Skip to content

Latest commit

 

History

History
207 lines (154 loc) · 28.3 KB

CHANGELOG.md

File metadata and controls

207 lines (154 loc) · 28.3 KB
Raw

API Mediation Layer Changelog

All notable changes to the Zowe API Mediation Layer package will be documented in this file.

APIML 2.12.2 / Zowe 2.12.0 (2023-10-10)

  • Feature: Added a Central API ML registry endpoint to the Cloud Gateway to access an aggregated view of all services from all domains. (#3076) (ff8ee9b), closes #3076

  • Feature: It is now possible to forward the client certificate from Central Gateway to Domain Gateway in the request header (#3046) (eda4750), closes #3046

  • Feature: Register Gateway to an additional Discovery service. Clients outside of the API ML cluster can now know about other gateways to facilitate routing to clusters and domains. (#3068) (e988df3), closes #3068 #3044

  • Feature: You can now verify service SSO support from API ML (#3054) (3c1bb91), closes #3054

  • Bugfix: Fixed normalization of baseUrl in ZAAS client (#3123) (c8a23a8), closes #3123

  • Bugfix: Added the JVM heap configuration to zowe.yaml (#3087) (59ead89), closes #3087

  • Bugfix: Fixed an error preventing the Catalog UI to load when a service does not have some required parameter. (#3050) (30ec8df), closes #3050

  • Bugfix: Fix navigation issue in Catalog when using browser back button (#3145) (eb7b02e), closes #3135

APIML 2.11.0 / Zowe 2.11.0 (2023-08-30)

  • Feature: Spring cloud gateway routing (#3031) (a1dd492), closes #3031

  • Feature: Swagger validation for registered services. (#3039) (b5ad040), closes #3039

  • Bugfix: Set default value of nonStrictVerifySslCertificatesOfServices to false (#3029) (75b658c), closes #3029

  • Bugfix: newlines and SSL error message in z/OSMF validation (#3024) (0a0b27b), closes #3024

  • Bugfix: z/OSMF logging improvements (#2998) (eb7b02e), closes #2998

APIML 2.10.6 / Zowe 2.10.0 (2023-07-28)

  • Feature: The API Catalog now allows pre-defined style customizations (#2965) (b286cef)

  • Bugfix: Provide client with information about expired password (#2969) (c4dc217), closes #2969

APIML 2.9.1 / Zowe 2.9.0 (2023-06-12)

  • Feature: Personal access tokens are now accepted as Bearer authentication and in the apimlAuthenticationToken cookie (#2908) (7c393a6), closes #2908

  • Feature: A OAuth2 access token is now accepted as an authentication source (#2922) (3809622), closes #2835

  • Feature: The maximum idle timeout for websocket connections (between the gateway and the registered service) is now configurable (#2914) (020da87), closes #2914

  • Bugfix: Ignore client certificate in a request when x509 authentication is not enabled (#2930) (406f588), closes #2930

  • Bugfix: Return the correct list of public keys when z/OSMF is not available (#2936) (030a34f), closes #2936

APIML 2.8.2 / Zowe 2.8.0 (2023-04-27)

  • Feature: A unique authentication cookie name has been added for multi-instance deployment (#2812) (6654271), closes #2812

  • Bugfix: Parsing OpenAPI v2 Swagger files by API Catalog (#2876) (cc45774), closes #2876

  • Bugfix: Mitigate storing password in memory for V2 (#2858) (b1596eb), closes #2858

  • Bugfix: Mitigate storing password in memory for V1 (#2867) (3356b7c), closes #2867

  • Bugfix: Read response from http client to prevent exahusting connection pool (#2854) (137be23), closes #2854

  • Bugfix: Passticket generation and limit Eureka replication peers threads (#2845) (42b491e), closes #2845

  • Bugfix: Refactor SSL configuration (#2832) (33f4882), closes #2832

APIML 2.7.0 / Zowe 2.7.0 (2023-03-10)

  • Feature: Support of other keyring types (#2799) (952bf2b), closes #2799

  • Feature: OIDC info is now available via webfinger (#2757) (71e88ba), closes #2757

