happn-3
Version:
pub/sub api as a service using primus and mongo & redis or nedb, can work as cluster, single process or embedded using nedb
1,085 lines (830 loc) • 30.8 kB
Markdown
0.0.1 2016-11-03
----------------
- based on 2.15.4
- alpha release
0.0.2 2016-11-04
----------------
- passing publicKey back with login response on encrypted payloads
0.0.3 2016-11-07
----------------
- security audits and modifiedBy
0.0.4 2016-11-15
----------------
- modified login method to be simpler, check for secure - then set auth type to digest if no password
0.1.0 2016-11-15
----------------
- have layered security more, not so many conditional statements, now have distinct login, and processLogin methods
- fixed issue where onEvent in client was not pushing the actual event data, as the data was being pushed into the scope argument for a "call"
- fixed bug in client, with incorrcetly spelled enum STATE.diconnected
0.2.0 2016-11-18
----------------
- update to default policies, both now have no ttl
- fix the session service disconnect to allow client reconnections (reconnect true if options.reconnect == null)
0.3.0 2016-11-21
----------------
- inbound and outbound layer plugins
0.4.0 2016-11-21
----------------
- services other than system services can now be loaded
0.4.2 2016-11-22
----------------
- proper error returned when token from deleted user is used in an attempt to access a resource
0.4.3 2016-11-22
----------------
- upgrade from node-uuid to uuid
0.5.0 2016-11-22
----------------
- fix to pubsub, allow for noCluster option
- added mergeObjects function to utils
0.6.0 2016-11-23
----------------
- client connect timeout
- made getConnection more logical
- token login reuse
0.6.1 2016-11-25
----------------
- fix to test c1
- have correct management of connection timeout
- upgrade to primus 6
0.6.2 2016-11-25
----------------
- downgrade to primus 5.2.2 (support node 0.10)
0.6.3 2016-11-27
----------------
- downgrade to primus 4.0.5 (last known good version)
0.6.5 2016-11-27
----------------
- upgrade to primus 5.2.2 (didnt make a difference)
0.6.6 2016-11-27
----------------
- update to __getConnection
0.6.7 2016-11-28
----------------
- safeSession and updateSession returns null if session booted
0.7.0 2016-12-02
----------------
- major updates to disconnect
- fix to browser (Primus now attached to window)
- happner-mocha-serial tests
0.7.1 2016-12-02
----------------
- disabled benchmarket on all tests except benchmarket
0.8.0 2016-12-03
----------------
- changed config on client to not have config.config
- changed client.options.config to just client.options
0.9.0 2016-12-06
----------------
- server shutdown, if connections are destroyed by primus, destroy not called in transport.stop
- made call timeout configurable in client, defaults to 30 seconds
0.9.1 2016-12-12
----------------
- updated README
- added migration plan
1.0.0 2016-12-13
----------------
- protocol update!: error in message now has separate name and message, ie: {error:{name:'AccessDenied', message:'unauthorised'}} previous {error:{name:'AccessDenied: unauthorised'}}
- updated __createResponse to include the message of the error (was previously looping through the properties - 'message' was non-iterable)
1.0.1 2016-12-13
----------------
- fixed issue where outbound responses where not going through layers if custom outbound layers configured
1.0.2 2016-12-13
----------------
- fixed persisted cache does not set __sync flag, when db is empty
1.0.3 2016-12-15
----------------
- fixed outbound system messages to include logging and custom outbound layers
- fixed issue with tags working regardless of whether the data to tag exists or not
1.0.4 2016-12-15
----------------
- allow for event_type * as well as 'all' in client 'on' option
1.1.0 2016-12-21
----------------
- protocol version update 1.2.0
- happn protocol 0.1.1 in place
- default protocol is 1.1.0 (oldest)
1.1.1 2016-12-22
----------------
- error serialization enhancement
1.2.1 2017-01-21
----------------
- targetClients enhancement
- removed benchmarket
