4e414dc2025-06-02 12:46:23 +020011- Fixed recaching VC at closing index.
margaretha287cf862025-05-22 13:16:06 +020012
margarethaf851bbe2025-05-02 10:15:41 +020013# version 0.77
margaretha5b067882025-03-21 09:51:38 +010014
15- Update statistics in VC info and list web-services to use VC cache (referTo)
16 instead of the original KoralQuery definitions (#791).
margaretha9b754d72025-04-01 12:46:18 +020017- Setup system-vc in Initializator instead of using SQL for testing #793
margaretha9c6058a2025-03-24 09:44:11 +010018- Setup creating nemo-vc in VirtualCorpusTestBase instead of using SQL
margaretha9b754d72025-04-01 12:46:18 +020019 for testing #793
margarethaec884172025-03-24 10:14:26 +010020- Setup creating dory-vc in VirtualCorpusTestBase instead of using SQL
margaretha9b754d72025-04-01 12:46:18 +020021 for testing #793
margaretha9767b7e2025-03-24 10:36:23 +010022- Setup creating group-vc in VirtualCorpusTestBase instead of using SQL
margaretha9b754d72025-04-01 12:46:18 +020023 for testing #793
margarethab3ae95a2025-03-24 11:40:52 +010024- Setup creating marlin-vc and published-vc in VirtualCorpusTestBase
margaretha9b754d72025-04-01 12:46:18 +020025 instead of using SQL for testing #793
margaretha3a6b0a12025-03-27 08:32:07 +010026- Fixed request URI at OAuth2 token request API.
margaretha398be242025-03-28 18:04:58 +010027- Improved delete VC tests.
margaretha9b754d72025-04-01 12:46:18 +020028- Add VC rewrite for statistics web-service (#796)
margaretha29060842025-04-07 09:09:42 +020029- Updated other config files:
30 - Added statisticsRewriteHandler and queryContextRewrite,
31 - changed file locations to the data folder,
32 - removed unused beans (cacheManager, sqliteDataSource)
margarethaa25e9622025-04-14 10:23:35 +020033- Fix landingPage in the free resource web-service (#799)
34- Add pid for resource and use it as resourceId when available #798
35- Changed institution to IDS Mannheim.
margaretha335abd92025-05-02 10:11:29 +020036- Fix loading Spring XML config for DNB & ICC tests.
margarethaa25e9622025-04-14 10:23:35 +020037
margaretha5b067882025-03-21 09:51:38 +010038
margaretha9a1b4ba2025-03-18 11:56:05 +010039# version 0.76
margarethac20741a2024-11-13 12:59:18 +010040
margarethab4472102024-11-13 13:15:36 +010041- Add institution & landingPage to the resource web-service (#777)
margarethab30b0152024-11-15 14:06:00 +010042- Make URL mandatory for plugin registration (#573)
margaretha90dca022024-11-19 09:25:40 +010043- Remove hidden group from test database
margaretha9d820462024-11-25 16:11:57 +010044- Implemented QueryContextRewrite (#755)
45- Replace operation:insertion with operation:injection (#778)
margarethabf09b192024-12-02 15:40:44 +010046- Update VirtualCorpusRewrite Remove Owner (#779)
margarethad59b34d2024-12-03 10:31:30 +010047- Add source to QueryReferenceRewrite (#783) and VirtualCorpusRewrite (#780)
48- Use operation:override in virtual corpus (reference) rewrite (#780)
margarethad5799ae2024-12-04 11:40:19 +010049- Use operation:override in query reference rewrite (#783)
margaretha82c75c22024-12-11 09:36:50 +010050- Fixed availability regex for all access in the config (important to correctly
51 determine required access of stored VC)
margarethac105e2f2024-12-19 09:55:46 +010052- Rename CollectionRewrite to AvailabilityRewrite
margarethad9e43ec2024-12-20 12:11:43 +010053- Improve AvailabilityRewrite and implement operation:override (#781)
margarethab9b317d2025-01-23 15:13:47 +010054- Disabled mysql connector Java due to CVE-2023-22102
margaretha377c0182025-01-30 09:10:37 +010055- Replace origin with editor in rewrites (#782)
margaretha8489f862025-02-05 11:32:16 +010056- Update scope and add _comment as discussed in #782
margaretha4d06c122025-03-05 10:43:16 +010057- Changed source to original #782
margarethaee0b5732025-03-18 09:41:10 +010058- Change JsonInclude to non default to hide VC statistics when not computed
margaretha82c75c22024-12-11 09:36:50 +010059
margarethab4472102024-11-13 13:15:36 +010060
margaretha34595a52024-10-28 08:54:10 +010061# version 0.75
margaretha34c9fba2024-08-09 17:44:03 +020062
63- Alter role and remove privilege database tables (#763)
64- Update user-group and user-group member web-services (#763)
65- Remove edit member role web-service (#763)
66- Remove query access table (#763)
67- Remove query access admin, merged with user-group admin (#763)
68- Update share-query and query-access web-services (#763)
69- Add new web-service: delete role by query and group (#763)
70- Remove soft delete group and group status deleted (#765)
margaretha090d6292024-08-09 18:35:05 +020071- Remove soft delete group member and member status deleted (#765)
margaretha3e467132024-08-16 09:12:01 +020072- Removed SearchResourceFilters and UserGroupJson
margaretha04836712024-08-16 13:03:56 +020073- Removed deleted_by from user_group and user_group_member tables (#764)
74- Removed created_by, status and status_date from user_group_member table (#764)
75- Removed GroupMemberStatus (#764)
76- Replace invite and subscribe to add member (#764)
77- Remove unsubscribe member (#764)
margarethaea0b4072024-08-19 22:41:44 +020078- Added deprecation messages to deprecated services
79- Removed mail configuration (#764)
margarethad59b34d2024-12-03 10:31:30 +010080- Deprecate VC access deletion
81- Change default port to 8089
82- Disallow scope all for non super clients
83- Added config for total result cache and fixed inconsistency (#774)
84- Changed memberUsername to member in the new member-role-addition web-service
85- Removed user-privileges from user-group list response
margaretha987a0512024-10-23 11:19:29 +020086- Added role names to user-group list
margarethad59b34d2024-12-03 10:31:30 +010087- Added not-timeExceeded to the totalResult constraints
88- Replace EDIT_VC occurrences with CREATE_VC, and removed it
89- Fixed administrative user group retrieval to return groups with empty members
margaretha83cdf7f2024-10-23 10:50:29 +020090
margaretha34c9fba2024-08-09 17:44:03 +020091
Akron7ba60862024-08-09 16:55:01 +020092# version 0.74.1-SNAPSHOT
93
margarethad59b34d2024-12-03 10:31:30 +010094- Switch Docker image to temurin (diewald)
margaretha64755022024-06-18 10:30:59 +020095- - Introduce filter_by and deprecate authorized_only in OAuth2
96 client list (close #579)
Akron7ba60862024-08-09 16:55:01 +020097
margarethaac09c4f2024-10-10 12:46:50 +020098# version 0.74 hot-fix
