blob: c53c97aa84407061143495160995c2071c7adff6 [file] [log] [blame]
margarethad9e5cda2022-05-11 12:03:29 +020012022-05-11
2 - Changed the SQL script updating oauth2_client table
3
margaretha43a1deb2022-03-30 08:40:49 +02004# version 0.66
5
margaretha3ef1b812022-04-06 11:32:54 +020062022-03-31
margaretha9645ab02022-03-31 11:33:03 +02007 - Updated query and user-group name pattern.
margaretha3ef1b812022-04-06 11:32:54 +02008 2022-04-08
9 - Added redirect_uri to client info API.
margarethad7163122022-04-11 09:42:41 +0200102022-04-11
11 - Added registration_date, refresh_token_expiry, source and is_permitted
12 to the oauth2_client database table, and updated the OAuth2 client
13 registration mechanism.
margarethad67b4272022-04-11 17:34:19 +020014 - Added authorization request with GET and deprecated that with POST.
margaretha9dfa8632022-04-13 10:29:58 +0200152022-04-13
16 - Updated OAuth2Client list API (added redirect_uri, registration_date,
17 permitted, source to OAuth2UserClientDto).
margarethaffb89502022-04-20 12:03:16 +0200182022-04-20
19 - Updated authorization error response. (Included error and error
20 description in the client redirect URI except for missing or
21 invalid client id or redirect URI.
margaretha9645ab02022-03-31 11:33:03 +020022
margarethad66a6832022-03-03 08:47:13 +010023# version 0.65.2
24
252022-03-03
26 - Removed VCLoader.
margaretha6bbbf1d2022-03-03 08:48:05 +010027 - Added foreign keys to the DB tables of access and refresh token scopes.
margaretha21a83862022-03-07 16:56:08 +0100282022-03-07
29 - Added more parameter checks and OAuth2Client web-service tests.
margarethab19cfa22022-03-17 12:19:26 +0100302022-03-17
31 - Updated admin filter by using admin token and role checks.
margaretha525045e2022-03-18 16:22:43 +0100322022-03-18
33 - Added an OAuth2 admin API to delete expired/revoked access and refresh tokens.
margaretha78f90802022-03-28 08:23:20 +0200342022-03-28
35 - Updated admin filter (admintoken as a form param) and uses
36 it for the closing index reader API.
margaretha74110b72022-03-28 12:16:51 +020037 - Removed unused admin API: clear access token cache.
margarethae28cdd92022-03-29 09:42:08 +0200382022-03-29
39 - Updated and moved admin API: updateClientPrivilege to OAuth2AdminController
margarethad66a6832022-03-03 08:47:13 +010040
margaretha28f14af2022-02-04 08:50:25 +010041# version 0.65.1
42
margarethaad7de722022-03-01 09:23:14 +0100432022-03-01
44 - Restricts the field retrieval web-service to admin only.
margaretha28f14af2022-02-04 08:50:25 +010045
margaretha7c1f4282021-11-29 17:27:53 +010046# version 0.65
margarethaad1300b2021-12-13 17:36:29 +010047
48!!! includes security updates - please update all Kustvakt libraries
49!!! Please also update Krill to version 0.60.2 and Koral to version 0.38
50
margaretha7c1f4282021-11-29 17:27:53 +0100512021-12-02
margarethaad1300b2021-12-13 17:36:29 +010052 - Updated VC cache.
margarethaaec6b412021-12-03 15:42:33 +0100532021-12-03
margarethaad1300b2021-12-13 17:36:29 +010054 - Enabled listing system vc for authorized users.
margaretha326520b2021-12-08 17:58:09 +0100552021-12-08
margarethaad1300b2021-12-13 17:36:29 +010056 - Removed koralQuery and statistics from VC list.
57 - Added a web-service to retrieve KoralQuery of a VC
582021-12-10
59 - [security] Updated log4j libs due to CVE-2021-44228.
602021-12-13
61 - Fixed broken test suite.
margaretha2d523b62022-01-03 13:48:06 +0100622022-01-03
63 - [security] More log4j security updates
margaretha89adc1b2022-01-03 14:25:28 +010064 - Bumped unboundid-ldapsdk
margaretha9f2cff02022-01-03 15:42:45 +010065 - Updated tests.
margaretha9c6493e2022-01-25 11:54:29 +0100662022-01-25
67 - Added show-tokens option to the search API.
margaretha923c2072022-01-31 14:45:47 +0100682022-01-31
69 - Added an API retrieving fields of a virtual corpus.
margaretha7c1f4282021-11-29 17:27:53 +010070
71# version 0.64.1
margarethaad1300b2021-12-13 17:36:29 +010072
margaretha7c1f4282021-11-29 17:27:53 +0100732021-10-26
margarethaad1300b2021-12-13 17:36:29 +010074 - Bump Kustvakt and Krill versions.
75
margaretha7c1f4282021-11-29 17:27:53 +010076
margaretha15ff0292021-07-29 17:29:04 +020077# version 0.64
782021-07-29
margarethaad1300b2021-12-13 17:36:29 +010079 - Updated the change files and made a new version.
margarethacdfe9372021-08-13 11:10:51 +0200802021-08-12
margarethaad1300b2021-12-13 17:36:29 +010081 - Fixed errors due to missing query type and added tests.
margarethacdfe9372021-08-13 11:10:51 +0200822021-08-13
margarethaad1300b2021-12-13 17:36:29 +010083 - Fixed missing request entity.