- fixed bug with subscribe on keys without preceding '/'
- client disconnect improvements and test
1.3.0 2017-02-08
------------------
- added support for passing custom _meta into `set()` options
1.4.0 2017-02-08
----------------
- dataprovider functionality
- updates to tests
1.4.1 2017-02-08
----------------
- fixed issue where the options where getting attached to request options in dataprovider
- updates to tests
1.4.2 2017-02-21
----------------
- refactored this.STATE to this.state in client
1.5.0 2017-02-27
----------------
- publisher/subscription services
- consistency ACKNOWLEDGED/TRANSACTIONAL/DEFERRED
1.6.0 2017-03-02
----------------
- packager, with browser client caching
- added homedir and fs-extra dependancies
- updates to utilities
1.6.2 2017-03-07
----------------
- client.disconnect() supports server offline
1.7.0 2017-03-08
----------------
- forked primus
1.7.1 2017-03-09
----------------
- bucket optimisations, trie segmentation
1.7.2 2017-03-09
----------------
- happn-tcp-port-used
1.7.4 2017-03-10
----------------
- fixed bucket to use the wildcardMatch on subscriptions, updated f7 test
1.7.5 2017-03-13
----------------
- fixed collisions on multiple servers in same process deleting the cached-to-disk browserclient
1.7.6 2017-03-20
----------------
- updated forked primus to only dodge missing options on destroy if configured to do so
1.7.7 2017-03-21
----------------
- forked primus closing process.env, switched to global
1.8.0 2017-03-21
----------------
- strict bucket
- redundant connections
1.8.1 2017-03-23
----------------
- updated README (subscription service)
- socketCleanup method on client
- socket connect timeout is 30 seconds
- socket pool reconnect interval
- getBuckets optimisation, also bucket fix * = ALL
1.8.2 2017-03-23
----------------
- socket pool reconnect delay, 0 by default
- socket pool secure service tests
1.8.3 2017-03-27
----------------
- moved transform and transformAll to dataProvider
- updated documentation
1.8.4 2017-03-28
----------------
- happn-util-crypto 0.2.2
1.8.5 2017-03-28
----------------
- happn-util-crypto 0.2.3
1.8.6 2017-03-29
----------------
- __ensureCryptoLibrary only happens if encryptPayloads || loginType === 'digest'
1.8.7 2017-03-30
----------------
- removed var Primus from lib/client because Primus is in window in browser client
1.9.0 2017-03-31
----------------
- account lockout
1.10.0 2017-04-01
----------------
- revoke session
- revoke-session backward compatible with happn 2 clients
1.10.1 2017-04-04
-----------------
- fixed issue with services, where initializeServices was a global variable
1.11.0 2017-04-11
-----------------
- updated with happn-2 changes
1.11.1 2017-04-14
-----------------
- fix: event subscriptions don't resume with subscriptionId causing server-side .subscriptionData to be empty
- fix: resumed event subscriptions no longer contain meta
- fix: .off(listenerIdNumber) failing for explicit (no wildcard) paths
1.12.0 2017-04-18
-----------------
- fix: options passed into the client with a null or empty options, but a connection default to 127.0.0.1:55000
- enhancement: login with a token is now possible
- test: default profiles, client options, login using tokens
1.12.1 2017-04-21
-----------------
- fix: issue #49 strict bucket events dont work
1.12.2 2017-05-30
-----------------
- update to forked sillyname (removed objectionable words)
1.13.0 2017-06-08
-----------------
- updated password-salt-and-hash to happn-password-salt-and-hash
- updates to travis node 8
- updates to .gitignore
1.13.1 2017-06-15
-----------------
- fixed issue with protocol 1.1.0, protocol field missing
1.13.2 2017-06-15
-----------------
- fixed issue with protocols, protocol field "harded coded in emit and response on all plugins"
1.13.3 2017-06-19
-----------------
- updated g6 test, timeout
1.13.4 2017-07-07
-----------------
- updated parseFields in dataprovider to not append data.data
2.0.1 2017-07-18
-----------------
- fixed delegate.runCount issue
- updated data.
2.1.0 2017-07-29
----------------
- released changes _data.