99
margarethad59b34d2024-12-03 10:31:30 +0100100- Removed admin & owner restriction on client info access
margarethaac09c4f2024-10-10 12:46:50 +0200101- Removed registered_by and restrict registration_date to admin/owner-
margarethad59b34d2024-12-03 10:31:30 +0100102 only
margarethaac09c4f2024-10-10 12:46:50 +0200103
margaretha144be1a2024-08-09 15:38:40 +0200104# version 0.74
margarethaf6f6c3c2024-06-11 10:51:06 +0200105
margarethad59b34d2024-12-03 10:31:30 +0100106- Remove corpusQuery param in the statistics web-service (close #758)
107- Moved NamedVCLoader to the init package
108- Clean up Spring XML configs
109- Fix some logging to write to file instead of stdout
Marc Kupietze4528ee2024-07-04 16:28:37 +0200110- Change CC RE from CC-BY.* to CC.* (kupietz)
margarethad59b34d2024-12-03 10:31:30 +0100111- Unified ResourceFilters and SearchResourceFilters
112- Fixed supported versions in the configs & changed delimiter to comma
margaretha1df4f6d2024-07-12 13:45:52 +0200113- Setup log4j2 config (#753)
margarethaf6f6c3c2024-06-11 10:51:06 +0200114
margaretha1ef2a032024-06-11 11:39:57 +0200115# version 0.73.2
margaretha1668d872024-05-22 08:50:49 +0200116
margaretha46e2c952024-05-23 09:09:54 +0200117- Added tests for the DNB scenario with custom max match
margarethad59b34d2024-12-03 10:31:30 +0100118 and context size (#745)
119- Cleaned up named-vc
margarethad709be52024-06-05 11:31:41 +0200120- Updated tests using the old match info web-services (#757)
margarethac7f8f802024-06-05 12:52:45 +0200121- Added deprecation warning for the old matchInfo service (#757)
margarethad151c302024-06-10 10:50:42 +0200122- Fixed empty named VC path in configuration (solves #754)
margaretha60b65d42024-06-06 09:05:16 +0200123- Restrict registration info for plugins (solves #572)
margarethad59b34d2024-12-03 10:31:30 +0100124- Removed redirect uri from InstalledPluginDto & updated tests
margaretha46e2c952024-05-23 09:09:54 +0200125
margaretha21879752024-04-22 12:12:58 +0200126# version 0.73.1
margaretha10618a02024-02-21 11:06:01 +0100127
margarethad59b34d2024-12-03 10:31:30 +0100128- Fixed jakarta validation error
margaretha387e4682024-03-22 11:26:29 +0100129- Added openapi doc (#744)
130- Moved service.properties to src/main/resources/properties
131- Moved free-resources.json to src/main/resources/json
132- Enables inputting free-resources.json from data folder
margarethad77ee712024-03-22 12:35:30 +0100133- Changed loading external kustvakt.conf and jdbc.properties
134 to use /data folder (#598)
margaretha05818b42024-04-10 13:10:02 +0200135- Added KoralQuery check when updating VC (solved #676)
margarethada1571c2024-04-15 13:21:32 +0200136- Setup vc-cache in the data folder (#598)
margarethad59b34d2024-12-03 10:31:30 +0100137- Changed generating adminToken in the data folder (#598)
margaretha94b46fe2024-04-16 11:15:00 +0200138- Moved disk store path cache_store into the data folder (#598)
margarethad59b34d2024-12-03 10:31:30 +0100139- Fixed invalid signature of the uber jar
margaretha390f37d2024-04-22 12:07:34 +0200140- Updated configurations of the lite version to use the
141 data folder (#598)
margaretha67440722024-04-25 13:27:02 +0200142- Setup logs files to be generated inside the data folder (#598)
margaretha10618a02024-02-21 11:06:01 +0100143
margaretha28a53d12024-02-20 12:57:38 +0100144# version 0.73
margarethafbfe2872024-01-04 23:29:28 +0100145
margarethab06377e2024-01-30 11:06:35 +0100146- Moved the content of the full folder to the root folder
147- Removed Piwik
148- Removed unused libraries
149- Cleaned up spring configs
150- Updated Krill and Koral with new groupIds
151- Updated Github workflow
margaretha28a53d12024-02-20 12:57:38 +0100152- Updated search Krill and removed Lucene
153- Updated readme
margarethab06377e2024-01-30 11:06:35 +0100154
155# version 0.72
margarethafbfe2872024-01-04 23:29:28 +0100156
157- Replaced javax.ws to jakarta.ws namespace (#648)
158- Upgrading Jersey 2.40 to 3.x (#646)
159- Updated Spring 5.x to 6.x and jetty 9.x to 11.x (#645)
160- Replaced javax.persistence with jakarta.persistence (#648)
161- Migrate Hibernate 5 to 6 (#649)
162- Fix missing placeholders
163- Fixed conflicting jackson-jarxrs
164- Fixed conflicting commons-logging and spring jcl
165- Replaced javax.servlet with jakarta.servlet (#648)
166- Updated authorization services using Nimbus (#650)
167- Fixed BlockingFilter by replacing javax.annotation.Priority
168 with jakarta.annotation.Priority (#659, #648)
169- Replaced javax.annotation with jakarta.annotation
170- Enabled legacy support for authorization POST request
171- Changed OAuth2 token request using Nimbus (#650)
172- Removed Apache Oltu API from token requests (#650)
173- Removed OpenID
174- Fixed clearing cache
margarethad59b34d2024-12-03 10:31:30 +0100175- Fix JettyServerTest, init package, and some java docs
176- Make scope extraction more flexible
margarethafbfe2872024-01-04 23:29:28 +0100177- Updated token response using Nimbus (#650)
178- Remove Oltu request and validator implementations (#650)
179- Updated OAuth2 response handler (#650)
180- Fixed ShutdownHandler (fixed #708)
181- Fixed issues with multi-release jar (#706, #708)
182
183
184# version 0.71.1
185
186- Removed auditing (#611)
187- Removed old database configurations (#612)
188- Removed old tests
189- Removed unnecessary caches and methods in the authentication interface
190- Added total result cache (#599)
191- Fixed missing project.version in info web-service
192- Make sure totalResults and other numeric results are numbers (Kupietz)
193- Introduce CQP query language in Koral 0.41
194- Changed DB connection (fixed #670)
195- Resolved duplicate libraries
196- Fixed testing expiry access token
197- Fix lombok compile warning
margarethad59b34d2024-12-03 10:31:30 +0100198- Ensure the order of clean token tests
margarethafbfe2872024-01-04 23:29:28 +0100199
200# version 0.71
201
202- Renamed entity and service packages in core
203- Renamed web.controller package in core
204- Moved SearchNetworkEndpoint to core.service package
205- Merged lite into full
206- Merged core into full
207
208
209# version 0.70.1
210
211- Added data folder containing super_client_info and database
212 for mounting into docker
213- Added an error for missing redirect uri in a token request
214 when it has been included in the authorization request.
