Expose securityToken createdBy field

Fixed

• Expose createdBy field of securityTokens to api

User email validation

Fixed

• Remove unnecessary folder published to npm.
• Convert email into lowercase when saving it to database.

Changed

• Use files property in package.json instead of npmignore file.

Plugin admin permissions

Added

• Add user adminPermissions property, intended for grant admin permissions to plugin users when login using apiKey
• Avoid any other user than admin updating adminPermissions property

Web UI

Added

• Add web ui
• Add socket.io server
• Emit events to socket authenticated users connected using sockets
• Add page and ability filters to logs api
• Add logs/stats api

Fixed

• Add "anonymous" role to swagger. Now anomnymous user has anonymous role.
• Fix logs capped collection max size

Changed

• Use validator library for emails and uri validations

Complete CRUD for all resources

Added

• Add DELETE method to servicePluginConfigs api
• Add DELETE method to services api
• Add PATCH and DELETE methods to users api

Changed

• Upgrade mongoose version

Fix connection with authentication disabled

Added

• Add anonymous default user, which will be used as logged user for requests with authentication disabled. When this user is logged in, services and abilities will be added to user with same name as service, not to logged user. In this way, the services connection process will work when authentication is disabled, and services registered will still be connected if authentication is enabled again.

Fixed

• Fix enum for abilities with numeric data type.

Return new documents in update commands

Fixed

• Return new documents in update commands.

Service plugin configurations

Added

• Add api resources for managing service custom configurations for specific plugin packages.

Changed

• Upgrade dependencies

Upgrade domapic-base

Changed

• Upgrade domapic-base version, which fixes a problem in concurrent client requests.

Abilities data not mandatory

Added

• Add express-mongo-sanitize middleware

Changed

• Type property in abilities becomes not mandatory when ability has not state.
• Data property is not allowed in ability handlers when ability type is not defined.