. . .

Version 21.11

The new 21.11 Release of ApiOmat has been released in the last week of february 2022.

The ApiOmat version 21.11 consists of the following versions of sub-components and services:



Beside bugfixes, smaller improvements and security enhancements these new features are available with the new version:

Strict Mode

The new version brings a new "strict mode" flag, which offers you the possibility to have sensitive defaults pre-set for your environment. Developing a showcase or proof of concept usually doesn't need strict settings, especially regarding authentication and authorization. While, on the other hand, developing a real project needs stricter settings, which you previously had to set manually. With the flag enabled, some settings are set to a more restrictive value by default.
This includes:

  • newly created classes have ACL roles set to AppAdmin by default and the access of resources referenced to an object is restricted (had to be done manually before)

  • the "old" static data endpoints, that do not include the model and module within the URL are disabled (wasn't possible before)

  • users of an App Backend can not see each other (had to be configured manually before)

  • only the owner of an App Backend can create users (had to be configured manually before)

  • only the App Admin can read resources uploaded to the Webhosting module (had to be configured manually before)

  • users can not send push messages (had to be configured manually before)

See the configuration section of Yambas for more details.

Bouncer Support in Android SDK

The new Android SDK now supports the authentication with JWT through our authentication service "Bouncer". For a detailed description how to use this, see the SDK Reference.

Counting Requests for ApiOmat App Backends

You can now track the calls to your ApiOmat App Backends to get an impression about which of your App Backends are requested with which status code. You can use this to aggregate these data and get more insights about how your Backends are used and monitor them. Get more information about this feature on the feature page.

Support for file storage in Innkeeper

The new innkeeper version brings you the possibility to store the artifacts within the file system instead of MongoDB. This may be useful if you don't want to store them into the MongoDB but instead have them available on a file system mount.

Fast and efficient App Backend Configuration Service (Gearhead)

The new ApiOmat version brings a fully overhauled version of the Gearhead service, which consumes less memory and CPU and responds faster. While it remains fully API compatible, the internal data structure changed and it won't be possible to load the previously stored data.



Breaking changes

Breaking changes may require changes in configuration, apps, or native module code after an ApiOmat upgrade to ensure system stability.

Affects

Change

Implications

Facebook module

The facebook module is not available anymore.

The module will be removed from your Backends automatically after upgrade.

Gearhead service

The internal data structure changed.

You'll need to set the service configurations for your AppBackends again.

Gearhead service

The configuration for the service changed.

You'll need to re-configure the service, see the installation instructions


Remarkable changes

Remarkable changes do not affect system stability after ApiOmat upgrade, but may require changes in configuration, apps, or modules in the next development cycle.

Affects

Change

Implications

Yambas,
Module REST endpoints

Calling app backend related data endpoints is now stricter. The module needs to be attached to your application backend before you can call its endpoints.
This affects operations regarding dataObjects, files, images and custom module endpoints.

You may need to adjust custom scripts or logic whenever a successful call to data endpoints of unattached modules was expected.

Yambas, Dashboard

We removed the docs from the installation packages.

Use https://docs.apiomat.com to read the documentation


Changelog

Schlüssel

Zusammenfassung

S

Lösung

EX-44

Apidocs append auth header even if credentials are empty

images/jira.apiomat.com/secure/viewavatar.svg

Fixed

DAS-2162

Data-Editor internally uses Livehost to load Data

images/jira.apiomat.com/secure/viewavatar.svg

Fixed

DAS-2161

Dashboard needs 'internet" access for module images

images/jira.apiomat.com/secure/viewavatar.svg

Fixed

DAS-2158

Rename "Compile" Button

images/jira.apiomat.com/secure/viewavatar.png

Fixed

DAS-2156

Attributes that have a dialog are editable although they shouldn't

images/jira.apiomat.com/secure/viewavatar.svg

Fixed

DAS-2152

Wrong compile message in services tab after attribute changing & recompiling

images/jira.apiomat.com/secure/viewavatar.svg

Fixed

DAS-2142

Deliver dashboard with fpm instead of php_mod

images/jira.apiomat.com/secure/viewavatar.png

Fixed

DAS-2141

Prevent Cross-Site Scripting with manipulated SVGs

images/jira.apiomat.com/secure/viewavatar.svg

Fixed

DAS-2077

display errors shifted icons

images/jira.apiomat.com/secure/viewavatar.svg

Fixed

AOM-6150

Update internal dependencies

images/jira.apiomat.com/secure/viewavatar.svg

Fixed

AOM-6148

Wrong behavior for SNAPSHOT-versions of modules and wrong systemPath

images/jira.apiomat.com/secure/viewavatar.svg

Fixed

AOM-6147

Authorization header is evaluated for calls to custom rest endpoints

images/jira.apiomat.com/secure/viewavatar.svg

Fixed

AOM-6146

Update log4j to 2.17.1

images/jira.apiomat.com/secure/viewavatar.svg

Fixed

AOM-6145

Internal server error when trying to update module config

images/jira.apiomat.com/secure/viewavatar.svg

Fixed

AOM-6142

Fix against Log4jShell

images/jira.apiomat.com/secure/viewavatar.svg

Fixed

AOM-6140

Yambas Logs should respect configured log level

images/jira.apiomat.com/secure/viewavatar.png

Fixed

AOM-6137

[GeneratedServices] MetaModel processing fails if service package contains non-model classes

images/jira.apiomat.com/secure/viewavatar.svg

Fixed

AOM-6136

[PasswordPolicies] If a password is to be changed after X days, the Password Policy takes effect even though the password was changed yesterday.

images/jira.apiomat.com/secure/viewavatar.svg

Fixed

AOM-6135

[PasswordPolicies] If special characters are enabled and the password will be reset, strange characters will be displayed on the password reset page.

images/jira.apiomat.com/secure/viewavatar.svg

Fixed

AOM-6134

Auth class not called for models/me endpoint

images/jira.apiomat.com/secure/viewavatar.svg

Fixed

AOM-6131

Provide a flag to set more restrictive defaults

images/jira.apiomat.com/secure/viewavatar.svg

Fixed

AOM-6127

CSV Import of files using the old data endpoints

images/jira.apiomat.com/secure/viewavatar.svg

Fixed

AOM-5077

Role classes map can't be deleted via model annotation in NM

images/jira.apiomat.com/secure/viewavatar.svg

Fixed

AOM-4644

Checkroles method doesn't work for type "grant"

images/jira.apiomat.com/secure/viewavatar.svg

Fixed

AOM-4243

Prevent Host Header Poisoning

images/jira.apiomat.com/secure/viewavatar.svg

Fixed

ALIB-80

Discovery should return all instances if not explicitly defined in config

images/jira.apiomat.com/secure/viewavatar.svg

Fixed

ALIB-79

Config client does not build correct path

images/jira.apiomat.com/secure/viewavatar.svg

Fixed

Authentifizierung um Ihren Vorgang abzurufen

27 Vorgänge