1.14.12

• add COBOL language analyzer
• localhost is no longer exempted from API checks
  • this means uploading the configuration at the end of the indexing via the -U indexer option will no longer work without authentication token
  • setup the authentication token in the read-only configuration using the authenticationTokens tunable and use the Indexer --token option or set the indexerAuthenticationToken option in the read-only configuration.
    • for the Python tools, use the -H option to supply the Bearer token in the Authorization header.
    • optionally set the allowInsecureTokens boolean option to allow the token to be passed over plaintext HTTP (handy for localhost only communication)
    • the argument of the --token option allows for the value to be read from a file if prefixed with @
  • Docker will automatically create and use the token
  • read-only configuration example:

<java version="11.0.8" class="java.beans.XMLDecoder">
    <object class="org.opengrok.indexer.configuration.Configuration">
        <void property="allowInsecureTokens">
            <boolean>true</boolean>
        </void>
        <void property="authenticationTokens">
            <void method="add">
                <string>INSERT_TOKEN_HERE</string>
            </void>
        </void>
        <void property="indexerAuthenticationToken">
            <string>INSERT_TOKEN_HERE</string>
        </void>
    </object>
</java>

• bump Tomcat in Docker
• add Content-Type header for the /metrics API endpoint so that recent versions of Prometheus can scrape it
• align /search API results with the UI