84 - Updated the query service to enable editing query references.
margarethab3ecbe32021-08-16 12:55:54 +0200852021-08-16
margarethaad1300b2021-12-13 17:36:29 +010086 - Fixed creator param when storing query or VC by admins for
margarethab3ecbe32021-08-16 12:55:54 +020087 the system or other users.
margaretha15ff0292021-07-29 17:29:04 +020088
margaretha4bd61252021-06-11 14:11:31 +020089# version 0.63.2
902021-06-11
91 - Updated OAuth2 token length & secure random algorithm config.
margaretha885404d2021-06-11 18:34:33 +020092 - Added character set filter to random code generator, e.g. for client_id.
margaretha6f6911e2021-07-22 17:47:54 +0200932021-06-14
94 - Updated roleId and super client parameters.
952021-06-24
96 - Fixed broken test.
margarethafc5fab22021-07-26 12:17:39 +0200972021-07-22
98 - Updated cache settings and some loggings.
992021-07-26
100 - Replaced annotation parsing with restoring the annotation tables to the
margarethaad1300b2021-12-13 17:36:29 +0100101database.
margaretha15ff0292021-07-29 17:29:04 +0200102 - Moved cache config to the full config.
margarethaad1300b2021-12-13 17:36:29 +0100103
margarethae1228ab2021-02-22 11:51:38 +0100104# version 0.63.1
1052021-02-22
margaretha4a1a18c2021-02-26 10:19:54 +0100106 - Updated libraries (margaretha)
107 - Renamed virtual corpus to query (margaretha)
1082021-02-26
margaretha89bd8f52021-02-26 17:08:01 +0100109 - Added query access roles and fixed vc access roles (margaretha)
110 - Added delete query webservice and tests (margaretha)
margaretha35074692021-03-26 18:11:59 +01001112021-03-25
margaretha6f6911e2021-07-22 17:47:54 +0200112 - Updated Koral version for Info Controller (margaretha)
margaretha35074692021-03-26 18:11:59 +0100113 - Updated OAuth2 token list with token type and user clientId
margarethaad1300b2021-12-13 17:36:29 +0100114parameters (margaretha)
margarethabb1c1452021-03-29 15:22:18 +02001152021-03-29
margaretha6f6911e2021-07-22 17:47:54 +0200116 - Added client type in the client list web-service. Resolved #58 (margaretha)
margaretha3571f532021-04-19 14:53:23 +02001172021-04-19
118 - Updated OAuth2Client JSON definition and controller tests (margaretha)
margarethab0f97d02021-04-26 17:48:06 +02001192021-04-26
120 - Updated OAuth2 Client list (margaretha)
margaretha18259ce2021-05-03 17:31:58 +02001212021-04-30
122 - Updated parameters in the error responses of OAuth2 APIs for coherence (margaretha)
margaretha4f4b9ab2021-04-30 17:33:21 +0200123 - Updated OAuth2 API responses for coherence (margaretha)
margaretha4bd61252021-06-11 14:11:31 +02001242021-06-07
125 - Updated OAuth2 client dto (margaretha)
126
Akronbaa04702020-09-29 18:08:09 +0200127# version 0.63
Akrona26cbde2020-10-26 14:18:12 +010012826/10/2020
margaretha4a1a18c2021-02-26 10:19:54 +0100129 - Updated dependency of nimbus-jose-jwt and oauth2-oidc-sdk (diewald)
Akronbee031a2020-10-29 16:58:14 +010013029/10/2020
margaretha4a1a18c2021-02-26 10:19:54 +0100131 - Introduction of a query reference rewrite mechanism (diewald)
Akronf6945c42020-10-30 11:55:16 +010013230/10/2020
margaretha4a1a18c2021-02-26 10:19:54 +0100133 - Added database methods for storing query references (diewald)
margaretha77bf8b72020-12-04 13:47:48 +010013404/12/2020
margaretha4a1a18c2021-02-26 10:19:54 +0100135 - Fix hibernate dialect for SQLite. (margaretha)
margaretha5da1f9d2020-12-04 09:22:26 +010013604/12/2020
margaretha4a1a18c2021-02-26 10:19:54 +0100137 - Fix pipe warning. (margaretha)
margaretha0ddaed62021-01-21 17:10:33 +010013814/01/2021
margaretha4a1a18c2021-02-26 10:19:54 +0100139 - Updated Flyway (margaretha)
margaretha0ddaed62021-01-21 17:10:33 +010014021/01/2021
margaretha4a1a18c2021-02-26 10:19:54 +0100141 - Fixed running pipe and updated tests with mockserver (margaretha)
margaretha32475f72021-02-01 11:50:38 +010014201/02/2021
margaretha4a1a18c2021-02-26 10:19:54 +0100143 - Updated methods dependent to Antrl4-maven-plugin libraries (margaretha)
Akronda080152020-12-03 13:53:29 +010014405/02/2021
margaretha4a1a18c2021-02-26 10:19:54 +0100145 - Add query reference web-service (diewald,margaretha)
Akrondc6d73d2020-04-15 16:40:04 +020014610/02/2021
margaretha4a1a18c2021-02-26 10:19:54 +0100147 - Fixed problem with multiple desktop apps (diewald, margaretha)
margaretha5213ced2021-02-17 12:27:59 +010014812/02/2021
margaretha4a1a18c2021-02-26 10:19:54 +0100149 - Added listing available queries for users (margaretha)
margaretha5213ced2021-02-17 12:27:59 +010015017/02/2021
margaretha4a1a18c2021-02-26 10:19:54 +0100151 - Removed escaping for KoralQuery in VC and query reference responses (margaretha)
152 - Added query and query language in virtual corpus table (margaretha)
margaretha479a4472021-02-18 12:00:55 +010015318/02/2021
margaretha4a1a18c2021-02-26 10:19:54 +0100154 - Set corpus access public for stored query (margaretha)
margarethaa8c364b2021-02-19 13:00:31 +010015519/02/2021
margaretha4a1a18c2021-02-26 10:19:54 +0100156 - Enabled API info web-service (margaretha)
157
Akronbaa04702020-09-29 18:08:09 +0200158
margaretha2618beb2020-01-24 14:12:28 +0100159# version 0.62.4
16024/01/2020
margaretha4a1a18c2021-02-26 10:19:54 +0100161 - Removed salt from config and updated config files (margaretha)
margaretha6aee1972020-02-03 14:34:06 +010016203/02/2020
margaretha4a1a18c2021-02-26 10:19:54 +0100163 - Added an admin API for clearing access token cache (margaretha)
