blob: 5c6eb172f6b964455d595684cc72101bee23ea01 [file] [log] [blame]
margarethaf6f6c3c2024-06-11 10:51:06 +02001# version 0.73.3-SNAPSHOT
2
3- Remove corpusQuery param in the statistics web-service (close #758).
4
margaretha1ef2a032024-06-11 11:39:57 +02005# version 0.73.2
margaretha1668d872024-05-22 08:50:49 +02006
margaretha46e2c952024-05-23 09:09:54 +02007- Added tests for the DNB scenario with custom max match
8 and context size. (#745)
margarethad709be52024-06-05 11:31:41 +02009- Cleaned up named-vc.
10- Updated tests using the old match info web-services (#757)
margarethac7f8f802024-06-05 12:52:45 +020011- Added deprecation warning for the old matchInfo service (#757)
margarethad151c302024-06-10 10:50:42 +020012- Fixed empty named VC path in configuration (solves #754)
margaretha60b65d42024-06-06 09:05:16 +020013- Restrict registration info for plugins (solves #572)
margaretha1ef2a032024-06-11 11:39:57 +020014- Removed redirect uri from InstalledPluginDto & updated tests.
margaretha46e2c952024-05-23 09:09:54 +020015
margaretha21879752024-04-22 12:12:58 +020016# version 0.73.1
margaretha10618a02024-02-21 11:06:01 +010017
margaretha387e4682024-03-22 11:26:29 +010018- Fixed jakarta validation error.
19- Added openapi doc (#744)
20- Moved service.properties to src/main/resources/properties
21- Moved free-resources.json to src/main/resources/json
22- Enables inputting free-resources.json from data folder
margarethad77ee712024-03-22 12:35:30 +010023- Changed loading external kustvakt.conf and jdbc.properties
24 to use /data folder (#598)
margaretha05818b42024-04-10 13:10:02 +020025- Added KoralQuery check when updating VC (solved #676)
margarethada1571c2024-04-15 13:21:32 +020026- Setup vc-cache in the data folder (#598)
27- Changed generating adminToken in the data folder (#598).
margaretha94b46fe2024-04-16 11:15:00 +020028- Moved disk store path cache_store into the data folder (#598)
margaretha0b17fac2024-04-22 09:48:10 +020029- Fixed invalid signature of the uber jar.
margaretha390f37d2024-04-22 12:07:34 +020030- Updated configurations of the lite version to use the
31 data folder (#598)
margaretha67440722024-04-25 13:27:02 +020032- Setup logs files to be generated inside the data folder (#598)
margaretha10618a02024-02-21 11:06:01 +010033
margaretha28a53d12024-02-20 12:57:38 +010034# version 0.73
margarethafbfe2872024-01-04 23:29:28 +010035
margarethab06377e2024-01-30 11:06:35 +010036- Moved the content of the full folder to the root folder
37- Removed Piwik
38- Removed unused libraries
39- Cleaned up spring configs
40- Updated Krill and Koral with new groupIds
41- Updated Github workflow
margaretha28a53d12024-02-20 12:57:38 +010042- Updated search Krill and removed Lucene
43- Updated readme
margarethab06377e2024-01-30 11:06:35 +010044
45# version 0.72
margarethafbfe2872024-01-04 23:29:28 +010046
47- Replaced javax.ws to jakarta.ws namespace (#648)
48- Upgrading Jersey 2.40 to 3.x (#646)
49- Updated Spring 5.x to 6.x and jetty 9.x to 11.x (#645)
50- Replaced javax.persistence with jakarta.persistence (#648)
51- Migrate Hibernate 5 to 6 (#649)
52- Fix missing placeholders
53- Fixed conflicting jackson-jarxrs
54- Fixed conflicting commons-logging and spring jcl
55- Replaced javax.servlet with jakarta.servlet (#648)
56- Updated authorization services using Nimbus (#650)
57- Fixed BlockingFilter by replacing javax.annotation.Priority
58 with jakarta.annotation.Priority (#659, #648)
59- Replaced javax.annotation with jakarta.annotation
60- Enabled legacy support for authorization POST request
61- Changed OAuth2 token request using Nimbus (#650)
62- Removed Apache Oltu API from token requests (#650)
63- Removed OpenID
64- Fixed clearing cache
65- Fix JettyServerTest, init package, and some java docs.
66- Make scope extraction more flexible.