215- Added tests for VC sharing and for OAuth2 client using VC services
216- Added and updated VC controller tests
217- Moved hibernate.properties
218- Added maximum number of user persistent virtual corpora and queries
219
220# version 0.70
221
222- Support token array in matchinfo (fixes #570; diewald)
223- Updated VC list API and deprecated owner VC list (addressed #580)
224- Added user info web-service (solved #566)
225- Implemented configurable resource filters for search and match
226 info APIs (#539)
227- Added getting username from LDAP (#568)
228- Disabled LDAP auth provider and token API in the auth filter (#587)
229- Added LDAP log for users without idsC2Profile
margarethad59b34d2024-12-03 10:31:30 +0100230- Fixed log4j2 properties
margarethafbfe2872024-01-04 23:29:28 +0100231
232
233# version 0.69.3
234
235- Moved the service path of VC admin services to admin/vc (closed #543)
236- Added an admin service to load and cache system vc (solved #268)
237- Move oauth2 admin service path (closed #544)
238- Excluded admin service to load-cache VC from the test suite
239- Fixed refresh token expiry test
240- Fixed scope check in OAuth2 token request with refresh token
241
242# version 0.69.2
243
2442022-12-05
245- Upgrade version for E2E-simplified Docker images (diewald)
2462023-01-27
247- Updated client info API (replaced user authorization requirement with super
248 client authentication)
2492023-01-30
250- Made scope param required in authorization request (solved #508)
2512023-01-31
252- Allowed OAuth2 clients to use localhost as redirect URIs.
2532023-02-03
254- Fixed content-type in error responses by changing it to application/json
2552023-02-06
256- Allow admin access using admin token for the clean token API
2572023-02-10
258- Use admin filter instead of OAuth2 ADMIN scope
margarethad59b34d2024-12-03 10:31:30 +0100259- Added a plugin test
margarethafbfe2872024-01-04 23:29:28 +01002602023-02-15
261- Moved user-group retrieval API to UserGroupAdminController
margarethad59b34d2024-12-03 10:31:30 +0100262 and changed the service path URL of UserGroupAdminController
margarethafbfe2872024-01-04 23:29:28 +01002632023-02-20
264- Deprecate API token (JWT) web-service
265- Fixed Slf4J binding
2662023-02-28
267- Exclude junit5 dependencies to keep test runner in Eclipse using JUnit 4
2682023-03-06
margarethad59b34d2024-12-03 10:31:30 +0100269- Fixed testing refresh token expiry
margarethafbfe2872024-01-04 23:29:28 +0100270
271
272# version 0.69.1
273
274- Upgrade version for docker including indexer (diewald)
275
276
277# version 0.69
278
279 - Migrated to Java 11 and Jersey 2
280 - Updated dependencies
281 - Use LDAP authentication in Kustvakt-full oauth2 example config (kupietz)
282
283
284# version 0.68
285
2862022-05-25
287 - Added a new API: list plugins (e.g for marketplace)
288 - Added redirect URI validation in authorization request (addressed #374)
289 - Handled user-defined refresh token expiry (added in client info and
290 list API response)
291 - Added installed_plugins table
292 - Added a new API: install plugin
293 - Handled redundant plugin installation
294 - Handled super client id in plugin installation
295 - Deprecated UserClientDto and uses ClientinfoDto instead
296 - Updated redirect URI error message for coherence
2972022-05-27
298 - Added maximum limit to custom refresh token expiry
2992022-06-01
margarethad59b34d2024-12-03 10:31:30 +0100300 - Added new APIs: list user-installed plugins and uninstall plugin
margarethafbfe2872024-01-04 23:29:28 +0100301 - Moved install and list plugin APIs to PluginController and updated their
margarethad59b34d2024-12-03 10:31:30 +0100302 service paths under /plugins
margarethafbfe2872024-01-04 23:29:28 +01003032022-06-03
304 - Implemented searching option using a network endpoint
margarethad59b34d2024-12-03 10:31:30 +0100305 - Implemented initial super client registration for user authentication
306 - Fixed admin clean token API and restrict plugins to confidential only
margarethafbfe2872024-01-04 23:29:28 +0100307
308
309
310# version 0.67.1
311
3122022-05-12
313 - Implemented mapping of LDAP username to email
314 - Handled null parameters in authorization requests
3152022-05-25
316 - Fixed null client_id
317 - Updated ldap.config path in the kustvakt-test.conf
318
319
320# version 0.67
321
3222022-05-09
margarethad59b34d2024-12-03 10:31:30 +0100323 - LDAP authentication and authorization is now configurable and supports SSL (LDAPS) connections
324 - An embedded LDAP server can now be started automatically if configured accordingly
margarethafbfe2872024-01-04 23:29:28 +01003252022-05-11
326 - Changed the SQL script updating oauth2_client table
327
328
329# version 0.66
330
3312022-03-31
margarethad59b34d2024-12-03 10:31:30 +0100332 - Updated query and user-group name pattern
margarethafbfe2872024-01-04 23:29:28 +01003332022-04-08
margarethad59b34d2024-12-03 10:31:30 +0100334 - Added redirect_uri to client info API
margarethafbfe2872024-01-04 23:29:28 +01003352022-04-11
336 - Added registration_date, refresh_token_expiry, source and is_permitted
337 to the oauth2_client database table, and updated the OAuth2 client
margarethad59b34d2024-12-03 10:31:30 +0100338 registration mechanism
339 - Added authorization request with GET and deprecated that with POST
margarethafbfe2872024-01-04 23:29:28 +01003402022-04-13
341 - Updated OAuth2Client list API (added redirect_uri, registration_date,
margarethad59b34d2024-12-03 10:31:30 +0100342 permitted, source to OAuth2UserClientDto)
margarethafbfe2872024-01-04 23:29:28 +01003432022-04-20
margarethad59b34d2024-12-03 10:31:30 +0100344 - Updated authorization error response (Included error and error
margarethafbfe2872024-01-04 23:29:28 +0100345 description in the client redirect URI except for missing or
margarethad59b34d2024-12-03 10:31:30 +0100346 invalid client id or redirect URI)
margarethafbfe2872024-01-04 23:29:28 +0100347
348
349# version 0.65.2