3.0.0 2017-07-30
----------------
- updated wildcard, fixed bug where db path was stripping / unintentionally
- wildcard fix may break existing systems that are inadvertantly making use of the bugs permissiveness
3.1.0 2017-07-18
----------------
- Bearer token authorization header
- moved getting session from req to security service
- added happn_session property to req, for repeated calls of the sessionFromRequest method in one request
4.0.0 2017-10-08
----------------
- breaking changes, protocol 2.0.0:
- server
- set requests can not contain *'s
- doing away with integer listener ids
- off cannot take a string now, it is the reference not the path
- offPath takes in the path
- no more buckets, wild-pare integrated
5.0.0 2017-11-24
----------------
- backward compatible protocol 1 & 2
- memory leak fixes in protocol service and checkpoint
5.0.1 2017-11-24
----------------
- uses less memory for subscriptions, not storing the whole session
- tested subscriptions leaks on session disconnect
5.1.0 2017-11-25
----------------
- integrated happn-stats
5.1.2 2017-11-27
----------------
- fixed use of undefined variable in property
- added happn-stats and dependency
- only test master and PR in travis
5.2.0 2018-02-05
----------------
- expand stats to include queue messages/second (rate)
5.2.1 2018-02-26
----------------
- fixed invalid credentials error code to 401
5.3.0 2018-03-13
----------------
- all tests refactored
- able to add custom data to groups, tested
- fixed browser tests
- fixed prepareOptions in client for redundant connections
6.0.0 2018-03-13
----------------
- replicate security changes where happn-cluster is present
- db is versioned, and can be upgraded
- cookie token permissionSetKey removed
- fixed group deleted but not unlinked properly
- updated 401 return on http calls
6.1.0 2018-04-18
----------------
- fixed 401 issue with auth invalid credentials failure
- merge only subscriptions
6.2.0 2018-04-19
----------------
- local admin login
- tested _ADMIN password can be changed
6.2.1 2018-04-20
----------------
- activate session management no longer calls dataChanged
6.3.0 2018-04-25
----------------
- lisUsers optimised
- listUsers criteria
6.3.1 2018-05-01
----------------
- removed unnecessary bindings
- removed unnecessary try catch blocks
6.3.2 2018-05-03
----------------
- security caches refactor
- security caches extended tests
- lru cache now has getSync and setSync methods
- lru cache now has values method
- security users and groups refactor
7.0.0 2018-05-10
----------------
- allowed set and on paths are more permissive with regards to special characters '(' ')' '&'
- set paths are not allowed to contain the * character
- server side path checking
- increment set functionality and tests
7.1.0 2018-05-16
----------------
- added the includeGroups:false functionality in getUser
7.1.1 2018-05-15
----------------
- groups no longer in session passed back on login, smaller on the wire
7.1.2 2018-05-18
----------------
- more permissive paths in set and on, now % : is also allowed
7.1.3 2018-05-26
----------------
- handle_error now unit tested
- handle_error now has fatal option, only puts client into ERROR state if fatal
7.1.4 2018-05-28
----------------
- fixed intermittent issue with removal of decoupled session groups in security
7.2.0 2018-06-07
----------------
- feature: templated permissions
- fix: login lockout bug
7.2.1 2018-05-28
----------------
- fix: error when login locks not explicitly enabled
7.2.2 2018-05-28
----------------
- refactor: jshint integration
- dep: package pem updated for new openssl libs
7.2.3 2018-08-23
----------------
- refactor: client unit tests
- jshint syntax fixes
7.3.0 2018-08-23
----------------
- feature: getUsersByGroup
8.0.0 2018-09-10
----------------
- fix: deleteUser removes tree first then user
- change: removed wild-pare, and included tame-search, wildcards now dealt with differently
- change: client now has state property holding all mutable state
- change: client now uses status property to indicate connection state
- change: happn-3 protocol now sends back a security-directory-changed system event
- change: protocol now logs a verbose error on AccessDenied
8.0.1 2018-10-15
----------------