margaretha0afd44a2020-02-05 10:49:21 +010016405/02/2020
margaretha4a1a18c2021-02-26 10:19:54 +0100165 - Added a config properties for a long-time access token expiry
166 and excluded refresh tokens for public clients in OAuth2 token
167 responses (margaretha)
168 - Removed client authentication from the client deregistration and
169 client-secret reset APIs (margaretha)
Akron39326ee2020-03-04 10:17:34 +010017004/03/2020
margaretha4a1a18c2021-02-26 10:19:54 +0100171 - Updated the sample index (diewald)
Akron39326ee2020-03-04 10:17:34 +0100172
margaretha1d1c73e2019-12-03 18:07:28 +0100173# version 0.62.3
17403/12/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100175 - Implemented pipe extension in the search API (margaretha)
margaretha52ee9e32019-12-11 16:36:14 +010017611/12/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100177 - Added errors when requesting VC in caching process (margaretha,
178 resolved #47)
margarethaed2ee242019-12-12 17:34:18 +010017912/12/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100180 - Added support for multiple cq parameters (margaretha, resolved #46)
margaretha137d4ee2019-12-13 14:49:15 +010018113/12/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100182 - Handled pipe errors and added tests (margaretha)
margarethad8aa1352019-12-19 11:04:41 +010018319/12/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100184 - Updated create update user-group API (margaretha)
margarethad3a46ec2019-12-20 12:18:44 +010018520/12/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100186 - Removed transactional annotations from simple select queries (margaretha)
187 - Updated free resource controller (margaretha)
margaretha89273b52020-01-20 12:54:58 +010018815/01-2020
margaretha4a1a18c2021-02-26 10:19:54 +0100189 - Added additional statistic figures to virtual corpus info API
190 response (margaretha)
191
margaretha89836f32019-10-17 10:50:50 +0200192# version 0.62.2
19317/10/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100194 - Handled vulnerability CVE-2019-17195. (margaretha)
margarethada5a6ab2019-11-08 10:06:05 +01001958/11/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100196 - Added user-group name pattern (margaretha, issue #33)
margarethaa18ab2b2019-11-11 12:55:26 +010019711/11/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100198 - Updated user group service paths and replaced groupId with groupName
199 (margaretha, resolved #33)
margarethaca7cff82019-11-12 12:06:37 +010020012/11/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100201 - Removed UserGroupJson & updated listUserGroups and createUserGroup
202 services (margaretha)
203 - Added prefixes to username and groupname parameters in service paths
204 (margaretha, resolved #35)
margaretha85967642019-11-13 13:35:33 +010020513/11/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100206 - Added tests for issue #43 (margaretha)
margarethac20cd342019-11-14 10:59:39 +010020714/11/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100208 - Added client description and URL to list-authorized-clients service
209 (margaretha, close #53)
210 - Implemented a service to list clients registered by a user (margaretha,
211 close #52)
212 - Added a check for OAuth2 client, VC, and group name length (margaretha)
margaretha77e74742019-11-15 12:15:20 +010021315/11/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100214 - Merged list authorized client and list registered client services
215 (margaretha)
margaretha43aceb52019-11-21 12:58:53 +010021621/11/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100217 - Added a service to list active refresh tokens of a user (margaretha)
218 - Added username filtering to token revocation service via super client
219 (margaretha)
margaretha7497adf2019-11-26 13:13:57 +010022026/11/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100221 - Added a service to revoke a single refresh token via super client
222 (margaretha)
margaretha89836f32019-10-17 10:50:50 +0200223
margaretha2544cdf2019-07-08 11:39:43 +0200224# version 0.62.1
22508/07/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100226 - Added tests for public metadata response in search api (margaretha,
227 issue #43)
228 - Disabled some tests of unused/disabled web-services (margaretha)
margaretha93e602e2019-08-07 15:19:56 +020022907/08/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100230 - Fixed missing scopes after requesting access token with refresh token
231 (margaretha)
232 - Fixed post requests with status OK and empty body (margaretha)
margaretha0e1fc552019-08-08 15:31:01 +020023307/08/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100234 - Added users to hidden group when searching in a published VC (margaretha,
235 resolved #40)
margarethabdd47ac2019-08-15 14:22:38 +020023615/08/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100237 - Updated the response statuses of VC PUT requests (margaretha)
margaretha2544cdf2019-07-08 11:39:43 +0200238
margaretha3ccaeb72019-02-28 18:40:22 +0100239# version 0.62
24028/02/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100241 - Removed old VC controllers and updated tests (margaretha, issue #34)
242 - Updated VC access controllers (margaretha)
margaretha3d55b002019-03-19 12:00:44 +010024319/03/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100244 - Added close index controller (margaretha)