67- Updated token response using Nimbus (#650)
68- Remove Oltu request and validator implementations (#650)
69- Updated OAuth2 response handler (#650)
70- Fixed ShutdownHandler (fixed #708)
71- Fixed issues with multi-release jar (#706, #708)
72
73
74# version 0.71.1
75
76- Removed auditing (#611)
77- Removed old database configurations (#612)
78- Removed old tests
79- Removed unnecessary caches and methods in the authentication interface
80- Added total result cache (#599)
81- Fixed missing project.version in info web-service
82- Make sure totalResults and other numeric results are numbers (Kupietz)
83- Introduce CQP query language in Koral 0.41
84- Changed DB connection (fixed #670)
85- Resolved duplicate libraries
86- Fixed testing expiry access token
87- Fix lombok compile warning
88- Ensure the order of clean token tests.
89
90# version 0.71
91
92- Renamed entity and service packages in core
93- Renamed web.controller package in core
94- Moved SearchNetworkEndpoint to core.service package
95- Merged lite into full
96- Merged core into full
97
98
99# version 0.70.1
100
101- Added data folder containing super_client_info and database
102 for mounting into docker
103- Added an error for missing redirect uri in a token request
104 when it has been included in the authorization request.
105- Added tests for VC sharing and for OAuth2 client using VC services
106- Added and updated VC controller tests
107- Moved hibernate.properties
108- Added maximum number of user persistent virtual corpora and queries
109
110# version 0.70
111
112- Support token array in matchinfo (fixes #570; diewald)
113- Updated VC list API and deprecated owner VC list (addressed #580)
114- Added user info web-service (solved #566)
115- Implemented configurable resource filters for search and match
116 info APIs (#539)
117- Added getting username from LDAP (#568)
118- Disabled LDAP auth provider and token API in the auth filter (#587)
119- Added LDAP log for users without idsC2Profile
120- Fixed log4j2 properties.
121
122
123# version 0.69.3
124
125- Moved the service path of VC admin services to admin/vc (closed #543)
126- Added an admin service to load and cache system vc (solved #268)
127- Move oauth2 admin service path (closed #544)
128- Excluded admin service to load-cache VC from the test suite
129- Fixed refresh token expiry test
130- Fixed scope check in OAuth2 token request with refresh token
131
132# version 0.69.2
133
1342022-12-05
135- Upgrade version for E2E-simplified Docker images (diewald)
1362023-01-27
137- Updated client info API (replaced user authorization requirement with super
138 client authentication)
1392023-01-30
140- Made scope param required in authorization request (solved #508)
1412023-01-31
142- Allowed OAuth2 clients to use localhost as redirect URIs.
1432023-02-03
144- Fixed content-type in error responses by changing it to application/json
1452023-02-06
146- Allow admin access using admin token for the clean token API
1472023-02-10
148- Use admin filter instead of OAuth2 ADMIN scope
149- Added a plugin test.
1502023-02-15
151- Moved user-group retrieval API to UserGroupAdminController
152 and changed the service path URL of UserGroupAdminController.
1532023-02-20
154- Deprecate API token (JWT) web-service
155- Fixed Slf4J binding
1562023-02-28
157- Exclude junit5 dependencies to keep test runner in Eclipse using JUnit 4
1582023-03-06
159- Fixed testing refresh token expiry.
160
161
162# version 0.69.1
163
164- Upgrade version for docker including indexer (diewald)
165
166
167# version 0.69
168
169 - Migrated to Java 11 and Jersey 2
170 - Updated dependencies
171 - Use LDAP authentication in Kustvakt-full oauth2 example config (kupietz)
172
173
174# version 0.68
175
1762022-05-25
177 - Added a new API: list plugins (e.g for marketplace)
178 - Added redirect URI validation in authorization request (addressed #374)
179 - Handled user-defined refresh token expiry (added in client info and
180 list API response)
181 - Added installed_plugins table
182 - Added a new API: install plugin
183 - Handled redundant plugin installation
184 - Handled super client id in plugin installation
185 - Deprecated UserClientDto and uses ClientinfoDto instead
186 - Updated redirect URI error message for coherence
1872022-05-27
188 - Added maximum limit to custom refresh token expiry
1892022-06-01
190 - Added new APIs: list user-installed plugins and uninstall plugin.
191 - Moved install and list plugin APIs to PluginController and updated their
192 service paths under /plugins.
1932022-06-03
194 - Implemented searching option using a network endpoint
195 - Implemented initial super client registration for user authentication.
196 - Fixed admin clean token API and restrict plugins to confidential only.
197
198
199
200# version 0.67.1
201
2022022-05-12
203 - Implemented mapping of LDAP username to email
204 - Handled null parameters in authorization requests
2052022-05-25
206 - Fixed null client_id
207 - Updated ldap.config path in the kustvakt-test.conf
208
209
210# version 0.67
211
2122022-05-09
213 - LDAP authentication and authorization is now configurable and supports SSL (LDAPS) connections.