- fix: disconnect issue with protocol 2 client and protocol 2 server
8.0.2 2018-10-20
----------------
- fix: nedb provider now clones incoming data
8.1.0 2018-10-31
----------------
- security patch: cookie client adds is now secure
- security patch: hsts header when https mode
- security enhancement: allow _ADMIN connections on intra-process only by configuration
8.1.1 2018-11-06
----------------
- fix: scope issue with middleware
- refactor: service.js cleaned up
8.1.2 2018-11-07
----------------
- fix: issue with __transformResponse protocol happn_1, bad callback
- fix: security, users that are substrings of other users get returned by getUser
- test: updated travis.yml
8.1.3 2018-11-07
----------------
- fix: protocol fail for encrypted payloads issue
8.2.0 2018-11-15
----------------
- feature: variable depth subscriptions
8.2.1 2018-11-16
----------------
- fix: overlapping variable depth subscriptions, different depths
- doc: updated variable depth on readme
8.2.2 2019-01-02
----------------
- fix #172: remove large unused 'trie-search' dep
8.2.3 2019-01-02
----------------
- fix: happn_1.3.0 protocol backward compatibility
8.2.4 2019-01-02
----------------
- fix: happn_1.3.0 protocol backward compatibility - outbound
8.2.5 2019-01-18
----------------
- fix: listUserNamesByGroup does not work on mongodb (issue 180 workaround)
8.2.6 2019-01-24
----------------
- issue #184 fix: cannot read status of null in .on response of client
- lru cache issue
8.2.7 2019-02-01
----------------
- client now disregards permission change errors when reattaching sessions
- using dezalgo in more obvious security methods that early exit with callbacks
9.0.0 2019-03-01
----------------
- performance optimizations for embedded version: issue #170
9.0.1 2019-03-17
----------------
- session service configures session correctly for heartbeats
9.0.2 2019-03-24
----------------
- latest primus-wrapper
9.0.3 2019-04-11
----------------
- patch: regenerated browser_primus
9.0.4 2019-04-11
----------------
- issue #181,#196,
- happn-logger version 0.1.0
- configurable iteration count pbkdf2
9.0.5 2019-05-22
----------------
- fix: $regex filter
9.1.0 2019-05-24
----------------
- feature: skip capability for client search/get
- doc: updated README
9.1.1 2019-06-04
----------------
- fix: parseFields issue with $or operator
10.0.0 2019-06-10
-----------------
- authority delegation, onBehalfOf
10.0.1 2019-06-10
-----------------
- cleanup: removed range code from client
- doc: updated readme
- dep: updated ws
- dep: updated happn-stats
10.1.0 2019-07-08
-----------------
- fix #209 - implement ability to respond with a HTML file for unauthorized/forbidden requests
- fix #210 - respond with status code '401 Unauthorized' for invalid or missing token instead of '403 Forbidden'
10.1.1 2019-07-09
-----------------
- fix: issue with client error and ws v7
- fix: opts on convenience client methods for auth delegation
10.1.2 2019-07-30
-----------------
- fix: 217 Update bluebird dependency
10.1.3 2019-07-30
-----------------
- security update: include happn leaf in permission identity
- fix: issue with client error and ws v7, handle old ws
10.2.0 2019-08-16
-----------------
- Issue #222 - Add count capability to data provider
10.2.1 2019-08-23
-----------------
- Issue: access denied security logs username and password via JSON.stringify
10.2.2 2019-08-28
-----------------
- session logs browser primus writer
- revokeSession revokes token, including across the cluster
- reverted to v6.1 of ws - backward compatibility issue, ws 6.2+ checks sec header format causing failures of devices in the field
10.2.3 2019-09-12
-----------------
- getOnBehalfOfSession now includes the delegate sessions happn property
- sessionFromRequest includes happn property fetched from system service
10.3.0 2019-10-07
-----------------
- prettier and eslint updates
- using uglify-es for minify in packager
- listUsers and listGroups now allow for mongo filters
10.4.0 2019-10-08
-----------------
- listUsers and listGroups now allow for extended search options (sort, limit, skip, count)
- updates to data provider to allow for aggregate, collation and count in mongodb
10.4.1 2019-10-14
-----------------
- listUsers collation fix