350
3512022-03-03
margarethad59b34d2024-12-03 10:31:30 +0100352 - Removed VCLoader
353 - Added foreign keys to the DB tables of access and refresh token scopes
margarethafbfe2872024-01-04 23:29:28 +01003542022-03-07
margarethad59b34d2024-12-03 10:31:30 +0100355 - Added more parameter checks and OAuth2Client web-service tests
margarethafbfe2872024-01-04 23:29:28 +01003562022-03-17
margarethad59b34d2024-12-03 10:31:30 +0100357 - Updated admin filter by using admin token and role checks
margarethafbfe2872024-01-04 23:29:28 +01003582022-03-18
margarethad59b34d2024-12-03 10:31:30 +0100359 - Added an OAuth2 admin API to delete expired/revoked access and refresh tokens
margarethafbfe2872024-01-04 23:29:28 +01003602022-03-28
361 - Updated admin filter (admintoken as a form param) and uses
margarethad59b34d2024-12-03 10:31:30 +0100362 it for the closing index reader API
363 - Removed unused admin API: clear access token cache
margarethafbfe2872024-01-04 23:29:28 +01003642022-03-29
365 - Updated and moved admin API: updateClientPrivilege to OAuth2AdminController
366
367# version 0.65.1
368
3692022-03-01
margarethad59b34d2024-12-03 10:31:30 +0100370 - Restricts the field retrieval web-service to admin only
margarethafbfe2872024-01-04 23:29:28 +0100371
372# version 0.65
373
374!!! includes security updates - please update all Kustvakt libraries
375!!! Please also update Krill to version 0.60.2 and Koral to version 0.38
376
3772021-12-02
margarethad59b34d2024-12-03 10:31:30 +0100378 - Updated VC cache
margarethafbfe2872024-01-04 23:29:28 +01003792021-12-03
margarethad59b34d2024-12-03 10:31:30 +0100380 - Enabled listing system vc for authorized users
margarethafbfe2872024-01-04 23:29:28 +01003812021-12-08
margarethad59b34d2024-12-03 10:31:30 +0100382 - Removed koralQuery and statistics from VC list
margarethafbfe2872024-01-04 23:29:28 +0100383 - Added a web-service to retrieve KoralQuery of a VC
3842021-12-10
margarethad59b34d2024-12-03 10:31:30 +0100385 - [security] Updated log4j libs due to CVE-2021-44228
margarethafbfe2872024-01-04 23:29:28 +01003862021-12-13
margarethad59b34d2024-12-03 10:31:30 +0100387 - Fixed broken test suite
margarethafbfe2872024-01-04 23:29:28 +01003882022-01-03
389 - [security] More log4j security updates
390 - Bumped unboundid-ldapsdk
margarethad59b34d2024-12-03 10:31:30 +0100391 - Updated tests
margarethafbfe2872024-01-04 23:29:28 +01003922022-01-25
margarethad59b34d2024-12-03 10:31:30 +0100393 - Added show-tokens option to the search API
margarethafbfe2872024-01-04 23:29:28 +01003942022-01-31
margarethad59b34d2024-12-03 10:31:30 +0100395 - Added an API retrieving fields of a virtual corpus
margarethafbfe2872024-01-04 23:29:28 +0100396
397# version 0.64.1
398
3992021-10-26
margarethad59b34d2024-12-03 10:31:30 +0100400 - Bump Kustvakt and Krill versions
margarethafbfe2872024-01-04 23:29:28 +0100401
402
403# version 0.64
4042021-07-29
margarethad59b34d2024-12-03 10:31:30 +0100405 - Updated the change files and made a new version
margarethafbfe2872024-01-04 23:29:28 +01004062021-08-12
margarethad59b34d2024-12-03 10:31:30 +0100407 - Fixed errors due to missing query type and added tests
margarethafbfe2872024-01-04 23:29:28 +01004082021-08-13
margarethad59b34d2024-12-03 10:31:30 +0100409 - Fixed missing request entity
410 - Updated the query service to enable editing query references
margarethafbfe2872024-01-04 23:29:28 +01004112021-08-16
412 - Fixed creator param when storing query or VC by admins for
margarethad59b34d2024-12-03 10:31:30 +0100413 the system or other users
margarethafbfe2872024-01-04 23:29:28 +0100414
415# version 0.63.2
4162021-06-11
margarethad59b34d2024-12-03 10:31:30 +0100417 - Updated OAuth2 token length & secure random algorithm config
418 - Added character set filter to random code generator, e.g. for client_id
margarethafbfe2872024-01-04 23:29:28 +01004192021-06-14
margarethad59b34d2024-12-03 10:31:30 +0100420 - Updated roleId and super client parameters
margarethafbfe2872024-01-04 23:29:28 +01004212021-06-24
margarethad59b34d2024-12-03 10:31:30 +0100422 - Fixed broken test
margarethafbfe2872024-01-04 23:29:28 +01004232021-07-22
margarethad59b34d2024-12-03 10:31:30 +0100424 - Updated cache settings and some loggings
margarethafbfe2872024-01-04 23:29:28 +01004252021-07-26
426 - Replaced annotation parsing with restoring the annotation tables to the
margarethad59b34d2024-12-03 10:31:30 +0100427database
428 - Moved cache config to the full config
margarethafbfe2872024-01-04 23:29:28 +0100429
430# version 0.63.1
4312021-02-22
432 - Updated libraries (margaretha)
433 - Renamed virtual corpus to query (margaretha)
4342021-02-26
435 - Added query access roles and fixed vc access roles (margaretha)
436 - Added delete query webservice and tests (margaretha)
4372021-03-25
438 - Updated Koral version for Info Controller (margaretha)
439 - Updated OAuth2 token list with token type and user clientId
440parameters (margaretha)
4412021-03-29
442 - Added client type in the client list web-service. Resolved #58 (margaretha)
4432021-04-19
444 - Updated OAuth2Client JSON definition and controller tests (margaretha)
4452021-04-26
446 - Updated OAuth2 Client list (margaretha)
4472021-04-30
448 - Updated parameters in the error responses of OAuth2 APIs for coherence (margaretha)
449 - Updated OAuth2 API responses for coherence (margaretha)
4502021-06-07
451 - Updated OAuth2 client dto (margaretha)
452
453# version 0.63
45426/10/2020
455 - Updated dependency of nimbus-jose-jwt and oauth2-oidc-sdk (diewald)
45629/10/2020
457 - Introduction of a query reference rewrite mechanism (diewald)
45830/10/2020
459 - Added database methods for storing query references (diewald)
46004/12/2020
margarethad59b34d2024-12-03 10:31:30 +0100461 - Fix hibernate dialect for SQLite (margaretha)
margarethafbfe2872024-01-04 23:29:28 +010046204/12/2020
margarethad59b34d2024-12-03 10:31:30 +0100463 - Fix pipe warning (margaretha)