214 - An embedded LDAP server can now be started automatically if configured accordingly.
2152022-05-11
216 - Changed the SQL script updating oauth2_client table
217
218
219# version 0.66
220
2212022-03-31
222 - Updated query and user-group name pattern.
2232022-04-08
224 - Added redirect_uri to client info API.
2252022-04-11
226 - Added registration_date, refresh_token_expiry, source and is_permitted
227 to the oauth2_client database table, and updated the OAuth2 client
228 registration mechanism.
229 - Added authorization request with GET and deprecated that with POST.
2302022-04-13
231 - Updated OAuth2Client list API (added redirect_uri, registration_date,
232 permitted, source to OAuth2UserClientDto).
2332022-04-20
234 - Updated authorization error response. (Included error and error
235 description in the client redirect URI except for missing or
236 invalid client id or redirect URI.
237
238
239# version 0.65.2
240
2412022-03-03
242 - Removed VCLoader.
243 - Added foreign keys to the DB tables of access and refresh token scopes.
2442022-03-07
245 - Added more parameter checks and OAuth2Client web-service tests.
2462022-03-17
247 - Updated admin filter by using admin token and role checks.
2482022-03-18
249 - Added an OAuth2 admin API to delete expired/revoked access and refresh tokens.
2502022-03-28
251 - Updated admin filter (admintoken as a form param) and uses
252 it for the closing index reader API.
253 - Removed unused admin API: clear access token cache.
2542022-03-29
255 - Updated and moved admin API: updateClientPrivilege to OAuth2AdminController
256
257# version 0.65.1
258
2592022-03-01
260 - Restricts the field retrieval web-service to admin only.
261
262# version 0.65
263
264!!! includes security updates - please update all Kustvakt libraries
265!!! Please also update Krill to version 0.60.2 and Koral to version 0.38
266
2672021-12-02
268 - Updated VC cache.
2692021-12-03
270 - Enabled listing system vc for authorized users.
2712021-12-08
272 - Removed koralQuery and statistics from VC list.
273 - Added a web-service to retrieve KoralQuery of a VC
2742021-12-10
275 - [security] Updated log4j libs due to CVE-2021-44228.
2762021-12-13
277 - Fixed broken test suite.
2782022-01-03
279 - [security] More log4j security updates
280 - Bumped unboundid-ldapsdk
281 - Updated tests.
2822022-01-25
283 - Added show-tokens option to the search API.
2842022-01-31
285 - Added an API retrieving fields of a virtual corpus.
286
287# version 0.64.1
288
2892021-10-26
290 - Bump Kustvakt and Krill versions.
291
292
293# version 0.64
2942021-07-29
295 - Updated the change files and made a new version.
2962021-08-12
297 - Fixed errors due to missing query type and added tests.
2982021-08-13
299 - Fixed missing request entity.
300 - Updated the query service to enable editing query references.
3012021-08-16
302 - Fixed creator param when storing query or VC by admins for
303 the system or other users.
304
305# version 0.63.2
3062021-06-11
307 - Updated OAuth2 token length & secure random algorithm config.
308 - Added character set filter to random code generator, e.g. for client_id.
3092021-06-14
310 - Updated roleId and super client parameters.
3112021-06-24
312 - Fixed broken test.
3132021-07-22
314 - Updated cache settings and some loggings.
3152021-07-26
316 - Replaced annotation parsing with restoring the annotation tables to the
317database.
318 - Moved cache config to the full config.
