v1.3.0

⭐ New Features

• Added CSRF and CORS configuration support to application.properties
• Added support for indexing and searching (new endpoint /api/v1/search if search is enabled) for DataResources via Elastic
• Added new endpoint at GET /api/v1/dataresources for content type 'application/tabulator+json' for support of listing in Tabulator

🪲 Bugfixes

• User role INACTIVE is now properly checked. If a user is marked inactive, all access attempts will be answered with HTTP 403 (FORBIDDEN)
• Attempts to write DataResources if repository is in readOnly mode now returns HTTP 403 (FORBIDDEN) instead of HTTP 503 (SERVICE_UNAVAILABLE)
• Attempts to write DataResources without permissions now returns HTTP 403 (FORBIDDEN) instead of HTTP 401 (UNAUTHORIZED)
• MediaType detection and providing mediaType by user now properly works for ContentInformation

🔨 Dependency Upgrades

• Bump spring-security-config from 5.5.2 to 5.7.3 by @dependabot in #58
• Bump postgresql from 42.4.1 to 42.5.0 by @dependabot in #68
• Bump spring-cloud-starter-netflix-eureka-client from 3.1.3 to 3.1.4 by @dependabot in #69
• Bump io.freefair.maven-publish-java from 6.5.0.3 to 6.5.1 by @dependabot in #70
• Bump io.freefair.lombok from 6.5.0.3 to 6.5.1 by @dependabot in #71
• Bump spring-messaging from 5.3.22 to 5.3.23 by @dependabot in #77
• Bump org.owasp.dependencycheck from 7.1.2 to 7.2.1 by @dependabot in #80
• Bump net.researchgate.release from 3.0.1 to 3.0.2 by @dependabot in #73
• Bump nimbus-jose-jwt from 9.24.3 to 9.25.6 by @dependabot in #82
• Bump io.spring.dependency-management from 1.0.13.RELEASE to 1.0.14.RELEASE by @dependabot in #84
• Bump spring-security-config from 5.7.4 to 5.7.5 by @dependabot in #92
• Bump spring-security-web from 5.7.4 to 5.7.5 by @dependabot in #91
• Bump spring-cloud-starter-config from 3.1.4 to 3.1.5 by @dependabot in #93
• Bump mockito-inline from 4.8.1 to 4.9.0 by @dependabot in #94
• Bump Gradle from 7.4.2 to 7.6 by @VolkerHartmann in #110
• Bump org.springframework.boot from 2.7.3 to 2.7.5
• Bump javers from 6.6.5 to 6.8.0
• Bump service-base from 1.0.4 to 1.1.0
• Bump repo-core from 1.0.3 to 1.1.1

⛔ Removed

• Removed old configuration properties for indexing in application-default.properties

v1.2.0

Security

• Update to h2 2.1.214:
  • Please migrate your database if you want to update base-repo while using h2!
    See: https://h2database.com/html/migration-to-v2.html

Added

• File versioning support for content elements
• Added Keycloak support for authentication
• Creating new DataResources accepts now official DataCite documents by providing Content-Type header with value 'application/datacite+json'

Changed

• Additional field in content information metadata for providing the used versioning (none, simple, ocfl)
• Moved endpoint for audit information to base path /api/v1/audit/
• More consistent content-type handling
• Externalized documentation to https://kit-data-manager.github.io/webpage/base-repo.html
• Update to service-base 1.0.4
• Update to repo-core 1.0.3
• Update to io.freefair.lombok 6.5.0.3
• Update to org.owasp.dependencycheck 7.1.1
• Update to spring-boot 2.7.2
• Update to spring-doc 1.6.9
• Update to spring-cloud 3.1.3
• Update to spring-messaging 5.3.22
• Update to spring-restdocs-mockmvc 2.0.6.RELEASE
• Update to postgresql 42.4.0

Fixed

• Fixed minor issues in queries of search endpoint if providing a search template resource, e.g., queries involving ResourceType or ACL information

Removed

• Property 'repo.audit.enabled' is no longer needed. Instead, 'repo.plugin.versioning' should be either set to 'none' or 'simple' to disable/enable versioning of both, metadata and data.

v1.1.0

Changed

• Truncating service-assigned times to milliseconds for compatibility reasons
• Change of messaging property names including documentation
• Update to service-base 0.2.0
• Update to generic-message-consumer 0.2.0

Fixed

• Fixed wrong HATEOAS links for search endpoint

v1.0

First release