margarethafbfe2872024-01-04 23:29:28 +010046414/01/2021
465 - Updated Flyway (margaretha)
46621/01/2021
467 - Fixed running pipe and updated tests with mockserver (margaretha)
46801/02/2021
469 - Updated methods dependent to Antrl4-maven-plugin libraries (margaretha)
47005/02/2021
471 - Add query reference web-service (diewald,margaretha)
47210/02/2021
473 - Fixed problem with multiple desktop apps (diewald, margaretha)
47412/02/2021
475 - Added listing available queries for users (margaretha)
47617/02/2021
477 - Removed escaping for KoralQuery in VC and query reference responses (margaretha)
478 - Added query and query language in virtual corpus table (margaretha)
47918/02/2021
480 - Set corpus access public for stored query (margaretha)
48119/02/2021
482 - Enabled API info web-service (margaretha)
483
484
485# version 0.62.4
48624/01/2020
487 - Removed salt from config and updated config files (margaretha)
48803/02/2020
489 - Added an admin API for clearing access token cache (margaretha)
49005/02/2020
491 - Added a config properties for a long-time access token expiry
492 and excluded refresh tokens for public clients in OAuth2 token
493 responses (margaretha)
494 - Removed client authentication from the client deregistration and
495 client-secret reset APIs (margaretha)
49604/03/2020
497 - Updated the sample index (diewald)
498
499# version 0.62.3
50003/12/2019
501 - Implemented pipe extension in the search API (margaretha)
50211/12/2019
503 - Added errors when requesting VC in caching process (margaretha,
504 resolved #47)
50512/12/2019
506 - Added support for multiple cq parameters (margaretha, resolved #46)
50713/12/2019
508 - Handled pipe errors and added tests (margaretha)
50919/12/2019
510 - Updated create update user-group API (margaretha)
51120/12/2019
512 - Removed transactional annotations from simple select queries (margaretha)
513 - Updated free resource controller (margaretha)
51415/01-2020
515 - Added additional statistic figures to virtual corpus info API
516 response (margaretha)
517
518# version 0.62.2
51917/10/2019
margarethad59b34d2024-12-03 10:31:30 +0100520 - Handled vulnerability CVE-2019-17195 (margaretha)
margarethafbfe2872024-01-04 23:29:28 +01005218/11/2019
522 - Added user-group name pattern (margaretha, issue #33)
52311/11/2019
524 - Updated user group service paths and replaced groupId with groupName
525 (margaretha, resolved #33)
52612/11/2019
527 - Removed UserGroupJson & updated listUserGroups and createUserGroup
528 services (margaretha)
529 - Added prefixes to username and groupname parameters in service paths
530 (margaretha, resolved #35)
53113/11/2019
532 - Added tests for issue #43 (margaretha)
53314/11/2019
534 - Added client description and URL to list-authorized-clients service
535 (margaretha, close #53)
536 - Implemented a service to list clients registered by a user (margaretha,
537 close #52)
538 - Added a check for OAuth2 client, VC, and group name length (margaretha)
53915/11/2019
540 - Merged list authorized client and list registered client services
541 (margaretha)
54221/11/2019
543 - Added a service to list active refresh tokens of a user (margaretha)
544 - Added username filtering to token revocation service via super client
545 (margaretha)
54626/11/2019
547 - Added a service to revoke a single refresh token via super client
548 (margaretha)
549
550# version 0.62.1
55108/07/2019
552 - Added tests for public metadata response in search api (margaretha,
553 issue #43)
554 - Disabled some tests of unused/disabled web-services (margaretha)
55507/08/2019
556 - Fixed missing scopes after requesting access token with refresh token
557 (margaretha)
558 - Fixed post requests with status OK and empty body (margaretha)
55907/08/2019
560 - Added users to hidden group when searching in a published VC (margaretha,
561 resolved #40)
56215/08/2019
563 - Updated the response statuses of VC PUT requests (margaretha)
564
565# version 0.62
56628/02/2019
567 - Removed old VC controllers and updated tests (margaretha, issue #34)
568 - Updated VC access controllers (margaretha)
56919/03/2019
570 - Added close index controller (margaretha)
57111/04/2019
572 - Fixed unknown authentication scheme, missing VC entity, and parameter
573 checker (margaretha)
574 - Fixed sharing unknown VC, updating corpusQuery, and handling non-
575 unique group name and unknown VC access (margaretha)
57627/06/2019
577 - Handled LDAP errors, fixed #45 (margaretha)
57803/07/2019
579 - Added re-caching VC at closing-index service, resolved #44 (margaretha)
580 - Changed the response media-type of authentication controllers (margaretha)
581 - Fixed bugs: allow guest to retrieve system VC,
582 remove VC from cache when it is deleted (margaretha)
58304/07/2019
584 - Updated VC name pattern and tests (margaretha)
585
586# version 0.61.6
58704/02/2019
588 - Fixed SQL data and merged oauth2_client_url and oauth2_client (margaretha)
589 - Updated client deregistration behavior (margaretha)
59005/02/2019
591 - Added delete-group-by-name controller (margaretha)
592 - Added unique index to group name (margaretha)
59306/02/2019
594 - Updated a user setting test using array for multiple values (margaretha)
595 - Added metadata controller tests (margaretha)
59618/02/2019
597 - Fixed tests (margaretha)
598 - Updated handling errors from Koral (margaretha)
59919/02/2019
600 - Added fields to metadata controller (margaretha, issue #39)
601
602# version 0.61.5
60317/12/2018
604 - Added a search timeout test (margaretha)
60518/12/2018
606 - Updated tests using BeanConfigTest to use SpringJerseyTest (margaretha)
60708/01/2019
608 - Improved predefined vc caching (issue #28, margaretha)
60909/01/2019
610 - Added comments (margaretha)
611 - Updated code structure (margaretha)
61211/01/2019
613 - Degraded API version to 1.0 (margaretha)
614 - Added OAuth2 client info tests (margaretha)
61514/01/2019
616 - Added retrieveVCByName and deleteVCByName controllers (margaretha)