319
320# version 0.63.1
3212021-02-22
322 - Updated libraries (margaretha)
323 - Renamed virtual corpus to query (margaretha)
3242021-02-26
325 - Added query access roles and fixed vc access roles (margaretha)
326 - Added delete query webservice and tests (margaretha)
3272021-03-25
328 - Updated Koral version for Info Controller (margaretha)
329 - Updated OAuth2 token list with token type and user clientId
330parameters (margaretha)
3312021-03-29
332 - Added client type in the client list web-service. Resolved #58 (margaretha)
3332021-04-19
334 - Updated OAuth2Client JSON definition and controller tests (margaretha)
3352021-04-26
336 - Updated OAuth2 Client list (margaretha)
3372021-04-30
338 - Updated parameters in the error responses of OAuth2 APIs for coherence (margaretha)
339 - Updated OAuth2 API responses for coherence (margaretha)
3402021-06-07
341 - Updated OAuth2 client dto (margaretha)
342
343# version 0.63
34426/10/2020
345 - Updated dependency of nimbus-jose-jwt and oauth2-oidc-sdk (diewald)
34629/10/2020
347 - Introduction of a query reference rewrite mechanism (diewald)
34830/10/2020
349 - Added database methods for storing query references (diewald)
35004/12/2020
351 - Fix hibernate dialect for SQLite. (margaretha)
35204/12/2020
353 - Fix pipe warning. (margaretha)
35414/01/2021
355 - Updated Flyway (margaretha)
35621/01/2021
357 - Fixed running pipe and updated tests with mockserver (margaretha)
35801/02/2021
359 - Updated methods dependent to Antrl4-maven-plugin libraries (margaretha)
36005/02/2021
361 - Add query reference web-service (diewald,margaretha)
36210/02/2021
363 - Fixed problem with multiple desktop apps (diewald, margaretha)
36412/02/2021
365 - Added listing available queries for users (margaretha)
36617/02/2021
367 - Removed escaping for KoralQuery in VC and query reference responses (margaretha)
368 - Added query and query language in virtual corpus table (margaretha)
36918/02/2021
370 - Set corpus access public for stored query (margaretha)
37119/02/2021
372 - Enabled API info web-service (margaretha)
373
374
375# version 0.62.4
37624/01/2020
377 - Removed salt from config and updated config files (margaretha)
37803/02/2020
379 - Added an admin API for clearing access token cache (margaretha)
38005/02/2020
381 - Added a config properties for a long-time access token expiry
382 and excluded refresh tokens for public clients in OAuth2 token
383 responses (margaretha)
384 - Removed client authentication from the client deregistration and
385 client-secret reset APIs (margaretha)
38604/03/2020
387 - Updated the sample index (diewald)
388
389# version 0.62.3
39003/12/2019
391 - Implemented pipe extension in the search API (margaretha)
39211/12/2019
393 - Added errors when requesting VC in caching process (margaretha,
394 resolved #47)
39512/12/2019
396 - Added support for multiple cq parameters (margaretha, resolved #46)
39713/12/2019
398 - Handled pipe errors and added tests (margaretha)
39919/12/2019
400 - Updated create update user-group API (margaretha)
40120/12/2019
402 - Removed transactional annotations from simple select queries (margaretha)
403 - Updated free resource controller (margaretha)
40415/01-2020
405 - Added additional statistic figures to virtual corpus info API
406 response (margaretha)
407
408# version 0.62.2
40917/10/2019
410 - Handled vulnerability CVE-2019-17195. (margaretha)
4118/11/2019
412 - Added user-group name pattern (margaretha, issue #33)
41311/11/2019
414 - Updated user group service paths and replaced groupId with groupName
415 (margaretha, resolved #33)
41612/11/2019
417 - Removed UserGroupJson & updated listUserGroups and createUserGroup
418 services (margaretha)
419 - Added prefixes to username and groupname parameters in service paths
420 (margaretha, resolved #35)
42113/11/2019
422 - Added tests for issue #43 (margaretha)
42314/11/2019
424 - Added client description and URL to list-authorized-clients service
425 (margaretha, close #53)
426 - Implemented a service to list clients registered by a user (margaretha,
427 close #52)
428 - Added a check for OAuth2 client, VC, and group name length (margaretha)
42915/11/2019
430 - Merged list authorized client and list registered client services
431 (margaretha)
43221/11/2019
433 - Added a service to list active refresh tokens of a user (margaretha)
434 - Added username filtering to token revocation service via super client
435 (margaretha)
43626/11/2019
437 - Added a service to revoke a single refresh token via super client
438 (margaretha)
439
440# version 0.62.1
44108/07/2019
442 - Added tests for public metadata response in search api (margaretha,
443 issue #43)
444 - Disabled some tests of unused/disabled web-services (margaretha)
44507/08/2019
446 - Fixed missing scopes after requesting access token with refresh token
447 (margaretha)
448 - Fixed post requests with status OK and empty body (margaretha)
44907/08/2019
450 - Added users to hidden group when searching in a published VC (margaretha,