margaretha4b0eb3d2019-04-11 10:25:56 +020024511/04/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100246 - Fixed unknown authentication scheme, missing VC entity, and parameter
247 checker (margaretha)
248 - Fixed sharing unknown VC, updating corpusQuery, and handling non-
249 unique group name and unknown VC access (margaretha)
margaretha03ae28d2019-06-27 14:20:30 +020025027/06/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100251 - Handled LDAP errors, fixed #45 (margaretha)
margaretha47a72a82019-07-03 16:00:54 +020025203/07/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100253 - Added re-caching VC at closing-index service, resolved #44 (margaretha)
254 - Changed the response media-type of authentication controllers (margaretha)
255 - Fixed bugs: allow guest to retrieve system VC,
256 remove VC from cache when it is deleted (margaretha)
margaretha3a579402019-07-04 15:40:46 +020025704/07/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100258 - Updated VC name pattern and tests (margaretha)
margaretha3ccaeb72019-02-28 18:40:22 +0100259
margaretha85273f12019-02-04 18:13:17 +0100260# version 0.61.6
26104/02/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100262 - Fixed SQL data and merged oauth2_client_url and oauth2_client (margaretha)
263 - Updated client deregistration behavior (margaretha)
margaretha39cec602019-02-05 19:48:49 +010026405/02/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100265 - Added delete-group-by-name controller (margaretha)
266 - Added unique index to group name (margaretha)
margaretha798e8bd2019-02-06 15:48:58 +010026706/02/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100268 - Updated a user setting test using array for multiple values (margaretha)
269 - Added metadata controller tests (margaretha)
margaretha2558a7c2019-02-18 16:48:54 +010027018/02/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100271 - Fixed tests (margaretha)
272 - Updated handling errors from Koral (margaretha)
margaretha852a0f62019-02-19 12:14:30 +010027319/02/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100274 - Added fields to metadata controller (margaretha, issue #39)
margaretha85273f12019-02-04 18:13:17 +0100275
margaretha79d738c2018-12-17 16:45:47 +0100276# version 0.61.5
margaretha5c67dd52018-12-18 17:27:05 +010027717/12/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100278 - Added a search timeout test (margaretha)
margaretha5c67dd52018-12-18 17:27:05 +010027918/12/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100280 - Updated tests using BeanConfigTest to use SpringJerseyTest (margaretha)
margaretha0b903912019-01-08 17:41:39 +010028108/01/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100282 - Improved predefined vc caching (issue #28, margaretha)
margaretha398f4722019-01-09 19:07:20 +010028309/01/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100284 - Added comments (margaretha)
285 - Updated code structure (margaretha)
margaretha2ea9a1e2019-01-11 16:37:21 +010028611/01/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100287 - Degraded API version to 1.0 (margaretha)
288 - Added OAuth2 client info tests (margaretha)
margaretha8c203962019-01-14 17:01:33 +010028914/01/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100290 - Added retrieveVCByName and deleteVCByName controllers (margaretha)
margaretha4af3f1e2019-01-16 17:53:26 +010029116/01/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100292 - Added a PUT request for both creating and editing vc (margaretha)
293 - Added aliases to some VC controllers (margaretha)
294 - Merged VC access list controllers (margaretha)
margaretha0866a532019-01-22 17:52:40 +010029521/01/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100296 - Removed codes related to user registration & password management (margaretha)
margaretha0866a532019-01-22 17:52:40 +010029722/01/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100298 - Added create, edit, retrieve user default setting controllers (margaretha)
margaretha62c06762019-01-23 16:58:30 +010029922/01/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100300 - Updated default setting controllers & added tests (margaretha)
301 - Added delete key in setting controllers (margaretha)
margaretha6cd27f32019-01-24 14:47:47 +010030223/01/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100303 - Added default setting key validation (margaretha)
304 - Fixed UserdataTest (margaretha)
margaretha4a338122019-01-25 16:02:18 +010030524/01/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100306 - Added default setting key validation & fixed UserdataTest (margaretha)
30725/01/2019
308 - Added VC reference and MapUtil tests (margaretha)
margaretha4fa4b062019-01-28 19:43:30 +010030928/01/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100310 - Fixed username verification in DefaultSettingService (margaretha)
311 - Added foundry rewrite with user default setting (margaretha)
312 - Added default foundry for morphology layer (margaretha)
margaretha1b8bc4d2019-01-29 12:19:54 +010031329/01/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100314 - Fixed share VC type (margaretha)
315 - Added delete setting controller (margaretha)
316 - Handled "no resource found" cases (margaretha, issue #37)