  • Feature: The API Catalog can now be configured to hide service information (#2743) (2fbbc65), closes #2743

  • Bugfix: Update keyring config (#2828) (c1e1cc9), closes #2828

  • Bugfix: Run gateway instances with own cache storage (#2807) (4d08707), closes #2807

  • Bugfix: Fix stack overflow during cleaning websocket client (#2815) (376f818), closes #2815

  • Bugfix: Fix support of different type of keyrings in proper format (just two slashes) (#2687) (dfb0168), closes #2687

  • Bugfix: Handle WebSocket connection failure (#2805) (232bade), closes #2805

  • Bugfix: Periodically clean connection pool (#2797) (7058290), closes #2797

  • Bugfix: Recognize profile settings (#2789) (adf5ea5), closes #2789

  • Bugfix: Eureka peer connections loop (#2775) (85a27ea), closes #2775

  • Bugfix: Reduce number of WARN logs (#2780) (df0243f), closes #2780

  • Bugfix: Fix bug in Wizard static onboarding method (#2773) (c8d7c66), closes #2773

  • Bugfix: Improve handling of SSL errors (#2744) (bb9792b), closes #2744

APIML 2.6.0 / Zowe 2.6.0 (2023-01-23)

  • Feature: Spring Cloud Gateway implementation - Support of remapping to Passticket (#2046) closes #2046

  • Feature: Spring Cloud Gateway implementation - Support of remapping to client certificate (#2044) closes #2044

  • Bugfix: Improve the information for failure of extension loading (#2721) (8a0455)

  • Bugfix: Correctly process metadata for the Plain Java Enabler running on z/OS (#1927) (b182323), closes #1927

APIML 2.5.0 / Zowe 2.5.0 (22-12-12)

  • Feature: Retry failed request routed through the Cloud Gateway service (#2697) (b2e86b3), closes #2697

  • Feature: The Cloud Gateway service can now handle cross-origin requests similar to the functionality in the Gateway(#2701) (f5ab7b8), closes #2701

  • Feature: It is now possible to issue SMF records #83 about PAT generation via Rauditx (#2691) (97df0bc), closes #83 #2691

  • Feature: A circuit breaker is now included in the Cloud Gateway service request router (#2679) (b704413), closes #2679

  • Feature: A custom authentication header has been added for southbound services (#2618) (9272aa0), closes #2618

  • Feature: It is now possible to include a generated passticket in the custom request header (#2625) (e52448c), closes #2625

  • Bugfix: Upgrade swagger parser and exclude bugged version (#2702) (6b966b2), closes #2702

  • Bugfix: Allow to set private key password separately (#2684) (4e3d3c7), closes #2684

  • Bugfix: Set content type header when calling caching service (#2682) (97cb29c), closes #2682

  • Bugfix: Register java time module to parse date in swagger (#2634) (b3d53b2), closes #2634

  • Bugfix: Allowing users to type keyring with either 4 or 2 slashes (#2626) (db33c4c), closes #2626

APIML 2.4.10 / Zowe 2.4.0 (2022-10-06)

  • Feature: Validate OIDC token (#2604) (cdd4a43), closes #2604

  • Feature: Introduced service routing based on header to enables the Cloud Gateway to route to a southbound service by information in the request header. (#2600) (6fafb60), closes #2600

  • Feature: Introduced a new cloud gateway service that provides routing functionality for multi-sysplex environments. (#2576) (7c618c0), closes #2576

  • Bugfix: Do not require clientAuth extension (#2595) (e9e8092), closes #2595

  • Bugfix: snakeyml update, scheme validation fix (#2577) (ae48669), closes #2577

  • Bugfix: Add build info to the manifest.yaml (#2573) (93298dd), closes #2573

  • Bugfix: Fix bug in the swagger (#2571) (36997c6), closes #2571

  • Bugfix: Handle exceptions in extensions config reader (#2609) (336d3b4), closes #2609

  • Bugfix: Make the SAF IDT properties configurable in Zowe (#2610) (b28a9dd), closes #2610

APIML 2.4.4 / Zowe 2.3.0, 2.3.1 (2022-09-15)