451 resolved #40)
45215/08/2019
453 - Updated the response statuses of VC PUT requests (margaretha)
454
455# version 0.62
45628/02/2019
457 - Removed old VC controllers and updated tests (margaretha, issue #34)
458 - Updated VC access controllers (margaretha)
45919/03/2019
460 - Added close index controller (margaretha)
46111/04/2019
462 - Fixed unknown authentication scheme, missing VC entity, and parameter
463 checker (margaretha)
464 - Fixed sharing unknown VC, updating corpusQuery, and handling non-
465 unique group name and unknown VC access (margaretha)
46627/06/2019
467 - Handled LDAP errors, fixed #45 (margaretha)
46803/07/2019
469 - Added re-caching VC at closing-index service, resolved #44 (margaretha)
470 - Changed the response media-type of authentication controllers (margaretha)
471 - Fixed bugs: allow guest to retrieve system VC,
472 remove VC from cache when it is deleted (margaretha)
47304/07/2019
474 - Updated VC name pattern and tests (margaretha)
475
476# version 0.61.6
47704/02/2019
478 - Fixed SQL data and merged oauth2_client_url and oauth2_client (margaretha)
479 - Updated client deregistration behavior (margaretha)
48005/02/2019
481 - Added delete-group-by-name controller (margaretha)
482 - Added unique index to group name (margaretha)
48306/02/2019
484 - Updated a user setting test using array for multiple values (margaretha)
485 - Added metadata controller tests (margaretha)
48618/02/2019
487 - Fixed tests (margaretha)
488 - Updated handling errors from Koral (margaretha)
48919/02/2019
490 - Added fields to metadata controller (margaretha, issue #39)
491
492# version 0.61.5
49317/12/2018
494 - Added a search timeout test (margaretha)
49518/12/2018
496 - Updated tests using BeanConfigTest to use SpringJerseyTest (margaretha)
49708/01/2019
498 - Improved predefined vc caching (issue #28, margaretha)
49909/01/2019
500 - Added comments (margaretha)
501 - Updated code structure (margaretha)
50211/01/2019
503 - Degraded API version to 1.0 (margaretha)
504 - Added OAuth2 client info tests (margaretha)
50514/01/2019
506 - Added retrieveVCByName and deleteVCByName controllers (margaretha)
50716/01/2019
508 - Added a PUT request for both creating and editing vc (margaretha)
509 - Added aliases to some VC controllers (margaretha)
510 - Merged VC access list controllers (margaretha)
51121/01/2019
512 - Removed codes related to user registration & password management (margaretha)
51322/01/2019
514 - Added create, edit, retrieve user default setting controllers (margaretha)
51522/01/2019
516 - Updated default setting controllers & added tests (margaretha)
517 - Added delete key in setting controllers (margaretha)
51823/01/2019
519 - Added default setting key validation (margaretha)
520 - Fixed UserdataTest (margaretha)
52124/01/2019
522 - Added default setting key validation & fixed UserdataTest (margaretha)
52325/01/2019
524 - Added VC reference and MapUtil tests (margaretha)
52528/01/2019
526 - Fixed username verification in DefaultSettingService (margaretha)
527 - Added foundry rewrite with user default setting (margaretha)
528 - Added default foundry for morphology layer (margaretha)
52929/01/2019
530 - Fixed share VC type (margaretha)
531 - Added delete setting controller (margaretha)
532 - Handled "no resource found" cases (margaretha, issue #37)
53330/01/2019
534 - Added server shutdown description in readme (margaretha)
535
536# version 0.61.4
53714/11/2018
538 - Integrated lite and full services and controllers in core (margaretha)
53921/11/2018
540 - Updated OAuth2 refresh token request to create a new refresh token and
541 revoke the old one per request (margaretha)
54228/11/2018
543 - Updated NamedVCLoader to delete existing VC in DB (margaretha)
544 - Handled storing cached VC with VC reference (margaretha)
54529/11/2018
546 - Added a controller for listing user clients having active refresh tokens
547 (margaretha)
5486/12/2018
549 - Added debug flags to mitigate log4j debugging performance (margaretha)
550 - Fixed KoralNode at() method (margaretha)
55111/12/2018
552 - Implemented revoking all tokens of a user client via a super client
553 (margaretha)
554 - Removed document controllers and KustvaktResource (margaretha)
555 - Fixed rewrite bugs (updated rewriteQuery & KoralNode) (margaretha)
556
557
558# version 0.61.3
55917/10/2018
560 - Updated NamedVCLoader to be optional (margaretha)
561 - Updated annotation tables & implemented key-value structure (margaretha)
562 - Added annotation parser for annotation data from kalamar (margaretha)
563 - Implemented parsing free resource info from json (margaretha)
56422/10/2018
565 - Updated jetty, spring and hibernate versions (margaretha)
566 - Fixed the order of annotation keys and values, and added tests (margaretha)
567 - Fixed resource DAO & added tests (margaretha)
56824/10/2018
569 - Fixed query serialization service (margaretha)
570 - Added "highlights" parameter to matchInfo controller (margaretha)