margarethabab55d52019-01-30 16:09:07 +010031730/01/2019
margaretha4a1a18c2021-02-26 10:19:54 +0100318 - Added server shutdown description in readme (margaretha)
margaretha79d738c2018-12-17 16:45:47 +0100319
margaretha2df06602018-11-14 19:10:30 +0100320# version 0.61.4
32114/11/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100322 - Integrated lite and full services and controllers in core (margaretha)
margaretha6f0b7382018-11-21 17:42:02 +010032321/11/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100324 - Updated OAuth2 refresh token request to create a new refresh token and
325 revoke the old one per request (margaretha)
margarethae72355a2018-11-28 16:53:09 +010032628/11/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100327 - Updated NamedVCLoader to delete existing VC in DB (margaretha)
328 - Handled storing cached VC with VC reference (margaretha)
margaretha230effb2018-11-29 17:28:18 +010032929/11/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100330 - Added a controller for listing user clients having active refresh tokens
331 (margaretha)
margarethadda4ef72018-12-06 14:20:51 +01003326/12/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100333 - Added debug flags to mitigate log4j debugging performance (margaretha)
334 - Fixed KoralNode at() method (margaretha)
margarethac750cbb2018-12-11 12:47:02 +010033511/12/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100336 - Implemented revoking all tokens of a user client via a super client
337 (margaretha)
338 - Removed document controllers and KustvaktResource (margaretha)
339 - Fixed rewrite bugs (updated rewriteQuery & KoralNode) (margaretha)
margaretha420db0e2018-12-11 15:04:19 +0100340
margaretha4a1a18c2021-02-26 10:19:54 +0100341
margaretha51e5e3f2018-10-17 15:10:03 +0200342# version 0.61.3
34317/10/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100344 - Updated NamedVCLoader to be optional (margaretha)
345 - Updated annotation tables & implemented key-value structure (margaretha)
346 - Added annotation parser for annotation data from kalamar (margaretha)
347 - Implemented parsing free resource info from json (margaretha)
margaretha3da7cd32018-10-22 17:42:52 +020034822/10/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100349 - Updated jetty, spring and hibernate versions (margaretha)
350 - Fixed the order of annotation keys and values, and added tests (margaretha)
351 - Fixed resource DAO & added tests (margaretha)
margaretha137d4ee2019-12-13 14:49:15 +010035224/10/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100353 - Fixed query serialization service (margaretha)
354 - Added "highlights" parameter to matchInfo controller (margaretha)
355 - Added "fields" parameter to search controllers (margaretha)
356 - Integrated lite controllers, services and tests in full version (margaretha)
margaretha439ad572018-10-29 12:15:28 +010035729/10/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100358 - Moved javax.servlet-api to core (margaretha)
Akron63656052018-11-07 12:20:13 +010035907/11/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100360 - OpenJDK8u181-workaround (see Debian Bug report #911925; diewald)
margaretha339fd2e2018-11-13 12:14:53 +010036113/11/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100362 - Added Shutdown handler to Jetty server (margaretha)
363 - Fixed storing VC order in NamedVCLoader (margaretha)
margaretha51e5e3f2018-10-17 15:10:03 +0200364
margaretha6ef00dd2018-09-12 14:06:38 +0200365# version 0.61.2
36612/09/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100367 - Added various log4j2 configurations (margaretha)
margaretha563aabe2018-09-13 20:39:45 +020036813/09/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100369 - Implemented VirtualCorpusRewrite (margaretha)
margaretha9e53bb22018-09-14 19:39:15 +020037014/09/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100371 - Fixed SpringJerseyTest ApplicationContext (margaretha)
372 - Handled VCRef with username in VirtualCorpusRewrite (margaretha)
373 - Enabled VCReferenceTest in maven test suite (margaretha)
margarethaf7abb362018-09-18 20:09:37 +020037418/09/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100375 - Handled unique constraints / inserting duplicate items to DB (margaretha)
376 - Added a controller for editing user group member roles (margaretha)
margaretha488e04b2018-09-19 18:17:45 +020037719/09/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100378 - Fixed cached-VC ref with username (margaretha)
margaretha6ef00dd2018-09-12 14:06:38 +0200379
margarethaee0cbfe2018-08-28 17:47:14 +0200380# version 0.61.1
38128/08/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100382 - Added API URL versioning (margaretha)
383 - Deactivated IdRewrite (margaretha)
384 - Fixed kustvakt controller (margaretha)
margaretha7926adc2018-08-30 13:45:33 +020038530/08/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100386 - Fixed root packages & added api version properties in kustvakt.conf
387 (margaretha)
388 - Fixed versioning in SearchController (margaretha)
389 - Added API versioning tests (margaretha)
margarethaee0cbfe2018-08-28 17:47:14 +0200390
margaretha7f5071f2018-08-14 15:58:51 +0200391# version 0.61.0
margaretha1b320452018-08-02 16:56:25 +0200392
margaretha0666ddb2018-08-02 16:54:04 +020039302/08/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100394 - Added VC reference tests (margaretha)
