Releases: Erudika/para
v1.45.3
7597c9a fixed warning from Spring Security regarding the use web.ignoring() method
11facd5 updated Hibernate Validator
93fc0f6 updated Jackson to 2.13.2.1
653c322 updated SSL context helper
📦 Download JAR
📦 Download WAR
v1.45.2
34fcc27 [maven-release-plugin] prepare for next development iteration
7737b3c [maven-release-plugin] prepare release v1.45.2
84a5220 removed lastIp field from User class - Para will no longer attach an IP address to user objects
56c1b5c updated Jackson to 2.13.2, Classgraph to 4.8.141
35f5b87 updated Spring Security to 5.6.2, Spring LDAP to 2.3.6, Nimbus JWT to 9.21
6f192bd fixed bug causing webhook delivery to be repeated 100 times
6408abf readme
2d44699 [maven-release-plugin] prepare for next development iteration
📦 Download JAR
📦 Download WAR
v1.45.1
2d44699 [maven-release-plugin] prepare for next development iteration
d4690fa [maven-release-plugin] prepare release v1.45.1
09d3046 fixed rendering of configuration properties with string values containing only numbers
8b66a0a fixed minor issue in Webhook class
0bbab6a fixed several issues related to the storing and rendering of configuration properties
ca058e0 fixed auto-init code should set root app keys as config properties inside Para's application.conf
81a80f3 [maven-release-plugin] prepare for next development iteration
📦 Download JAR
📦 Download WAR
v1.45.0
640c3ba added support for direct webhook triggering of custom payloads with a single request
2326bbe updated Hibernate Validator
8879694 fixed config rendering methods should include tags
e05935a updated Spring Boot
d3256db fixed configuration rendenring methods
2fef785 updated Flexmark
2325581 added support for repeated delivery attempts for webhooks
782a416 fixed JWT token validity period should be 24h by default
da22a56 added methods to Config class for storing and rendering the apps' configuration
f160cb9 refactored the @Documented annotation for describing config getter methods
38206b6 removed unused configuration properties from reference.conf
e6d0e5f added new method to Config class, and optimized it for loading configurations for namespaces other than para.*
5b1d94e updated dependencies
dbbc2f9 updated SSL context library
70a5931 fixed filters using deleted methods for setting access token payload
e1604f7 fixed IDP id and access token payload getter methods in User class
📦 Download JAR
📦 Download WAR
v1.44.0
Breaking: If you are integrating Para directly into your JVM-based project, this version brings some major refactoring around the Config class.
There are no major changes other than that one. Simply replace Config.getConfigParam() with Para.getConfig().getConfigParam().
The goal is to make each Para client app have its own configuration namespace with a configuration properties prefixed with something other than para.xyz.
2a9409c updated JWT library and Guice
4251756 added new Docker tag :latest-base
d47827a updated Lucene and SQL plugins
7b0fcdb fixed root app identifier configuration, reverting a previous commit
96c70ec added @Documented annotation
29c265e added debug info for OAuth2 tokens in GenericOauth2Filter
1ecb6e8 added support for getting child apps' credentials via API
c819592 changed getRootAppIdentifier() method to always return 'para' regardless of para.app_name
d7499c8 minor fix in SecurityUtils.isValidJWToken()
b569e44 bumped year in license headers
fa6d779 added auto-initialization on first startup, keys for root app either written to file or printed out
6c9a624 refactored Config class to be absctract and allow for application-specific configurations
d1e10c9 fixed missing UTF-8 encoding for webhook payloads
eef692c updated sslcontext-kickstart from 7.1.0 to 7.2.0 (#95)
📦 Download JAR
📦 Download WAR
v1.43.4
v1.43.4
98f5e22 [maven-release-plugin] prepare for next development iteration
257ae37 [maven-release-plugin] prepare release v1.43.4
ed93483 updated H2 in the Para SQL plugin, fixing a critical vulnerability
e5d1c5e fixed possible 'Response header too large' error when logging in with a Microsoft account
b780021 updated AWS SDK
2b5642e updated Hibernate Validator, SQL plugin
ee192db updated snakeyaml
8a524e4 [maven-release-plugin] prepare for next development iteration
📦 Download JAR
📦 Download WAR
v1.43.3
04e88e3 javadoc fix
dce4451 updated Spring Security and LDAP
2546146 fixed markdown renderer not suppressing javascript:* in links
8413359 updated AWS SDK
a02e0ff updated Spring Boot to 2.6.2
📦 Download JAR
📦 Download WAR
v1.43.2
⚠️ BREAKING CHANGES (when upgrading from 1.42.x or lower to 1.43.x):
1. H2 DB has been upgraded to 2.x - requires full migration if you use it (used by Para by default).
Use this migration script to migrate from H2 1.4.200 to 2.x before using this version!
2. Lucene has been upgraded to 9.x - requires the search index to be completely rebuilt for each Para app.
3. Para now requires Java 11+ as a baseline.
79dfe10 updated Lucene plugin
dc1e0c3 updated plugins
📦 Download JAR
📦 Download WAR
v1.43.1
⚠️ BREAKING CHANGES:
1. H2 DB has been upgraded to 2.x - requires full migration if you use it (used by Para by default).
Use this migration script to migrate from H2 1.4.200 to 2.x before using this version!
2. Lucene has been upgraded to 9.x - requires the search index to be completely rebuilt for each Para app.
3. Para now requires Java 11+ as a baseline.
ℹ️ Note on the recently found Log4j vulnerabilities:
Para does not use Log4j and only relies on Logback for logging. Logback has been updated to 1.2.9 and is not vulnerable.
Previously, Para contained the package log4j-core which is not vulnerable either, but it has now been removed completely from Para.
219ae41 Release v1.43.1.
bf70df0 updated dependencies and disabled WADL feature in Jersey
ef1a4b5 fixed JAR startup