571 - Added "fields" parameter to search controllers (margaretha)
572 - Integrated lite controllers, services and tests in full version (margaretha)
57329/10/2018
574 - Moved javax.servlet-api to core (margaretha)
57507/11/2018
576 - OpenJDK8u181-workaround (see Debian Bug report #911925; diewald)
57713/11/2018
578 - Added Shutdown handler to Jetty server (margaretha)
579 - Fixed storing VC order in NamedVCLoader (margaretha)
580
581# version 0.61.2
58212/09/2018
583 - Added various log4j2 configurations (margaretha)
58413/09/2018
585 - Implemented VirtualCorpusRewrite (margaretha)
58614/09/2018
587 - Fixed SpringJerseyTest ApplicationContext (margaretha)
588 - Handled VCRef with username in VirtualCorpusRewrite (margaretha)
589 - Enabled VCReferenceTest in maven test suite (margaretha)
59018/09/2018
591 - Handled unique constraints / inserting duplicate items to DB (margaretha)
592 - Added a controller for editing user group member roles (margaretha)
59319/09/2018
594 - Fixed cached-VC ref with username (margaretha)
595
596# version 0.61.1
59728/08/2018
598 - Added API URL versioning (margaretha)
599 - Deactivated IdRewrite (margaretha)
600 - Fixed kustvakt controller (margaretha)
60130/08/2018
602 - Fixed root packages & added api version properties in kustvakt.conf
603 (margaretha)
604 - Fixed versioning in SearchController (margaretha)
605 - Added API versioning tests (margaretha)
606
607# version 0.61.0
608
60902/08/2018
610 - Added VC reference tests (margaretha)
611 - Implemented loading and caching named VCs (margaretha)
61203/08/2018
613 - Implemented OAuth2 revoke token (margaretha)
614 - Updated OAuth2 refresh token implementation (margaretha)
61514/08/2018
616 - Implemented revoke all OAuth2 access tokens and authorization codes of
617 client users when deregistering/deleting a client (margaretha)
618 - Fixed update OAuth2 access token (margaretha)
619 - Implemented reset client secret (margaretha)
620 - Fixed revoking latest access token when refreshing OAuth2 access token
621 (margaretha)
62215/08/2018
623 - Implemented OAuth2 client info controller (margaretha)
624 - Implemented update OAuth2 client privilege controller for admins
625 (margaretha)
626 - Implemented unlimited authorization scope for super clients with OAuth2
627 password grant (margaretha)
628 - Marked native clients implementation to deprecated in favour of super
629 clients (margaretha)
630 - Enabled using Bearer tokens as user authentication tokens (Authorization
631 header value) for many controllers including OAuth2 controllers (margaretha)
63216/08/2018
633 - Implemented degrading super clients (margaretha)
634 - Improved and added OAuth2 tests (margaretha)
63521/08/2018
636 - Added VC name pattern check (margaretha)
63722/08/2018
638 - Implemented loading VC from gz files (margaretha)
639 - Updated OAuth2 authorization codes' & access tokens' expiry check
640 (margaretha)
64123/08/2018
642 - Updated RefreshToken implementations with separate DB tables (margaretha)
643 - Allows multiple access tokens per refresh token (margaretha)
64427/08/2018
645 - Added statistic with VC reference tests (margaretha)
646 - Fixed OAuth2 SQL files (margaretha)
64728/08/2018
648 - Added c3p0 datasource configuration to Spring default-config-xml
649 (margaretha)
650 - Added running Kustvakt server with custom spring config in the readme
651 (margaretha)
652 - Removed old OAuth2 codes (margaretha)
653 - Moved non-config test codes to misc (margaretha)
654
655
656# version 0.60.5
657
65809/07/2018
659 - Added service layer to the search controller (margaretha)
660 - Added OAuth2 scope checking in search and VC controllers (margaretha)
661 - Added handling OAuth2 bearer token for VC access and User group
662 controllers (margaretha)
663 - Added default scope to password grant (margaretha)
66410/07/2018
665 - Made createBasicAuthorizationHeaderValue static (margaretha)
666 - Added store access token in openID token service (margaretha)
667 - Fixed empty scope in openID authorization and token service (margaretha)
668 - Implemented storing authorization code in cache (margaretha)
66911/07/2018
670 - Fixed authentication time in authentication controller (margaretha)
671 - Added OAuth2 access token tests (margaretha)
67212/07/2018
673 - Updated maven surefire setting for faster test suite runtime (margaretha)
674 - Implemented refreshing OAuth2 access token (margaretha)
67526/07/2018
676 - Fixed issue #27 (margaretha)
67702/08/2018s
678 - Fixed clientId encoding in OAuth2ClientControllerTest (margaretha)
679
680
681# version 0.60.4
682
68305/07/2018
684 - implemented OAuth2 authorization code request with OpenID Authentication
685 (margaretha)
686 - enabled OAuth2 authorization without OpenID authentication using Nimbus
687 library (margaretha)
688 - implemented response handler for OpenID authentication errors in authorization
689 requests (margaretha)
690 - added tests regarding OpenID authentication in authorization requests
