1.6.3

Bugfixes

[Console] Modifying the POST update /credential request it's possible to bypass password rules #3603

1.6.2

Enhancement

[Test] Crypto utils tests (#3582)

Bugfixes

[Console] Added proper error message when INVENTORY-V1/containers resource is requested but not supported (#3573)
[Console] Remove encoding for password changing (#3570)
[Docker] Fixed Docker Compose unquoted ports (#3575)
[OpenAPI] Fix OpenAPI Device Keystore definitions Bug documentation (#3574)
[OpenAPI] Fixed TriggerProperty OpenAPI definition Bug documentation (#3566)
[User] Fixed User.externalUsername column and creation on db (#3583)

1.6.1

Enhancements

[Datastore] Added RTE full stack trace log at debug level (#3565)
[Datastore] Implement custom ES Rest Client error handler (#3564)

1.5.6

Enhancements

[Datastore] Added RTE full stack trace log at debug level (#3565)
[Datastore] Implement custom ES Rest Client error handler (#3564)

1.6.0

Features

[Authentication] Feature Authorization Service refactoring and improvement (#3534)
[Core] Entity attributes encryption (#3549)
[Extras] Entity Attribute encryption migrator tool (#3551)
[Device Management] Added new Container resource to DeviceInventoryManagementService (#3513)
[OpenID] OpenID connect resolution on other claims (#3523)

Enhancements

[Authentication] Improved Credential of type Password validation and error throwing (#3548)
[Console] Add Permission targetScopeId informations to grid and dialogs (#3542)
[Console] Changed login footer to be a little bigger (#3557)
[Console] Endpoint view only for root account (#3560)
[Console] Removed hasMfa method (#3531)
[Core] Added Exception to throw when restricted resourced are managed improperly (#3546)
[Core] Added handling of badly formatted error message (#3545)
[Device Management] Mapped new 'signed' property for INVENTORY-V1 Bundles (#3510)
[Docker] Added mapping for CRYPTO_SECRET_KEY in Docker compose (#3561)
[Docker] Refactored Docker Compose SSO deployment (#3517)
[Jobs] Added JobExecution indexes to improve query performances (#3526)
[Rest API] Added return device management operation in REST API /packages rest-api (#3530)
[Docker] Refactored Docker Compose debug and dev options (#3504)

Dependencies

[Dependencies] Remove unused elasticsearch embedded dependency (#3500)
[Dependencies] Set JAXB dependencies to fixed version (#3536)

Bugfixes

[Accounts] Fixed fields validation bypass (#3527)
[Authentication] Fixed error message for SubjectUnauthorizedException (#3543)
[Broker] Fixed Broker SERIALIZABLE_PACKAGES env definition (#3535)
[Console] Added authentication check to getMinimumPswLength (#3532)
[Console] Added missing Cross-Site Request Forgery token (XSRF) checks (#3521)
[Console] Fixed refresh of Deployment Packages subtab (#3529)
[Console] Sanitized Event Message field (#3520)
[Datastore] DatastoreException malformed error message (#3562)
[Docker] Fixed broker container name in compose deployment (#3449)
[Docker] Fixed docker logs command (#3528)
[Jobs] Added check for duplicate JobTarget and few more checks (#3524)
[OpenAPI] Fix Swagger CLI openapi.yaml generation (#3519)
[Rest API] Fixed UserCreator.status mapping and references rest-api (#3559)

1.5.5

Enhancements

[Console] Removed hasMfa method (#3531)
[Device Management] Mapped new 'signed' property for INVENTORY-V1 Bundles Enhancement (#3510)
[Job] Added JobExecution indexes to improve query performances (#3526)

Bugfixes

[Account] Fixed fields validation bypass Bug (#3527)
[Console] Added authentication check to getMinimumPswLength (#3532)
[Console] Fixed refresh of Deployment Packages subtab (#3529)
[Console] Added missing Cross-Site Request Forgery token (XSRF) checks (#3521)
[Console] Sanitised Event Message field Bug Console GWT (#3520)
[Datastore] DatastoreException malformed error message (#3562)
[Jobs] Added check for duplicate JobTarget and few more checks (#3524)

1.5.4

Enhancements

[Containers] Disabled web console for H2 container (#3503)
[Dependencies] Excluded c3p0 dependencies from Quartz scheduler (#3496)
[Dependencies] Upgraded version of Commons Io from 2.4 to 2.11.0 (#3491)
[Dependencies] Upgraded version of jackson library to 2.13.1 (#3509)
[Dependencies] Upgraded version of jetty libraries from 9.2.x to 9.4.44 (#3502) (#3495)
[Dependencies] Upgraded version of log4j from 2.14.0 to 2.17.0 (#3477)
[Dependencies] Upgraded version of log4j from 2.17.0 to 2.17.1 (#3486)
[Dependencies] Upgraded version of Owasp Encoder dependency version to 1.2.3 (#3490)
[Dependencies] Upgraded version of Shiro from 1.5.3 to 1.8.0 (#3488)
[Dependencies] Upgraded version of Slf4j from 1.7.30 to 1.7.33 (#3489)

Bugfixes

[Console] Removed log line leftover from (#3440)
[Device Management] Fixed TranslatorAppSnapshotKuraKapua to handle empty body (#3468)
[Device Management] Fixed original cause eaten in process on connect (#3501)
[Scheduler][Translator] Add Scheduler and Translator tests in GitHub action (#3494)

1.5.3

Enhancements

[Console] Added session AccessToken refreshing on the Console Web Filter (#3440)
[Console] Set console 'job.engine.client.auth.mode' to 'access_token' (#3438)
[Core] Feature kapua list result get items enhancements (#3374)
[CORS] CORS filter is now configurable for users in kapua-sys child account (#3358)
[REST API] Added 'forced' paramer to DELETE /jobs/{jobId} (#3420)
[Job] Now job names can contains colon (#3384)
[Job] Implemented JobStepProperty.secret (#3377)

Bugfixes

[Account] Fix parent account path format (#3414) (#3427)
[Console] Changed the displayed messaged for No Item Selected... in tabs (#3411)
[Console] Fixed DeviceManagementException handling in Console (#3406) (#3407)
[Console] Fixed Keystore Keypair creation from console (#3372)
[Javadoc] Fixed typoes in javadoc (#3381)
[Job Engine] Job's errors messages now print the explanation (#3382)
[Job Engine] Added missing JobEngineException error messages (#3383)
[REST API] Fixed Rest API doPrivileged authentication trusted (#3429)
[Scheduler] Fixed NPE on TriggerService.find when Trigger does not exist (#3378)
[Test] Increased wait times for job operations to complete (#3373)

1.5.2

Enhancements

[Console] Hide Device Tabs if feature is not supported by device (#3364)
[Core] HikariCP Database Connection Pooling (#3355)

Bugfixes

[Authentication] Fix MfaOption search when authenticating (#3365)
[Documentation] Fixed example of model DeviceKeystoreCertificateInfo (#3362)

1.5.1

Bugfixes

[Authentication] Do not increase lockout counter error when credentials are correct but no otp is provided (#3335)
[Datastore] Fixed "limitExceed" value always false (#3341)
[Documentation] Fix Device Inventory OpenAPI (#3359)
[Job Engine] Fixed configuration of job-engine (#3361)

Enhacements

[Documentation] Added DELETE keystore/item to OpenAPI definitions (#3356)
[REST API] Add askTotalCount to DeviceEvents REST API (#3360)
[REST API] REST API Entities Sorting Round 2 (#3357)