395 - Implemented loading and caching named VCs (margaretha)
39603/08/2018
397 - Implemented OAuth2 revoke token (margaretha)
398 - Updated OAuth2 refresh token implementation (margaretha)
39914/08/2018
400 - Implemented revoke all OAuth2 access tokens and authorization codes of
401 client users when deregistering/deleting a client (margaretha)
402 - Fixed update OAuth2 access token (margaretha)
403 - Implemented reset client secret (margaretha)
404 - Fixed revoking latest access token when refreshing OAuth2 access token
405 (margaretha)
margaretha835178d2018-08-15 19:04:03 +020040615/08/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100407 - Implemented OAuth2 client info controller (margaretha)
408 - Implemented update OAuth2 client privilege controller for admins
409 (margaretha)
410 - Implemented unlimited authorization scope for super clients with OAuth2
411 password grant (margaretha)
412 - Marked native clients implementation to deprecated in favour of super
413 clients (margaretha)
414 - Enabled using Bearer tokens as user authentication tokens (Authorization
415 header value) for many controllers including OAuth2 controllers (margaretha)
margarethaf0085122018-08-16 16:19:53 +020041616/08/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100417 - Implemented degrading super clients (margaretha)
418 - Improved and added OAuth2 tests (margaretha)
margaretha2e1781f2018-08-21 11:45:26 +020041921/08/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100420 - Added VC name pattern check (margaretha)
margaretha6ad08b42018-08-22 18:33:54 +020042122/08/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100422 - Implemented loading VC from gz files (margaretha)
423 - Updated OAuth2 authorization codes' & access tokens' expiry check
424 (margaretha)
42523/08/2018
426 - Updated RefreshToken implementations with separate DB tables (margaretha)
427 - Allows multiple access tokens per refresh token (margaretha)
margarethac7196d22018-08-27 14:20:03 +020042827/08/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100429 - Added statistic with VC reference tests (margaretha)
430 - Fixed OAuth2 SQL files (margaretha)
margaretha45211af2018-08-28 12:49:07 +020043128/08/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100432 - Added c3p0 datasource configuration to Spring default-config-xml
433 (margaretha)
434 - Added running Kustvakt server with custom spring config in the readme
435 (margaretha)
436 - Removed old OAuth2 codes (margaretha)
437 - Moved non-config test codes to misc (margaretha)
438
margaretha7f5071f2018-08-14 15:58:51 +0200439
440# version 0.60.5
441
44209/07/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100443 - Added service layer to the search controller (margaretha)
444 - Added OAuth2 scope checking in search and VC controllers (margaretha)
445 - Added handling OAuth2 bearer token for VC access and User group
446 controllers (margaretha)
447 - Added default scope to password grant (margaretha)
margaretha7f5071f2018-08-14 15:58:51 +020044810/07/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100449 - Made createBasicAuthorizationHeaderValue static (margaretha)
450 - Added store access token in openID token service (margaretha)
451 - Fixed empty scope in openID authorization and token service (margaretha)
452 - Implemented storing authorization code in cache (margaretha)
margaretha137d4ee2019-12-13 14:49:15 +010045311/07/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100454 - Fixed authentication time in authentication controller (margaretha)
455 - Added OAuth2 access token tests (margaretha)
margaretha137d4ee2019-12-13 14:49:15 +010045612/07/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100457 - Updated maven surefire setting for faster test suite runtime (margaretha)
458 - Implemented refreshing OAuth2 access token (margaretha)
margaretha137d4ee2019-12-13 14:49:15 +010045926/07/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100460 - Fixed issue #27 (margaretha)
margaretha137d4ee2019-12-13 14:49:15 +010046102/08/2018s
margaretha4a1a18c2021-02-26 10:19:54 +0100462 - Fixed clientId encoding in OAuth2ClientControllerTest (margaretha)
margaretha7f5071f2018-08-14 15:58:51 +0200463
margaretha4a1a18c2021-02-26 10:19:54 +0100464
margaretha7f5071f2018-08-14 15:58:51 +0200465# version 0.60.4
466
Akrond5058162018-07-05 11:17:15 +020046705/07/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100468 - implemented OAuth2 authorization code request with OpenID Authentication
469 (margaretha)
470 - enabled OAuth2 authorization without OpenID authentication using Nimbus
471 library (margaretha)
472 - implemented response handler for OpenID authentication errors in authorization
473 requests (margaretha)
474 - added tests regarding OpenID authentication in authorization requests
475 (margaretha)
476 - implemented OAuth2 authorization error response via redirect URI instead of
477 JSON (margaretha)
478 - added state to OAuth2 authorization error response (margaretha)
479 - implemented OpenID token service for authorization code flow (margaretha)
480 - implemented signed OpenID token with default algorithm RSA256 (margaretha)
481 - implemented JSON Web Key (JWK) set web-controller listing kustvakt public
482 keys (margaretha)
483 - implemented OpenId configuration (margaretha)