691 (margaretha)
692 - implemented OAuth2 authorization error response via redirect URI instead of
693 JSON (margaretha)
694 - added state to OAuth2 authorization error response (margaretha)
695 - implemented OpenID token service for authorization code flow (margaretha)
696 - implemented signed OpenID token with default algorithm RSA256 (margaretha)
697 - implemented JSON Web Key (JWK) set web-controller listing kustvakt public
698 keys (margaretha)
699 - implemented OpenId configuration (margaretha)
700 - added authentication time and support for auth_time in id_token (margaretha)
701 - implemented support for nonce and max_age parameters in OpenID authentication
702 (margaretha)
703 - implemented OAuth2 token request with password grant using Nimbus library
704 (margaretha)
705 - updated redirect URI validator (margaretha)
706 - updated client registration requirement to allow desktop applications
707 (margaretha)
708 - fixed RSA key configuration (margaretha)
709 - merged OAuth2 client deregistration controllers (margaretha)
710 - fixed OAuth2 client unique URL-hashcode (margaretha)
711 - migrated logging to log4j 2 and adapted java.util.logging to log4j(margaretha)
712 - Added support for unrestricted corpus statistics (ndiewald)
713 - updated paths of user-group deletion-controllers (margaretha)
714 - Do not pass broken queries to Krill (diewald)
715 - added OAuth2 token request with client authentication via Authorization
716 header (margaretha)
717 - added port checking in test suite (margaretha)
718
719# version 0.60.3
720
72106/06/2018
722 - improved user authentication by using authentication filter for authorization
723 code request (margaretha)
724 - limited client authentication to client id checking in authorization code
725 request (margaretha)
726 - added user_id in the oauth2_access_token database table (margaretha)
727 - implemented OAuth2Authentication provider for token context management
728 (margaretha)
729 - added parameter checking for authorization DAO (margaretha)
730 - added controller tests using OAuth2 access token (margaretha)
731 - added database tables for MySQL (margaretha)
732 - updated JWT library and related codes (margaretha)
733
734# version 0.60.2
735
73603/05/2018
737 - implemented OAuth2 client registration (margaretha)
738 - implemented OAuth2 client authentication (margaretha)
739 - changed virtual corpus search to retrieval (margaretha)
740 - implemented public client deregistration task (margaretha)
741 - added client registration and deregistration tests (margaretha)
742 - implemented confidential client deregistration task (margaretha)
743 - fixed storing client secret (margaretha)
744 - implemented OAuth2 response handler (margaretha)
745 - implemented OAuth2 request access token with client credentials grant
746 (margaretha)
747 - implemented OAuth2 request access token with resource owner password grant
748 (margaretha)
749 - implemented OAuth2 authorization code request (margaretha)
750 - added OAuth2 error codes (margaretha)
751 - added OAuth2 authorization, scope and access token tables for SQLite
752 (margaretha)
753 - implemented OAuth2 authorization, scope and access token DAO (margaretha)
754 - implemented OAuth2 request access token with authorization code grant
755 (margaretha)
756 - added setting default scopes in the config file (margaretha)
757 - fixed loading spring config multiple times in the test suite (margaretha)
758 - added SQLite created_date trigger for access token (margaretha)
759 - added a join table for access token scopes (margaretha)
760 - added access scopes handling (margaretha)
761 - added tests about request token with authorization code (margaretha)
762
763# version 0.60.1
764
76528/03/2018
766 - added admin-related SQL codes (margaretha)
767 - updated AdminDao (margaretha)
768 - added optional username query parameter to group list controller (margaretha)
769 - fixed non hierarchical URI of kustvakt conf files (margaretha)
770 - added delete group member triggers (margaretha)
771 - added list user-group by username and status for system admin (margaretha)
772 - added user-group status in user-group DTO (margaretha)
773 - added check for hidden groups in user-group tests (margaretha)
774 - added database trigger test on deleting members when deleting group
775 (margaretha)
776 - renamed VC type PREDEFINED to SYSTEM (margaretha)
777 - added VC list controller for system admin (margaretha)
778 - added VC controller tests with for system admin (margaretha)
779 - added hidden access removal when deleting published VC (margaretha)
780 - added check for hidden groups in VC controller tests (margaretha)
781 - added search user-group controller (margaretha)
782 - removed createdBy from VirtualCorpusJson (margaretha)
783 - moved member role setting from the invitation phase to the after-subscription
784 phase (margaretha)
785 - added member role removal after deleting members (margaretha)
