v16.20.1

Otoroshi version 16.20.1

https://github.com/MAIF/otoroshi/milestone/106?closed=1
v16.20.0...v16.20.1
https://github.com/MAIF/otoroshi/releases/tag/v16.20.1

Fixed

• OIDCAuthToken plugin can fails to fetch user infos on M2M style calls (#2018)

Contributors

• @mathieuancelin

v16.20.0

Otoroshi version 16.20.0

https://github.com/MAIF/otoroshi/milestone/104?closed=1
v16.19.0...v16.20.0
https://github.com/MAIF/otoroshi/releases/tag/v16.20.0

Added

• Use generic APIs on routes and apikeys tables. (#1935)
• add a new kind of plugin to validate request as soon as possible in the proxy engine (#1987)
• add an incoming request validator plugin that apply Coraza on incoming requests (#1988)
• add an incoming request validator plugin that validates domain name against valid domain names list (#1989)
• add an incoming request validator plugin that validates domain name against denied domain names list (#1990)
• add a new "consumer" concept in EL to handle user or apikey at the same time (#1993)
• store initial request in attrs (#1994)
• add the ability for generic admin api to produce/consumer kind with group/kind (#2015)
• plugin to enforce authentication of an OIDC auth. module based the access_token passed in a header (#2016)

Changed

• Change "create" label in sidebar (#1992)
• add a way to override change callback on the select widget (#1996)
• Make generic api output pretty json format (#2011)
• Make generic api support gzip output (#2012)
• Make generic api capable of wrapping response in an envelope (#2013)

Fixed

• apikey secret can't have a value containing : when using basic auth (#1985)
• Build, Global and Maintenance Mode plugins should provide a way to overwrite the default error template and status (#2002)
• Prevents codeInput to update the editor view when typing json (#2003)
• Prevents the number input from changing an empty value to 0 while the user is typing (#2004)
• auth. module logout sometimes does not work as expected when using multiple modules in the same browser session (#2008)
• PrivateApps action sometimes does not work as expected when using multiple modules in the same browser session (#2009)

Documentation

• Document projection operators (#1999)

Contributors

• @Zwiterrion
• @mathieuancelin
• @ptitFicus

v16.19.0

Otoroshi version 16.19.0

https://github.com/MAIF/otoroshi/milestone/103?closed=1
v16.18.7...v16.19.0
https://github.com/MAIF/otoroshi/releases/tag/v16.19.0

Added

• customize headers size in/out (#1971)
• add operators in projection utils to include/exclude wildcard names (#1972)
• add custom fields in the info token directly at the root (#1973)
• new plugin to remove headers with long value going to backend (#1974)
• new plugin to remove headers with long value going back to client (#1975)
• new plugin to limit headers with long value going to backend (#1976)
• new plugin to limit headers with long value going back to client (#1977)
• alert when proxy engine removes/limits headers (#1978)
• proxy engine can globally limit headers size in and out (#1979)
• add api for developers to facilitate alerts events sending (#1981)
• add api for developers to facilitate audit events sending (#1982)
• add api for developers to facilitate analytics events sending (#1983)

Changed

• Saml Auth Module - Get all attributes in otoroshi-claim header (#1962)
• Allow info token payload customization (#1966)
• Add capabilities to the html patcher plugin (#1980)

Fixed

• Otoroshi 16.18.4 - Unable to reset quotas consumption (#1967)
• Analytics Issue with Empty Body and Content-Length Header Set to 0 (#1969)

Contributors

• @Zwiterrion
• @quentinproust
• @ptitFicus
• @sadmin91
• @mathieuancelin

v16.18.7

Otoroshi version 16.18.7

https://github.com/MAIF/otoroshi/milestone/102?closed=1
v16.18.6...v16.18.7
https://github.com/MAIF/otoroshi/releases/tag/v16.18.7

Added

• documentation of the admin API leads to deprecated resources (#1954)
• Support remote validation hooks after auth. module login (#1955)
• new plugin that returns request content (#1960)
• new plugin that return request body content (#1961)

Changed

• Update Authentication Module SAML with Extra metadata (#1959)

Fixed

• Fix release process to make maven central artifact publishing work again (#1956)
• ApiKeyConstraints formatter failed when otoBearerAuth is undefined (#1957)
• Fix the Otoroshi Info plugin form to select only one certId instead of an array. (#1958)

Contributors

• @mathieuancelin
• @Zwiterrion
• @jva-altima

v16.18.6

Otoroshi version 16.18.6

https://github.com/MAIF/otoroshi/milestone/101?closed=1
v16.18.5...v16.18.6
https://github.com/MAIF/otoroshi/releases/tag/v16.18.6

Fixed

• kubernetes cacert decoding fails when not read from kubeconfig file (#1953)

Contributors

• @mathieuancelin

v16.18.5

Otoroshi version 16.18.5

https://github.com/MAIF/otoroshi/milestone/100?closed=1
v16.18.4...v16.18.5
https://github.com/MAIF/otoroshi/releases/tag/v16.18.5

Added

• add endpoints to know the schema of entities from the admin apis (#1938)
• polyfill.io mitigation plugin (#1939)
• identity endpoint plugin (#1940)
• consumer endpoint plugin (#1941)
• polyfill.io detector plugin (#1942)
• make the default route domain customizable (#1943)
• Location header rewrite plugin (#1944)
• alert when certifcates are almost expired (#1947)

Changed

• enable vaults by default (#1937)

Contributors

• @mathieuancelin

v16.18.4

Otoroshi version 16.18.4

https://github.com/MAIF/otoroshi/milestone/99?closed=1
v16.18.3...v16.18.4
https://github.com/MAIF/otoroshi/releases/tag/v16.18.4

Changed

• make throttling windows configurable (#1931)

Contributors

• @mathieuancelin

v16.18.3

Otoroshi version 16.18.3

https://github.com/MAIF/otoroshi/milestone/98?closed=1
v16.18.2...v16.18.3
https://github.com/MAIF/otoroshi/releases/tag/v16.18.3

Added

• make an option to be able to use the redirect on login pattern (#1926)
• Improve the frontend summary and the backend form in the designer. (#1927)

Changed

• update documentation about updating rbac and crds (#1929)
• detect missing entities on kubernetes and print helpful message (#1930)

Fixed

• update kubernetes entities (#1928)

Contributors

• @mathieuancelin
• @Zwiterrion

v16.18.2

Otoroshi version 16.18.2

https://github.com/MAIF/otoroshi/milestone/97?closed=1
v16.18.1...v16.18.2
https://github.com/MAIF/otoroshi/releases/tag/v16.18.2

Fixed

• bad code cleanup generates bad login urls (#1925)

Contributors

• @mathieuancelin

v16.18.1

Otoroshi version 16.18.1

https://github.com/MAIF/otoroshi/milestone/96?closed=1
v16.18.0...v16.18.1
https://github.com/MAIF/otoroshi/releases/tag/v16.18.1

Added

• OPA and http wasm plugin could have a specific UI (#1917)

Fixed

• auth. module plugins shouldn't try to use redirect uris (#1922)
• secure the direct usage of the private app login callback (#1923)
• if an auth. module redirect uri has multiple query params, some can get lost through login redirections (#1924)

Documentation

• Http wasm tutorial (#1918)

Contributors

• @Zwiterrion
• @mathieuancelin