v5.3.2

5.3.2 - Oct 11, 2019

Fixes:

• Dependencies updated to fix DOS vulnerability commit

v5.3.1

Enhancement:

• Node 12 check commit

Fixes:

• Fix passing in undefined optional parameters to @nearform/sql v1.3.1 throwing error commit

v5.3.0

• Hapi plugins export a name property whose value is udaru-hapi-plugin. This is useful when loading specific plugin options on registration, based on this newly exported plugin name

v5.2.3

Fixes:

• Fix create organizations and teams callback handling commit

v5.2.2

Fixes:

• Expose batch authorization in Hapi 17 plugin commit
• Example tests and fixes commit

v5.2.1

Features, enhancements

• Facilitating underscores in id fields for previous teamId compatibility commit

Fixes:

• Migration scripts updated constraints commit
• Bugfix for path on nested paths commit

Note: if already migrated database to 9, please re-migrate from 8 to 9 for unique path and id constraints related to this release

v5.2.0

Features, enhancements

• Exact name search added to teams search commit
• Search enhanced to handle tsquery reserved characters commit
• Zed Attack Proxy baseline and API penetration testing support commit

Fixes:

• Ignore unique constraints on insert policies commit
• Allow empty array of teams/user ids commit

v5.1.0

Features, enhancements

• Batch authorization checks on resource/action pairs commit

v5.0.1

Features, enhancements

• Breaking change: Whitelist ID fields formats in users, teams, policies and organization commit
• Node 10 check commit
• Breaking change: Assignment of policies/instances to users, teams and groups must now use object format commit
• Swagger generation mechanism updated commit
• Swagger output validation merged with input validation in core commit

From Beta release

• Lerna package split, udaru-core, udaru-hapi-plugin, udaru-hapi-16-plugin and udaru-hapi-server now in separate npm packages commit
• Breaking change: 404 not found on endpoint GET /authorization/teams/${teamId}/users if team does not exist commit
• Breaking change: 404 not found on endpoint /authorization/users/${userId}/teams if user does not exist commit
• SQL module extracted and placed in own npm module (@nearform/sql)
• Promises support commit
• Hooks support commit
• Policy instance now returned when associating policy with user,team,org, which can be passed as param to DELETE to delete a specific instance commit
• Policy context variables support added, which can be used in policy resources and policy condition elements commit
• GET Policy search endpoint added commit
• GET Policy variables endpoint added commit
• GET Policy instances endpoint added commit
• GET Policy endpoints added to users, teams and organizations commit

v4.1.0

Features, enhancements:

• Nested teams endpoint [commit] (#477)
• Team search endpoint [commit] (#473)
• User search endpoint [commit] (#463)
• Team user search endpoint [commit] (#463)
• Updated PBAC to version 0.3.0 (lodash vulnerability)