786 - added add and delete member role controllers (margaretha)
787
788# version 0.60
789
79014/03/2018
791 - set up mail settings using localhost port 25 (margaretha)
792 - added mail template in kustvakt configuration (margaretha)
793 - added mail settings to readme (margaretha)
794 - disabled email notification for auto group (margaretha)
795 - added metadata retrieval (diewald)
796 - enabled custom implementation for email address retrieval (margaretha)
797 - removed old policy and deprecated code (margaretha)
798 - moved authentication related code to /full (margaretha)
799 - added userRoles attribute to UserGroupDto. (margaretha)
800 - fixed sqlite trigger (margaretha)
801 - fixed member exist error message (margaretha)
802 - fixed member invitation to join deleted group (margaretha)
803 - added checking deleted group (margaretha)
804
805# version 0.59.10
806
80720/02/2018
808 - added sort VC by id (margaretha)
809 - added test cases regarding VC sharing (margaretha)
810 - implemented withdraw VC from publication (margaretha)
811 - added Changes file (margaretha)
812 - implemented add/invite users to group (margaretha)
813 - implemented delete user-group and member tasks (margaretha)
814 - added userMemberStatus in group lists (margaretha)
815 - updated and added SQL test data (margaretha)
816 - added user group related tests (margaretha)
817 - implemented custom configuration for deleting user groups and members (margaretha)
818 - updated library versions and java environment (margaretha)
819 - added expiration time check for member invitation (margaretha)
820 - moved .properties files (margaretha)
821 - merged changelog file to Changes (margaretha)
822 - updated status codes and error messages to be more detailed (margaretha)
823 - testing mail implementation using embedded jetty jndi (margaretha)
824 - fixed collection rewrite regarding OR operation with other fields
825 (margaretha)
826 - implemented sending mail using spring injection and removed jetty jndi
827 (margaretha)
828 - fixed unrecognized application/json (margaretha)
829 - fixed and updated velocity template (margaretha)
830
831# version 0.59.9
832
83319/01/2018
834 - restructured basic authentication (margaretha)
835 - fixed AuthenticationException to include authentication scheme (margaretha)
836 - fixed rewrite redundancy in collection rewrite (margaretha)
837 - fixed foundry rewrite for constituents (margaretha)
838 - introduced authentication methods, schemes and tokens (margaretha)
839 - implemented collection rewrite with multiple licenses (margaretha)
840 - fixed foundry rewrite for korap span without wrap node (margaretha)
841 - implemented list user group (margaretha)
842 - implemented delete VC task (margaretha)
843 - implemented create user-group, subscribe to user-groups, unsubscribe to
844 user-groups tasks(margaretha)
845 - fixed handling JSON mapping exception for missing enums (margaretha)
846 - implemented list VC task (margaretha)
847 - added KoralQuery in VC lists (margaretha)
848 - implemented edit VC task (margaretha)
849 - implemented publish VC task (margaretha)
850 - implemented share VC task (margaretha)
851 - implemented list only owned VC task (margaretha)
852 - implemented list VC access task (margaretha)
853 - implemented search VC by id task (margaretha)
854 - implemented delete VC access (margaretha)
855 - implemented search for project VC (margaretha)
856 - added search VC related tests (margaretha)
857 - removed PredefinedUserGroup.ALL and related codes (margaretha)
858 - implemented search for published VC (margaretha)
859
860# version 0.59.8
861
86221/09/2017
863 - restructured statistics service (margaretha)
864 - removed deprecated loader codes and tests (margaretha)
865 - removed old Spring java configurations (margaretha)
866 - implemented entity classes for the new database (margaretha)
867 - added MySQL codes regarding VC and for testing (margaretha)
868 - added dao methods regarding VC (margaretha)
869 - added similar SQL codes (to MySQL) for sqlite (margaretha)
870 - added dao methods regarding user groups (margaretha)
871 - restructured web-service codes into controller and logic/business-service
872 (margaretha)
873 - implemented user role and privilege, and added tests (margaretha)
874 - prepared test suite using new database (margaretha)
875 - implemented UserGroupDao and tests (margaretha)
876 - fixed missing exceptions in JsonUtils (margaretha)
877 - restructured web filters and authentication codes (margaretha)
878 - implemented create/store VC (margaretha)
879 - fixed collection rewrite bug regarding availability with operation or
880 (margaretha)
881
882# version 0.59.7
883
88413/10/2016
885 - MOD: updated search to use new siglen (diewald)
886 - MOD: fixed matchinfo retrieval in light service (diewald)
887
88805/05/2015
889 - ADD: rest test suite for user service (hanl)
890 - MOD: setup parameter modification (hanl)
891 - ADD: oauth2 client unique constraint (hanl)