484 - added authentication time and support for auth_time in id_token (margaretha)
485 - implemented support for nonce and max_age parameters in OpenID authentication
486 (margaretha)
487 - implemented OAuth2 token request with password grant using Nimbus library
488 (margaretha)
489 - updated redirect URI validator (margaretha)
490 - updated client registration requirement to allow desktop applications
491 (margaretha)
492 - fixed RSA key configuration (margaretha)
493 - merged OAuth2 client deregistration controllers (margaretha)
494 - fixed OAuth2 client unique URL-hashcode (margaretha)
495 - migrated logging to log4j 2 and adapted java.util.logging to log4j(margaretha)
496 - Added support for unrestricted corpus statistics (ndiewald)
497 - updated paths of user-group deletion-controllers (margaretha)
498 - Do not pass broken queries to Krill (diewald)
499 - added OAuth2 token request with client authentication via Authorization
500 header (margaretha)
501 - added port checking in test suite (margaretha)
502
margaretha7f5071f2018-08-14 15:58:51 +0200503# version 0.60.3
504
margaretha235a6802018-06-06 19:21:53 +020050506/06/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100506 - improved user authentication by using authentication filter for authorization
507 code request (margaretha)
508 - limited client authentication to client id checking in authorization code
509 request (margaretha)
510 - added user_id in the oauth2_access_token database table (margaretha)
511 - implemented OAuth2Authentication provider for token context management
512 (margaretha)
513 - added parameter checking for authorization DAO (margaretha)
514 - added controller tests using OAuth2 access token (margaretha)
515 - added database tables for MySQL (margaretha)
516 - updated JWT library and related codes (margaretha)
517
margaretha7f5071f2018-08-14 15:58:51 +0200518# version 0.60.2
519
margarethabe4c5c92018-05-03 18:55:49 +020052003/05/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100521 - implemented OAuth2 client registration (margaretha)
522 - implemented OAuth2 client authentication (margaretha)
523 - changed virtual corpus search to retrieval (margaretha)
524 - implemented public client deregistration task (margaretha)
525 - added client registration and deregistration tests (margaretha)
526 - implemented confidential client deregistration task (margaretha)
527 - fixed storing client secret (margaretha)
528 - implemented OAuth2 response handler (margaretha)
529 - implemented OAuth2 request access token with client credentials grant
530 (margaretha)
531 - implemented OAuth2 request access token with resource owner password grant
532 (margaretha)
533 - implemented OAuth2 authorization code request (margaretha)
534 - added OAuth2 error codes (margaretha)
535 - added OAuth2 authorization, scope and access token tables for SQLite
536 (margaretha)
537 - implemented OAuth2 authorization, scope and access token DAO (margaretha)
538 - implemented OAuth2 request access token with authorization code grant
539 (margaretha)
540 - added setting default scopes in the config file (margaretha)
541 - fixed loading spring config multiple times in the test suite (margaretha)
542 - added SQLite created_date trigger for access token (margaretha)
543 - added a join table for access token scopes (margaretha)
544 - added access scopes handling (margaretha)
545 - added tests about request token with authorization code (margaretha)
546
margaretha7f5071f2018-08-14 15:58:51 +0200547# version 0.60.1
548
margaretha18533fd2018-03-28 16:01:06 +020054928/03/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100550 - added admin-related SQL codes (margaretha)
551 - updated AdminDao (margaretha)
552 - added optional username query parameter to group list controller (margaretha)
553 - fixed non hierarchical URI of kustvakt conf files (margaretha)
554 - added delete group member triggers (margaretha)
555 - added list user-group by username and status for system admin (margaretha)
556 - added user-group status in user-group DTO (margaretha)
557 - added check for hidden groups in user-group tests (margaretha)
558 - added database trigger test on deleting members when deleting group
559 (margaretha)
560 - renamed VC type PREDEFINED to SYSTEM (margaretha)
561 - added VC list controller for system admin (margaretha)
562 - added VC controller tests with for system admin (margaretha)
563 - added hidden access removal when deleting published VC (margaretha)
564 - added check for hidden groups in VC controller tests (margaretha)
565 - added search user-group controller (margaretha)
566 - removed createdBy from VirtualCorpusJson (margaretha)
567 - moved member role setting from the invitation phase to the after-subscription
568 phase (margaretha)
569 - added member role removal after deleting members (margaretha)
570 - added add and delete member role controllers (margaretha)
571
margaretha7f5071f2018-08-14 15:58:51 +0200572# version 0.60
573
margaretha97bb3bd2018-03-14 18:41:14 +010057414/03/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100575 - set up mail settings using localhost port 25 (margaretha)
576 - added mail template in kustvakt configuration (margaretha)
577 - added mail settings to readme (margaretha)
578 - disabled email notification for auto group (margaretha)