61716/01/2019
618 - Added a PUT request for both creating and editing vc (margaretha)
619 - Added aliases to some VC controllers (margaretha)
620 - Merged VC access list controllers (margaretha)
62121/01/2019
622 - Removed codes related to user registration & password management (margaretha)
62322/01/2019
624 - Added create, edit, retrieve user default setting controllers (margaretha)
62522/01/2019
626 - Updated default setting controllers & added tests (margaretha)
627 - Added delete key in setting controllers (margaretha)
62823/01/2019
629 - Added default setting key validation (margaretha)
630 - Fixed UserdataTest (margaretha)
63124/01/2019
632 - Added default setting key validation & fixed UserdataTest (margaretha)
63325/01/2019
634 - Added VC reference and MapUtil tests (margaretha)
63528/01/2019
636 - Fixed username verification in DefaultSettingService (margaretha)
637 - Added foundry rewrite with user default setting (margaretha)
638 - Added default foundry for morphology layer (margaretha)
63929/01/2019
640 - Fixed share VC type (margaretha)
641 - Added delete setting controller (margaretha)
642 - Handled "no resource found" cases (margaretha, issue #37)
64330/01/2019
644 - Added server shutdown description in readme (margaretha)
645
646# version 0.61.4
64714/11/2018
648 - Integrated lite and full services and controllers in core (margaretha)
64921/11/2018
650 - Updated OAuth2 refresh token request to create a new refresh token and
651 revoke the old one per request (margaretha)
65228/11/2018
653 - Updated NamedVCLoader to delete existing VC in DB (margaretha)
654 - Handled storing cached VC with VC reference (margaretha)
65529/11/2018
656 - Added a controller for listing user clients having active refresh tokens
657 (margaretha)
6586/12/2018
659 - Added debug flags to mitigate log4j debugging performance (margaretha)
660 - Fixed KoralNode at() method (margaretha)
66111/12/2018
662 - Implemented revoking all tokens of a user client via a super client
663 (margaretha)
664 - Removed document controllers and KustvaktResource (margaretha)
665 - Fixed rewrite bugs (updated rewriteQuery & KoralNode) (margaretha)
666
667
668# version 0.61.3
66917/10/2018
670 - Updated NamedVCLoader to be optional (margaretha)
671 - Updated annotation tables & implemented key-value structure (margaretha)
672 - Added annotation parser for annotation data from kalamar (margaretha)
673 - Implemented parsing free resource info from json (margaretha)
67422/10/2018
675 - Updated jetty, spring and hibernate versions (margaretha)
676 - Fixed the order of annotation keys and values, and added tests (margaretha)
677 - Fixed resource DAO & added tests (margaretha)
67824/10/2018
679 - Fixed query serialization service (margaretha)
680 - Added "highlights" parameter to matchInfo controller (margaretha)
681 - Added "fields" parameter to search controllers (margaretha)
682 - Integrated lite controllers, services and tests in full version (margaretha)
68329/10/2018
684 - Moved javax.servlet-api to core (margaretha)
68507/11/2018
686 - OpenJDK8u181-workaround (see Debian Bug report #911925; diewald)
68713/11/2018
688 - Added Shutdown handler to Jetty server (margaretha)
689 - Fixed storing VC order in NamedVCLoader (margaretha)
690
691# version 0.61.2
69212/09/2018
693 - Added various log4j2 configurations (margaretha)
69413/09/2018
695 - Implemented VirtualCorpusRewrite (margaretha)
69614/09/2018
697 - Fixed SpringJerseyTest ApplicationContext (margaretha)
698 - Handled VCRef with username in VirtualCorpusRewrite (margaretha)
699 - Enabled VCReferenceTest in maven test suite (margaretha)
70018/09/2018
701 - Handled unique constraints / inserting duplicate items to DB (margaretha)
702 - Added a controller for editing user group member roles (margaretha)
70319/09/2018
704 - Fixed cached-VC ref with username (margaretha)
705
706# version 0.61.1
70728/08/2018
708 - Added API URL versioning (margaretha)
709 - Deactivated IdRewrite (margaretha)
710 - Fixed kustvakt controller (margaretha)
71130/08/2018
712 - Fixed root packages & added api version properties in kustvakt.conf
713 (margaretha)
714 - Fixed versioning in SearchController (margaretha)
715 - Added API versioning tests (margaretha)
716
717# version 0.61.0
718
71902/08/2018
720 - Added VC reference tests (margaretha)
721 - Implemented loading and caching named VCs (margaretha)
72203/08/2018
723 - Implemented OAuth2 revoke token (margaretha)
724 - Updated OAuth2 refresh token implementation (margaretha)
72514/08/2018
726 - Implemented revoke all OAuth2 access tokens and authorization codes of
727 client users when deregistering/deleting a client (margaretha)
728 - Fixed update OAuth2 access token (margaretha)
729 - Implemented reset client secret (margaretha)
730 - Fixed revoking latest access token when refreshing OAuth2 access token
731 (margaretha)
73215/08/2018
733 - Implemented OAuth2 client info controller (margaretha)
734 - Implemented update OAuth2 client privilege controller for admins
735 (margaretha)
736 - Implemented unlimited authorization scope for super clients with OAuth2
737 password grant (margaretha)
738 - Marked native clients implementation to deprecated in favour of super
739 clients (margaretha)
740 - Enabled using Bearer tokens as user authentication tokens (Authorization
741 header value) for many controllers including OAuth2 controllers (margaretha)
74216/08/2018
743 - Implemented degrading super clients (margaretha)
744 - Improved and added OAuth2 tests (margaretha)
74521/08/2018
746 - Added VC name pattern check (margaretha)
74722/08/2018
748 - Implemented loading VC from gz files (margaretha)
749 - Updated OAuth2 authorization codes' & access tokens' expiry check
750 (margaretha)
75123/08/2018
752 - Updated RefreshToken implementations with separate DB tables (margaretha)
753 - Allows multiple access tokens per refresh token (margaretha)
75427/08/2018
