v4.7.4

Fixes:

• OKAPI-1050 -Dlog4j2.formatMsgNoLookups=true for Debian/Ubuntu package (CVE-2021-44228)
• OKAPI-1047 Disable JDNI in log4j by removing JdniLookup class (CVE-2021-44228)

v4.9.0

Features/improvements:

• OKAPI-1020 Allow interface list for require/provide
• OKAPI-1024 Add facility to remove obsolete modules
• OKAPI-1034 Supply module id for some tenant errors
• OKAPI-1029 Cache CORS requests using Access-Control-Max-Age header

Fixes:

• OKAPI-1015 /saml/login timeout
• OKAPI-1016 Support delegate preflight request
• OKAPI-1023 Pull module descriptors with bulk/batch, fix connection timeout
• OKAPI-1025 /_/proxy/tenants/{tenant_id}/upgrade with body
• OKAPI-1028 GET /_/proxy/modules with invalid JSON body hangs
• OKAPI-1031 "apt-get install okapi" should recreate /var/lib/okapi

Other:

• OKAPI-1035 Upgrade to Vert.x 4.1.4 OKAPI-1035

v4.8.2

This update has fixes to get mod-login-saml working.

• OKAPI-1015 /saml/login timeout
• OKAPI-1016 Support delegate preflight request
• OKAPI-1017 Update to Vert.x 4.1.0.CR1

v4.8.1

This release identical to 4.8.0 (except version), by mistake.

v4.7.3

• OKAPI-1016 Support delegate preflight request
• OKAPI-1015 /saml/login call time out
• OKAPI-1001 Pull: ignore module descriptors with unsupported features
• OKAPI-876 CORS delegation doesn't work with preflight/OPTIONS requests

v4.8.0

Features / improvements:

• OKAPI-969 API for Okapi timer task management
• OKAPI-998 Extend ProxyService#proxyClientFailure error message
• OKAPI-917 Okapi version discovery without permissions
• OKAPI-996 Include module ID in some deployment error messages
• OKAPI-999 okapi-testing with UtilityClassTester
• OKAPI-1000 schedule facility (ala cron)
• OKAPI-1004 OkapiClient futurisation for Vert.x 4
• OKAPI-1013 Configurable time zone for timers

Fixes:

• OKAPI-876 CORS delegation doesn't work with preflight/OPTIONS requests
• OKAPI-991 Fix deploy_waitIterations (was deploy.waitIterations)
• OKAPI-992 Okapi discovery times out after 5 minutes
• OKAPI-1001 Pull: ignore module descriptors with unsupported features
• OKAPI-1009 Spurious ProxyTest.testTimer failure

Other:

• OKAPI-960 Add personal data disclosure form
• Upgrade to Vert.x 4.0.3

v4.7.2

• OKAPI-996 Reload permissions immediately on enable (not upgrade)
• OKAPI-994 Include ID in some deployment error messages
• OKAPI-960 Add personal data disclosure form

v4.7.1

Fixes an issue with deployment timing out before expected.

• OKAPI-992 Fix Okapi discovery times out after 5 minutes

v4.7.0

This release includes improvements for communication with the
permissions module. It also includes a setting for controlling
how long Okapi waits for deployment readiness.

New features:

• OKAPI-985 PoC refresh last strategy for _tenantPemissions
• OKAPI-982 Inform mod-permissions when module is disabled
• OKAPI-990 Config deploy.waitIterations for Docker deployment

Fixes (some of which are also cherry-picked to 4.6+ series)

• OKAPI-987 Modules require does not seem to take into account optional dependencies
• OKAPI-986 Vert.x 4.0.2, Netty 4.1.59 (CVE-2021-21290)
• OKAPI-984 Retry when slow module startup causes "connection refused"
• OKAPI-979 Ensure module is logged for tenant operation failures
• OKAPI-978 Exception on Docker pull
• OKAPI-976 NPE in DiscoveryManager after restarting Okapi
• OKAPI-974 Make permissionName a required property
• OKAPI-973 DockerModuleHandle IllegalStateException checkEnded

Other:

• OKAPI-980 Okapi-curl has a login facility. Is now maintained by Mike Taylor here
• OKAPI-975 Use GenericCompositeFuture rather than internal one

v4.6.5

Fixes a side-effect of OKAPI-984 from 4.6.4 release.

• OKAPI-988 Deployment fails with Docker (part two)