579 - added metadata retrieval (diewald)
580 - enabled custom implementation for email address retrieval (margaretha)
581 - removed old policy and deprecated code (margaretha)
582 - moved authentication related code to /full (margaretha)
583 - added userRoles attribute to UserGroupDto. (margaretha)
584 - fixed sqlite trigger (margaretha)
585 - fixed member exist error message (margaretha)
586 - fixed member invitation to join deleted group (margaretha)
587 - added checking deleted group (margaretha)
margarethaa86b1412018-02-21 20:40:35 +0100588
margaretha7f5071f2018-08-14 15:58:51 +0200589# version 0.59.10
margaretha4a1a18c2021-02-26 10:19:54 +0100590
margarethaaecee1b2018-02-20 14:44:21 +010059120/02/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100592 - added sort VC by id (margaretha)
593 - added test cases regarding VC sharing (margaretha)
594 - implemented withdraw VC from publication (margaretha)
595 - added Changes file (margaretha)
596 - implemented add/invite users to group (margaretha)
597 - implemented delete user-group and member tasks (margaretha)
598 - added userMemberStatus in group lists (margaretha)
599 - updated and added SQL test data (margaretha)
600 - added user group related tests (margaretha)
601 - implemented custom configuration for deleting user groups and members (margaretha)
602 - updated library versions and java environment (margaretha)
603 - added expiration time check for member invitation (margaretha)
604 - moved .properties files (margaretha)
605 - merged changelog file to Changes (margaretha)
606 - updated status codes and error messages to be more detailed (margaretha)
607 - testing mail implementation using embedded jetty jndi (margaretha)
608 - fixed collection rewrite regarding OR operation with other fields
609 (margaretha)
610 - implemented sending mail using spring injection and removed jetty jndi
611 (margaretha)
612 - fixed unrecognized application/json (margaretha)
613 - fixed and updated velocity template (margaretha)
614
margaretha7f5071f2018-08-14 15:58:51 +0200615# version 0.59.9
616
margarethac9f1dfa2018-02-07 17:50:33 +010061719/01/2018
margaretha4a1a18c2021-02-26 10:19:54 +0100618 - restructured basic authentication (margaretha)
619 - fixed AuthenticationException to include authentication scheme (margaretha)
620 - fixed rewrite redundancy in collection rewrite (margaretha)
621 - fixed foundry rewrite for constituents (margaretha)
622 - introduced authentication methods, schemes and tokens (margaretha)
623 - implemented collection rewrite with multiple licenses (margaretha)
624 - fixed foundry rewrite for korap span without wrap node (margaretha)
625 - implemented list user group (margaretha)
626 - implemented delete VC task (margaretha)
627 - implemented create user-group, subscribe to user-groups, unsubscribe to
628 user-groups tasks(margaretha)
629 - fixed handling JSON mapping exception for missing enums (margaretha)
630 - implemented list VC task (margaretha)
631 - added KoralQuery in VC lists (margaretha)
632 - implemented edit VC task (margaretha)
633 - implemented publish VC task (margaretha)
634 - implemented share VC task (margaretha)
635 - implemented list only owned VC task (margaretha)
636 - implemented list VC access task (margaretha)
637 - implemented search VC by id task (margaretha)
638 - implemented delete VC access (margaretha)
639 - implemented search for project VC (margaretha)
640 - added search VC related tests (margaretha)
641 - removed PredefinedUserGroup.ALL and related codes (margaretha)
642 - implemented search for published VC (margaretha)
643
margaretha7f5071f2018-08-14 15:58:51 +0200644# version 0.59.8
645
margarethac9f1dfa2018-02-07 17:50:33 +010064621/09/2017
margaretha4a1a18c2021-02-26 10:19:54 +0100647 - restructured statistics service (margaretha)
648 - removed deprecated loader codes and tests (margaretha)
649 - removed old Spring java configurations (margaretha)
650 - implemented entity classes for the new database (margaretha)
651 - added MySQL codes regarding VC and for testing (margaretha)
652 - added dao methods regarding VC (margaretha)
653 - added similar SQL codes (to MySQL) for sqlite (margaretha)
654 - added dao methods regarding user groups (margaretha)
655 - restructured web-service codes into controller and logic/business-service
656 (margaretha)
657 - implemented user role and privilege, and added tests (margaretha)
658 - prepared test suite using new database (margaretha)
659 - implemented UserGroupDao and tests (margaretha)
660 - fixed missing exceptions in JsonUtils (margaretha)
661 - restructured web filters and authentication codes (margaretha)
662 - implemented create/store VC (margaretha)
663 - fixed collection rewrite bug regarding availability with operation or
664 (margaretha)
margarethac9f1dfa2018-02-07 17:50:33 +0100665
margaretha7f5071f2018-08-14 15:58:51 +0200666# version 0.59.7
667
margarethac9f1dfa2018-02-07 17:50:33 +010066813/10/2016
margaretha4a1a18c2021-02-26 10:19:54 +0100669 - MOD: updated search to use new siglen (diewald)
670 - MOD: fixed matchinfo retrieval in light service (diewald)
margarethac9f1dfa2018-02-07 17:50:33 +0100671
67205/05/2015
margaretha4a1a18c2021-02-26 10:19:54 +0100673 - ADD: rest test suite for user service (hanl)
674 - MOD: setup parameter modification (hanl)
675 - ADD: oauth2 client unique constraint (hanl)