755 - Added statistic with VC reference tests (margaretha)
756 - Fixed OAuth2 SQL files (margaretha)
75728/08/2018
758 - Added c3p0 datasource configuration to Spring default-config-xml
759 (margaretha)
760 - Added running Kustvakt server with custom spring config in the readme
761 (margaretha)
762 - Removed old OAuth2 codes (margaretha)
763 - Moved non-config test codes to misc (margaretha)
764
765
766# version 0.60.5
767
76809/07/2018
769 - Added service layer to the search controller (margaretha)
770 - Added OAuth2 scope checking in search and VC controllers (margaretha)
771 - Added handling OAuth2 bearer token for VC access and User group
772 controllers (margaretha)
773 - Added default scope to password grant (margaretha)
77410/07/2018
775 - Made createBasicAuthorizationHeaderValue static (margaretha)
776 - Added store access token in openID token service (margaretha)
777 - Fixed empty scope in openID authorization and token service (margaretha)
778 - Implemented storing authorization code in cache (margaretha)
77911/07/2018
780 - Fixed authentication time in authentication controller (margaretha)
781 - Added OAuth2 access token tests (margaretha)
78212/07/2018
783 - Updated maven surefire setting for faster test suite runtime (margaretha)
784 - Implemented refreshing OAuth2 access token (margaretha)
78526/07/2018
786 - Fixed issue #27 (margaretha)
78702/08/2018s
788 - Fixed clientId encoding in OAuth2ClientControllerTest (margaretha)
789
790
791# version 0.60.4
792
79305/07/2018
794 - implemented OAuth2 authorization code request with OpenID Authentication
795 (margaretha)
796 - enabled OAuth2 authorization without OpenID authentication using Nimbus
797 library (margaretha)
798 - implemented response handler for OpenID authentication errors in authorization
799 requests (margaretha)
800 - added tests regarding OpenID authentication in authorization requests
801 (margaretha)
802 - implemented OAuth2 authorization error response via redirect URI instead of
803 JSON (margaretha)
804 - added state to OAuth2 authorization error response (margaretha)
805 - implemented OpenID token service for authorization code flow (margaretha)
806 - implemented signed OpenID token with default algorithm RSA256 (margaretha)
807 - implemented JSON Web Key (JWK) set web-controller listing kustvakt public
808 keys (margaretha)
809 - implemented OpenId configuration (margaretha)
810 - added authentication time and support for auth_time in id_token (margaretha)
811 - implemented support for nonce and max_age parameters in OpenID authentication
812 (margaretha)
813 - implemented OAuth2 token request with password grant using Nimbus library
814 (margaretha)
815 - updated redirect URI validator (margaretha)
816 - updated client registration requirement to allow desktop applications
817 (margaretha)
818 - fixed RSA key configuration (margaretha)
819 - merged OAuth2 client deregistration controllers (margaretha)
820 - fixed OAuth2 client unique URL-hashcode (margaretha)
821 - migrated logging to log4j 2 and adapted java.util.logging to log4j(margaretha)
822 - Added support for unrestricted corpus statistics (ndiewald)
823 - updated paths of user-group deletion-controllers (margaretha)
824 - Do not pass broken queries to Krill (diewald)
825 - added OAuth2 token request with client authentication via Authorization
826 header (margaretha)
827 - added port checking in test suite (margaretha)
828
829# version 0.60.3
830
83106/06/2018
832 - improved user authentication by using authentication filter for authorization
833 code request (margaretha)
834 - limited client authentication to client id checking in authorization code
835 request (margaretha)
836 - added user_id in the oauth2_access_token database table (margaretha)
837 - implemented OAuth2Authentication provider for token context management
838 (margaretha)
839 - added parameter checking for authorization DAO (margaretha)
840 - added controller tests using OAuth2 access token (margaretha)
841 - added database tables for MySQL (margaretha)
842 - updated JWT library and related codes (margaretha)
843
844# version 0.60.2
845
84603/05/2018
847 - implemented OAuth2 client registration (margaretha)
848 - implemented OAuth2 client authentication (margaretha)
849 - changed virtual corpus search to retrieval (margaretha)
850 - implemented public client deregistration task (margaretha)
851 - added client registration and deregistration tests (margaretha)
852 - implemented confidential client deregistration task (margaretha)
853 - fixed storing client secret (margaretha)
854 - implemented OAuth2 response handler (margaretha)
855 - implemented OAuth2 request access token with client credentials grant
856 (margaretha)
857 - implemented OAuth2 request access token with resource owner password grant
858 (margaretha)
859 - implemented OAuth2 authorization code request (margaretha)
860 - added OAuth2 error codes (margaretha)
861 - added OAuth2 authorization, scope and access token tables for SQLite
862 (margaretha)
863 - implemented OAuth2 authorization, scope and access token DAO (margaretha)
864 - implemented OAuth2 request access token with authorization code grant
865 (margaretha)
866 - added setting default scopes in the config file (margaretha)
867 - fixed loading spring config multiple times in the test suite (margaretha)
868 - added SQLite created_date trigger for access token (margaretha)
869 - added a join table for access token scopes (margaretha)
870 - added access scopes handling (margaretha)
871 - added tests about request token with authorization code (margaretha)
872
873# version 0.60.1
874
87528/03/2018
876 - added admin-related SQL codes (margaretha)
877 - updated AdminDao (margaretha)
878 - added optional username query parameter to group list controller (margaretha)
879 - fixed non hierarchical URI of kustvakt conf files (margaretha)
880 - added delete group member triggers (margaretha)
881 - added list user-group by username and status for system admin (margaretha)