- mongodb listUsers and listGroups tests
- fix: broken browser client, due to lint fix, undeclared _this
- Object.assign polyfill (IE11 support)
10.4.2 2019-10-23
-----------------
- lint prettier tests
10.4.3 2019-11-11
-----------------
- cache fixes - clearTimeout on persisted cache
- test: user deletion and recreation token reuse (test/integration/security/access_sanity)
11.0.0 2019-11-17
-----------------
- feature: client session end events
- chore: lint fixes
- feature: happner-2 #158, configure usernames to be case-insensitive
- test: happner-2 #179, client testing to ensure retries still happen after ENOTFOUND
- dep: happner-2 #186, using version 1.0.0 of happn-util-crypto, latest bitcore
- feature: happner-2 #188, happn client saved to .happner by packager
- feature: security config setting: lockTokenToUserId: users now created with userid which is embedded in the token, which is checked against token logins and HTTP requests
- fix: packager ensure .happner home directory
- feature: sessionTokenSecret is retained between startups
11.0.1 2019-11-29
-----------------
- fix: __cleanseRequestForLogs fails when message.request is undefined, happner-2 #226
11.1.0 2019-12-05
-----------------
- feature: allow for volatile permissions via the persistPermissions security config setting, happn-3 #245
11.1.1 2020-01-13
-----------------
- fix: client Socket is constructed with the pingTimeout option set to a default of 45e3, this is configurable
11.1.2 2020-01-17
-----------------
- fix: upsertUser and upsertGroup and deleteUser and deleteGroup check for undefined or not object user or group
- fix #254: include port number in listen error log msg
11.1.3 2020-01-26
-----------------
- fix: client login failure (ECONNREFUSED) memory leak
11.1.4 2020-01-30
-----------------
- fix: session-end on expired token after system time change
- fix: double error is not emitted on connection failure when failure occurs in callback
11.2.0 2020-02-15
-----------------
- feature: unconfigured session removal
- fix: client reconnect strategy only for reconnections, not for initial connection timeouts
11.2.1 2020-02-26
-----------------
- optimisation: setImmediate on incoming data from socket in session service
11.2.2 2020-03-05
-----------------
- fix #274: Bring back IE11 compatibility.
11.2.3 2020-03-05
-----------------
- fix: #272 - primus leaks on client __endSocket
- fix: removed Promisify of handleMessage in session service
11.2.4 2020-03-16
-----------------
- refactor: prioritization of data providers by length of filter pattern desc
- fix: when using volatile permissions, system permissions starting with _ are retained in same datastore as groups
- fix #283: client connection status is set to ACTIVE before authentication happens, added new status RECONNECT_ACTIVE
11.3.0 2020-03-30
-----------------
- test: per message deflate compression configuration, issue #282
- doc: per message deflate compression README update
- fix: 403 returned on token ttl, issue #287
- feature: leaner publish functionality on the client, issue #281
- refactor: CONSTANTS being used for authorization failure messages
11.3.1 2020-04-20
-----------------
- fixes #290 cookie name appended with _https if protocol is https
- feature login with cookie fixes #297
- possible breaking: stats now only being created if emit:true in config (no-one really uses the stats...)
- fixes #292 - eat the rest of the post after sending an unauthorized/forbidden
- fixes #295 - _ADMIN user locked out of web requests causes crash
- feature: IP address whitelisting fixes #299
11.3.2 2020-04-20
-----------------
- fix #303 - upgrade to async@3 throughout
- fix: publication count functionality in client, adjusted backward compatibility tests for this
11.4.0 2020-04-29
-----------------
- feature - new connect event #300
- feature - connect, authentic, configure-session, disconnect events have more client data #300
- fix: safeSessionData no longer includes token
- protocol feature: client now sends happn version up with configure session
- neatened up security directory changes event names into constants
11.4.1 2020-05-22
-----------------
- feature: configurable http/s keepalive
11.4.2 2020-05-27
-----------------
