Release 2022-04-13

Docker Image: sevenvaltechnologies/flatrunner:20220413

Added

• Provide request info as a HAR file if flat/collect-request-info is enabled

Fixed

• More helpful error message for misspelled type names in Swagger schemas
• Don't leak Authorization in FLAT::getRequestInfo()
• Fixed a mixup of JSON DOM representation styles

Release 2021-06-23

Docker Image: sevenvaltechnologies/flatrunner:20210623

Added

• The validate-request-security request option

Fixed

• set-env now does not produce unnecessary quotes for numeric values
• Problem in the split() function, if called with a string containing an ampersand
• Send Vary: Origin response headers for non-preflight requests if CORS is enabled but Origin was not sent

Release 20210107

Docker Image: sevenvaltechnologies/flatrunner:20210107

Added

• The uuid3() and uuid4() functions
• The ldap-query() function
• LDAP TLS configuration and LDAP timeout
• The scope-claim and post-check-flow properties
• Specifying the required token scope
• Merging directives into php.ini via environment variables

Fixed

• Path parameters were not usable in error flows

Release 20200828

Docker Image: sevenvaltechnologies/flatrunner:20200828

Added

• FLAT_DEBUG_ALLOW_HEADER to enable debugging using the Debug request header, defaults to false
• The request option force-cache-refresh
• The ldap-lookup() function
• The cacheHit property in the upstream response information ($upstream)

Fixed

• Empty objects are no longer logged as empty arrays.
• The json-to-csv() function allows null values in array entry objects.

Changed

The log action can no longer override system log fields.

Release 20200519

Docker Image: sevenvaltechnologies/flatrunner:20200519

Added

• Beta image now publicly available. More about Docker images…
• Warnings in debug log about invalid Swagger definitions
• Validation for the assert and set-env test action configurations.
• The error action
• additional configuration options for the PHP-FPM process management
• out-header property for easy JWT forwarding

Fixed

• Calls to the content() function affecting the result of the body() function

Release 20200424

Docker Image: sevenvaltechnologies/flatrunner:20200424

Added

• Swagger security requirements can now also be specified at the path level.
• x-flat-proxy to configure proxies without a flow
• Enhanced proxy-request action with origin, query, stripEndpoint and addPrefix properties

Fixed

• If a client URL path is below the API base path, does not match any defined route, and a path is defined which equals the API base path, so that a matching client URL path is the concatenation of the API base path with itself (e.g. /api/api if the basePath is /api), the fallback flow is now properly executed.
• Some PEM formatted keys could not be recognized during JWT processing.
• Multi-line values for environment variables are now supported.

Changed

• If the definition request option is given with either a proxy-request action or x-flat-proxy, the defaults for the exit-on-error, validate-request and validate-response request options are changed to true.

FLAT 20200409

Docker Image: sevenvaltechnologies/flatrunner:20200409

Added

• The json-to-csv() function
• The FLAT revision is shown when FLAT is started and is available in $env/FLAT_REVISION

Changed

• Enhanced flat_access log with new fields

Fixed

• When testing multiple test files with flat test, each test now tests its own response.
• Fatal errors when using certain combinations of jwt-decode() and <eval/>

FLAT 20200323

Docker Image: sevenvaltechnologies/flatrunner:20200323

Fixed

• Environment variables are shown in the debug log if the debug topic is env
• With activated upstream validation, a missing definition option or a definition value referencing a non-existant resource now results in a 500 response with a proper error message.
• Swagger security scheme objects without x-flat-jwt are ignored for security checks.

FLAT 20200318

Docker Image: sevenvaltechnologies/flatrunner:20200318

Added

• body() function
• pass-body action
• Security checks with JWT.

Changed

• set-response-headers action now accepts the empty object {}
• Reading swagger.yaml is faster because of caching

FLAT 20200213

Docker Image: sevenvaltechnologies/flatrunner:20200213

Added

• Validation for application/x-www-form-urlencoded encoded formData parameters
• The proxy-request action
• The functions verify-xmldsig() and decrypt-xml().

Fixed

• Parameter handling of the functions decrypt() and calc-signature().

Changed

• Padding scheme for encrypt() and decrypt() to RSAES-OAEP.
• Relative paths in the json-doc() function are resolved relative to the flow file's path.