  • Feature: Introduction of a new cloud gateway service to provide routing functionality for multi-sysplex environments. (#2576) (7c618c0), closes #2576

  • Feature: Introduced a new Personal Access Token (PAT) API to evict non-relevant tokens and rules (#2554) (f3aeafa), closes #2554

  • Feature: Added a Redis sentinel enabled field that allows Sentinel configuration to be added to a file and kept available even when Sentinel is not in use. (#2546) (3779072), closes #2546

  • Feature: Added customized code snippets to API Catalog. Customized snippets can now be defined as part of the service metadata to be displayed in the API Catalog UI (#2526) (602392e), closes #2526

  • Feature: Code snippet configuration now enables direct integration of an endpoint into an application without requiring code to integrate the other application's REST APIs. (#2509) (4d2298e), closes #2509

  • Feature: A Personal Access Token (PAT) for SSO is now accepted. The PAT can now be validated and invalidated using a REST API on the Gateway (#2499) (ad17c18), closes #2499

  • Bugfix: snakeyml update, scheme validation fix (#2577) (ae48669), closes #2577

  • Bugfix: Add build info to the manifest.yaml (#2573) (93298dd), closes #2573

  • Bugfix: Fix bug in the swagger (#2571) (36997c6), closes #2571

  • Bugfix: AdditionalProperties must be outside of properties attribute (#2567) (fea515a), closes #2567

  • Bugfix: Enable hsts (#2565) (4cffe97), closes #2565

  • Bugfix: Fix code snippets bug (#2564) (23bed56), closes #2564

  • Bugfix: Enable redis storage mode in tests (#2522) (11bf491), closes #2522

  • Bugfix: Gradle publish after update (#2528) (1baa6f7), closes #2528

  • Bugfix: Remove multiple tokens from cookies (#2514) (d5bc187), closes #2514

  • Bugfix: Retrieve swagger api docs with or without certificate configuration enabled (#2500) (16ca734), closes #2500

APIML 2.2.4 / Zowe 2.2.0 (2022-07-14)

  • Feature: Revoke a Persoanal Access Token by admin (#2476) (e4d42a9), closes #2476

  • Feature: Caching Service can store invalidated token rules (#2460) (055aac9), closes #2460

  • Feature: Exchange client certificate for SAF IDT (#2455) (303087c), closes #2455 #2384

  • Feature: Fix SAF IDT scheme and service (#2224) (7772401), closes #2224

  • Feature: Generate Personal Access Token (#2452) (0e39aa7), closes #2452

  • Feature: Limit the scope of a Personal Access Token (#2456) (cc0aba4), closes #2456

  • Feature: Revoke a Personal Access Token (#2422) (c7f79d5), closes #2422

  • Feature: Validate ServiceId with Endpoint (#2413) (9f3825f), closes #2413

  • Bugfix: Immediately expire a passticket command to generate a passticket for each call (#2496) (8adca78), closes #2496

  • Bugfix: Optimize image builds (#2445) (e220cbd), closes #2445

  • Bugfix: Extend Tomcat to be able to recover after TCP/IP stack is restarted, so that the service does not require restart. (#2421) (a851b8f), closes #2421

APIML 2.1.0 / Zowe 2.1.0 (2022-05-31)

  • Feature: Add trivial schema files for lib components. Update manifests to remove build metadata (#2379) (6eba58f), closes #2379

  • Feature: Extend API operation filter in the Swagger UI (#2397) (cffd6cf), closes #2397

  • Feature: Generate basic code snippets (#2387) (79c67d0), closes #2387

  • Feature: New endpoint to retrieve default API doc for service (#2327) (502ba3c), closes #2327

  • Feature: Enhanced Discovery service health check (#2312) (2f167ff), closes #2312

  • Feature: Support for TLSv1.3 (#2314) (e96135a), closes #2314 #2269

  • Feature: Enhance x509 authentication scheme to support client certificates (#2285) (a053b00), closes #2285

  • Feature: Enhance zowejwt authentication scheme to support client certificates (#2292) (c602080), closes #2292