- fix: added eachSeries to subscription service securityDirectoryChanged
11.5.0 2020-06-04
-----------------
- fix #309: added slice to doHandover in client, as in place modification of the state.events causes follow on handlers to be missed
- feature: explicit promisify on .on and onAll for client, allows for subscription promises to work
- feature: once convenience method on client subscriptions
11.5.1 2020-06-12
-----------------
- fixes #313 #314 - permissions tree and regex caching optimisations
- wrapImmediate utility function and wrapImmediate of nedb provider functions
11.5.2 2020-06-18
-----------------
- test: renamed _ security integration tests to use -
- test: user deleted backward compatibility and integration tests
- log: delete and add user or group info logs
- fix #316: merge upsert mutates input data
11.5.3 2020-06-30
-----------------
- refactor: removed bluebird dependency
11.5.4 2020-07-15
-----------------
- optimisation: tame-search upgrade for faster unsubscribes
11.6.0 2020-08-13
-----------------
- feature: default info level log in JSON format on session attach and detach - SMC-729
- test: scripts for client connection leaks and infinite loop issue - SMC-731
11.7.0 2020-08-19
-----------------
- feature: ability to switch off info level log in JSON format on session attach and detach - SMC-775
11.7.1 2020-09-21
-----------------
- bug: maybePromisify does not call resolve the promise if options and an undefined callback is passed - SMC-1108
11.7.2 2020-09-30
-----------------
- patch: race condition on load permissionset - SMC-1028
11.7.3 2020-09-30
-----------------
- patch: selective security cache clearing and concurrency 1 queue on dataChanged event - SMC-1189
- feature: ability to switch off removal of subscriptions on security directory changed effected sessions
- fix #180: path_only selects now work on mongo
11.8.0 2020-11-19
-----------------
- feature: SMC-1269 - logging a JSON object on socket error
- feature: SMC-1321 - only print error message for fail to decode JSON socket error, also just warning
11.8.1 2020-11-23
-----------------
- SMC-1482 - fix: redirected logs not in correct format
11.9.0 2021-03-19
-----------------
- [ERRONEOUS PUBLISH - on tag dep-updates]
11.10.0 2021-03-30
-----------------
- feature: SMC-1808 - Add support for permissions on the happn user
- feature: SMC-1897 - nedb data provider must sync db file after each persistent write
11.10.1 2021-04-15
-----------------
- fix: SMC-1425 - maybePromisify and stale token, after server token change causing unhandled error
11.10.2 2021-04-21
-----------------
- fix: SMC-2474 - client fixed to be backward compatible with <11.10.0 servers, which do not send back user with permissions on dataChanged
11.11.0 2021-07-14
-----------------
- feature: SMC-1810 - added support for getting and listening on nested permissions.
11.12.0 2021-08-06
-----------------
- feature: SMC-3460 - added support for anonymous user.
- process: SMC-3646 - set up coveralls and github actions
11.12.1 2021-08-11
-----------------
- bugfix: SMC-3682 - only add criteria to db query if passed in
11.12.2 2021-08-16
-----------------
- optimisation: SMC-3720 - in Publication.prototype.publish, don't call async.eachLimit on empty array
11.13.0 2021-08-17
-----------------
- feature: SMC-2717 - cookie lifecycle events
11.13.1 2021-08-23
-----------------
- fix: SMC-3807 - adding multiple user permissions
11.13.2 2021-08-27
-----------------
- fix: SMC-3242 - Will correctly listRelevantPermissions for onBehalfOf sessions
11.13.3 2021-09-08
-----------------
- fix: SMC-4044 - cookie events not dependent on client login
11.13.4 2021-09-20
-----------------
- fix: SMC-4161 - user permissions not cleaned up on user deletion
11.13.5 2021-09-27
-----------------
- fix: SMC-4209 - concurrency issue, user created logged on deleted, causes security directory update to fatal
- fix: SMC-4208 - merge insert now uses upsert, moved constants out of data service
11.13.6 2021-11-09
-----------------
- fix: SMC-4512 - data provider get action causes fatal when allowNestedPermissions switched on
11.14.0 2021-11-24
-----------------
- feature: SMC-2954 - Allows for configuration and use of multiple authentication providers.
