Issues

Query Performance Issue - DELETE of mod_authtoken.refresh_tokens

Remove ip and timestamp, use random to make unique dummy access token

Issuing address does not match for refresh token after Okapi ip address change

Invalid Token Errors

perms.permissions.get rename in FilterApi

Upgrade dependencies for Ramsons

Review and cleanup Module Descriptor for mod-authtoken

Vert.x 4.5.8 fixing Netty form POST OOM CVE-2024-29025

Illegal base64 character 5f when decoding token with username with umlaut

Release 2.15.1

Quesnelia deps: Vert.x 4.5.4, log4j 2.23.0

Add tenantId to RouteApi response

Deny request from standalone tenant to ECS tenant in case of hybrid setups

Investigate mod-authtoken spikes

When a token isn't present in a request, return 400 rather than 403

allow.cross.tenant.requests=false to disable consortia options

Release 2.14.1 Poppy (R2 20201)

Response head already sent for legacy token tenant feature

Release 2.14.0

Update dependencies for Poppy

Check "error" in GET /_/tenant/<tenantid> in AuthTokenTest

Create new token type DummyTokenExpiring

Implement enhanced security mode

Remove legacy token endpoint and all code associated with it

Make RTR compatible with ECS

Allow cross tenant requests only when special system property is presented

Update to Java 17 mod-authtoken

Enable API-related GitHub Workflows, replace those Jenkins stages

Update calling existing RMB "Read" methods to use new RMB Readonly APIs

Provide ability to perform cross tenant requests for consortia members

Upgrade to vertx-lib 3.0.0, Vert.x 4.3.8

release mod-authtoken 2.13.0

Upgrade dependencies (Vertx, log4j, okapi-common, nimbus-jose-jwt)

Release 2.12.0

Release 2.11.1 Morning Glory hotfix

Upgrade to Vert.x 4.3.3 fixing https for WebClient

Upgrade from 2.9.1 (Lotus) to 2.11.0 (Morning Glory) fails

Upgrade Users interface to 16.0

Finalize refresh token backend

Upgrade dependencies (folio-vertx-lib, Vert.x 4.3.1, ...)

Morning Glory 2022 R2 module release

Upgrade to Vert.x 4.2.7, log4j 2.17.2, folio-vertx-lib 1.1.0,

Token invalidation on logout

jwt.signing.key hint on BadSignatureException

Break up unit tests

Implement OpenAPI

Update dependencies (CVE-2021-27568, CVE-2021-31684)

Container-based module-based integration test

Vert.x 4.2.4, Log4j 2.17.1