  • Feature: Enhance z/OSMF authentication scheme to support client certificates (#2207) (5750072), closes #2207

  • Feature: Add support to change password via zOSMF (#2095) (51e8bd3), closes #2095

  • Feature: Enable Discovery Service and Gateway Service native library extensions (#1987) (fd03db5), closes #1987

  • Feature: Add methods for ZaaS client to support password change (#1991) (7597bd7), closes #1991

  • Feature: API ML sample extension (#1947) (a085cf3), closes #1947

  • Bugfix: Add log masking class for sensitive logs (#2003) (994b483), closes #2003

  • Bugfix: API Catalog swagger link (#2344) (be07fda), closes #2344

  • Bugfix: use same key and record lengths as jcl (#2341) (d8644f2), closes #2341

  • Bugfix: Add server side logging for swagger handling code (#2328) (7b0455d), closes #2328

  • Bugfix: Preserve request cookies (#2293) (71c6649), closes #2293 #2269

  • Bugfix: ZaaS client compatibility with Zowe v2 (#2227) (abdf995), closes #2227

  • Bugfix: Add BearerContent filter to enable bearer auth (#2197) (1d41704), closes #2197

  • Bugfix: Configure southbound timeout with APIML_GATEWAY_TIMEOUT_MILLIS (#2154) (6af5d6f), closes #2154

  • Bugfix: Improve error handling for API diff endpoint (#2178) (1581e39), closes #2178

  • Bugfix: Versioning in image publishing workflow (#2159) (db52527), closes #2159

  • Bugfix: Add x509 auth info to gw api doc (#2142) (0205470), closes #2142

  • Bugfix: Properly remove services when instances are removed from Discovery Service (#2128) (c675b91), closes #2128

  • Bugfix: Use ribbon LB for Web sockets (#2147) (4751dbc), closes #2147

  • Bugfix: Add missing fields in error response (#2118) (3b9745c), closes #2118

  • Bugfix: Do not require keyAlias for SSL configuration (#2110) (03bee79), closes #2110

APIML 2.0.9 / Zowe 2.0.0 (2022-04-20)

  • Feature: Add missing tooltips to all onboarding options (#2194) (5446fd5), closes #2194

  • Feature: Discovery service can be configured to modify the service ID at registration time (#2229) (63f6fde), closes #2229

  • Feature: There is now the option to specify base packages for the extensions loader(#2081) (9a4be5a), closes #2081

  • Feature: There is a new design of the logout panel in the Catalog dashboard (#2102) (1382f24), closes #2102

  • Feature: There is now the option to change your password via the Catalog UI (#2035) (139a231), closes #2035

  • Feature: Migrated the onboarding wizard to the Material UI library. This replaces the Mineral UI framework with the Material UI usage in the wizard (#2004) (2c595d5), closes #2004

  • Feature: Migrated the dashboard to the Material UI library (#1959) (0da7f15), closes #1959

  • Feature: Migrated the detail page to the Material UI library (#1949) (95da488), closes #1949

  • Feature: Migrated Error components to the Material UI library (#1957) (c60371d), closes #1957

  • Feature: Migrated the header and footer to the Material UI library (#1943) (537fa34), closes #1943

  • Feature: Migrated the Login panel to the Material UI library (#1900) (81ab2ed), closes #1900

  • Feature: Made various improvements to the onboarding wizard (#1772) (20dd70b), closes #1772

  • Bugfix: Caching service logging (#2222) (5ff64d9), closes #2222

  • Bugfix: Upgrade Spring to version without vulnerability (#2252) (f77fa1b), closes #2252

  • Bugfix: Use unique artifacts for gha (#2192) (f8def8c), closes #2192

  • Bugfix: Add x509 auth info to gw api doc (#2142) (072ad23), closes #2142

  • Bugfix: Authorization provider set empty as default (#2107) (aa77926), closes #2107

  • Bugfix: Change url for v2 and mark plugin as v2 in case very old apiml v1 copies don't support same url (6f4257a), closes #2022

  • Bugfix: Update data model for infinispan storage in Caching service (#2156) (38a1348), closes #2156