882 - added user-group status in user-group DTO (margaretha)
883 - added check for hidden groups in user-group tests (margaretha)
884 - added database trigger test on deleting members when deleting group
885 (margaretha)
886 - renamed VC type PREDEFINED to SYSTEM (margaretha)
887 - added VC list controller for system admin (margaretha)
888 - added VC controller tests with for system admin (margaretha)
889 - added hidden access removal when deleting published VC (margaretha)
890 - added check for hidden groups in VC controller tests (margaretha)
891 - added search user-group controller (margaretha)
892 - removed createdBy from VirtualCorpusJson (margaretha)
893 - moved member role setting from the invitation phase to the after-subscription
894 phase (margaretha)
895 - added member role removal after deleting members (margaretha)
896 - added add and delete member role controllers (margaretha)
897
898# version 0.60
899
90014/03/2018
901 - set up mail settings using localhost port 25 (margaretha)
902 - added mail template in kustvakt configuration (margaretha)
903 - added mail settings to readme (margaretha)
904 - disabled email notification for auto group (margaretha)
905 - added metadata retrieval (diewald)
906 - enabled custom implementation for email address retrieval (margaretha)
907 - removed old policy and deprecated code (margaretha)
908 - moved authentication related code to /full (margaretha)
margarethad59b34d2024-12-03 10:31:30 +0100909 - added userRoles attribute to UserGroupDto (margaretha)
margarethafbfe2872024-01-04 23:29:28 +0100910 - fixed sqlite trigger (margaretha)
911 - fixed member exist error message (margaretha)
912 - fixed member invitation to join deleted group (margaretha)
913 - added checking deleted group (margaretha)
914
915# version 0.59.10
916
91720/02/2018
918 - added sort VC by id (margaretha)
919 - added test cases regarding VC sharing (margaretha)
920 - implemented withdraw VC from publication (margaretha)
921 - added Changes file (margaretha)
922 - implemented add/invite users to group (margaretha)
923 - implemented delete user-group and member tasks (margaretha)
924 - added userMemberStatus in group lists (margaretha)
925 - updated and added SQL test data (margaretha)
926 - added user group related tests (margaretha)
927 - implemented custom configuration for deleting user groups and members (margaretha)
928 - updated library versions and java environment (margaretha)
929 - added expiration time check for member invitation (margaretha)
930 - moved .properties files (margaretha)
931 - merged changelog file to Changes (margaretha)
932 - updated status codes and error messages to be more detailed (margaretha)
933 - testing mail implementation using embedded jetty jndi (margaretha)
934 - fixed collection rewrite regarding OR operation with other fields
935 (margaretha)
936 - implemented sending mail using spring injection and removed jetty jndi
937 (margaretha)
938 - fixed unrecognized application/json (margaretha)
939 - fixed and updated velocity template (margaretha)
940
941# version 0.59.9
942
94319/01/2018
944 - restructured basic authentication (margaretha)
945 - fixed AuthenticationException to include authentication scheme (margaretha)
946 - fixed rewrite redundancy in collection rewrite (margaretha)
947 - fixed foundry rewrite for constituents (margaretha)
948 - introduced authentication methods, schemes and tokens (margaretha)
949 - implemented collection rewrite with multiple licenses (margaretha)
950 - fixed foundry rewrite for korap span without wrap node (margaretha)
951 - implemented list user group (margaretha)
952 - implemented delete VC task (margaretha)
953 - implemented create user-group, subscribe to user-groups, unsubscribe to
954 user-groups tasks(margaretha)
955 - fixed handling JSON mapping exception for missing enums (margaretha)
956 - implemented list VC task (margaretha)
957 - added KoralQuery in VC lists (margaretha)
958 - implemented edit VC task (margaretha)
959 - implemented publish VC task (margaretha)
960 - implemented share VC task (margaretha)
961 - implemented list only owned VC task (margaretha)
962 - implemented list VC access task (margaretha)
963 - implemented search VC by id task (margaretha)
964 - implemented delete VC access (margaretha)
965 - implemented search for project VC (margaretha)
966 - added search VC related tests (margaretha)
967 - removed PredefinedUserGroup.ALL and related codes (margaretha)
968 - implemented search for published VC (margaretha)
969
970# version 0.59.8
971
97221/09/2017
973 - restructured statistics service (margaretha)
974 - removed deprecated loader codes and tests (margaretha)
975 - removed old Spring java configurations (margaretha)
976 - implemented entity classes for the new database (margaretha)
977 - added MySQL codes regarding VC and for testing (margaretha)
978 - added dao methods regarding VC (margaretha)
979 - added similar SQL codes (to MySQL) for sqlite (margaretha)
980 - added dao methods regarding user groups (margaretha)
981 - restructured web-service codes into controller and logic/business-service
982 (margaretha)
983 - implemented user role and privilege, and added tests (margaretha)
984 - prepared test suite using new database (margaretha)
985 - implemented UserGroupDao and tests (margaretha)
986 - fixed missing exceptions in JsonUtils (margaretha)
987 - restructured web filters and authentication codes (margaretha)
988 - implemented create/store VC (margaretha)
989 - fixed collection rewrite bug regarding availability with operation or
990 (margaretha)
991
992# version 0.59.7
993
99413/10/2016
995 - MOD: updated search to use new siglen (diewald)
996 - MOD: fixed matchinfo retrieval in light service (diewald)
997
99805/05/2015
999 - ADD: rest test suite for user service (hanl)
1000 - MOD: setup parameter modification (hanl)
1001 - ADD: oauth2 client unique constraint (hanl)