11.14.1 2021-11-24
-----------------
- fix: SMC-4386 - upsertMultiplePermissions will now allow for removing permissions/prohibitions as well as upserting permissions or prohibitions
11.14.2 2021-11-26
-----------------
- fix: SMC-2716 - fatal caused when message passed to processAuthorize (security service) has no message.request.path
- fixed test was leaking clients
12.0.0 2021-11-26
-----------------
- feature: SMC-734: Updated happn-util-crypto - removed bitcore, changes to crypto calls, removed payload encryption
- maybe-breaking: SMC-734: removed encrypted payloads as it is not being used anywhere
- lintignored session-management test, may be breaking eslint due to callback hell
12.0.1 2021-12-02
-----------------
- SMC-4466: light client modifications - able to pass null options into create
12.1.0 2021-12-13
-----------------
- SMC-4550: Feature - added lokup tables and permissions
12.1.1 2021-12-31
-----------------
- SMC-4901: Fix - bad cookieName set on session
12.1.2 2022-01-07
-----------------
- SMC-4938: Fix - lookup tables fail for rest request
13.0.0 2022-01-08
-----------------
- SMC-4938: Fix - dont delete session.username
- SMC-4550: Fix -correctly calling securityDirectoryChanged on permission removal and group/permission table unlinking
- SMC-4550: Fixed array templated permission substitution
- SMC-4550: subscriptions service does not pollute request with parsed path info
- SMC-4550: unified tempated permission path combinatorial logic
13.0.1 2022-03-01
-----------------
- SMC-4198: made all dependencies major bumps
13.0.2 2022-03-03
-----------------
- SMC-4198: git and npm ignore updates
13.0.3 2022-03-04
-----------------
- SMC-4198: fixed bad dataroute config to emit a proper error message
13.0.4 2022-03-08
-----------------
- SMC-5125: Permissions-sets now accurately reflect templated paths
13.0.5 2022-03-29
-----------------
- TEN-92, TEN-93: logging levels and events
- TEN-102: loki snapshot file redundancy
13.0.6 2022-04-06
-----------------
- TEN-103: set default timeout on component loading wait warning to 30secs
- TEN-104: errors are only logged on system failures
13.0.7 2022-05-04
-----------------
- TEN-112: group with permissions that have dots in them causes compaction failure
13.0.8 2022-05-06
-----------------
- TEN-114: enforce admin group save on startup
13.0.9 2022-05-09
-----------------
- TEN-114: happner-2: enforce MESH_GST, MESH_ADMIN upsert on startup, ensures db dir
13.1.0 2022-05-26
-----------------
- TEN-49: add diagnostics log to caching service, refactored happn-3 caching layer
- TEN-54: all systems tested on node v18
13.1.1 2022-06-02
-----------------
- TEN-49: fixed persisted cache and loki provider issues, caused by revoked tokens
13.1.2 2022-06-09
-----------------
- TEN-31: further logging restrictions (info -> debug) and clustering allowances (debug -> info)
13.1.3 2022-06-28
-----------------
- TEN-123: fix to getaddress - issue with bad breaking release in node 18.4
13.1.4 2022-07-14
-----------------
- TEN-125: body-parser v1.20.0 causes memory leak
13.2.0 2022-07-07
-----------------
- TEN-31: added userBelongsToGroups to security.users
13.2.1 2022-09-08
-----------------
- TEN-130: updated logger dependency
13.3.0 2022-09-22
-----------------
- TEN-65: bad options on data get
- TEN-126: reconnect on error
13.4.0 2022-10-03
-----------------
- TEN-132: cache key regex masking
13.5.0 2022-10-12
-----------------
- TEN-143: ws and primus update in happn-primus-wrapper
- TEN-101: removed elasticsearch support
13.6.0 2022-10-29
-----------------
- TEN-129: security service tests
- TEN-141: fatal on security generate session
- TEN-144: rest array arguments
- TEN-146: preserve criteria on remove
13.6.1 2022-11-05
-----------------
- TEN-135: mongo search does not sort by path
13.7.0 2022-11-24
-----------------
- TEN-4: productionize summon (authType saved to user)
- TEN-140: outdated pem module
13.7.1 2022-11-26
-----------------
- feat: Sqlite DB Provider
13.7.2 2022-12-22
-----------------
- feat: loki provider disaster recovery enhancements
13.8.0 2023-01-11
-----------------
- feat: loki archiving and plugins
13.9.0 2023-01-18
-----------------
- feat: Summon productionization
13.9.1 2023-02-17
-----------------
- doc: added documentation regarding primus opts
13.10.0 2023-03-03
-----------------
- feat: token revocation and logout
- fix: token revocation cluster fix
13.11.0 2023-04-29
-----------------
- feat: changePassword in client
- feat: resetPassword supported by auth provider
13.11.1 2023-05-20
-----------------
- feat: add happner-2 support for reset password
13.11.2 2023-08-05
-----------------
- feat: fixed mesh_gst paths in happner-2
13.12.0 2024-03-27
-----------------
- feat: loki provider has new file-size compaction threshold
13.12.1 2024-07-16
-----------------
- fix: loki provider fsync not releasing file handles