Release 5.29

important

Keycloak authorization configuration now has changed significantly and Keycloak authorization in Designer Web is now enabled by default.

See environment variable changes below.

Note that from 5.30.0 it is possible to disable Keycloak for transition period, but after transition period Keycloak will be mandatory.

caution

Development API calls now doesn't go directly to runtime server, but through Designer Web service itself.

caution

Expressions now use isolated-vm based evaluator @ivm by default. New expression evaluator is more secure, and it is backwards compatible with previously used @eval evaluator. @eval evaluator is now deprecated and disabled by default.

info

Node.js is upgraded to version 18.

Configuration changes

Environment variable changes are described below. Mandatory variables are in bold.

Designer Web

• Added
  • PUBLIC_API_BASE_URL - browser accessible URL to runtime server (without /ace prefix)
  • DEV_API_BASE_URL - internal URL to runtime server dev endpoint (with /ace prefix)
  • JWT_SECRET - copied from runtime server, need to have same value as for runtime server
  • JWT_EXPIRE - moved from runtime server
  • KEYCLOAK_CLIENTID - moved from runtime server
  • KEYCLOAK_REALM - moved from runtime server
  • KEYCLOAK_CLIENT_SECRET - moved from runtime server
  • KEYCLOAK_AUTH_SERVER_URL - moved from runtime server
  • ACE_UI_URL - moved from runtime server
  • KEYCLOAK_DESIGNER_ACCESS_ROLE - copied from runtime server, need to have same value as for runtime server
• Removed
  • REACT_APP_DEV_API_BASE_URL - this option is split into 2 variables for public and development API access
  • REACT_APP_AUTH_STRATEGY - option removed as Keycloak authorization is now mandatory.

Runtime server

• No changes
  • JWT_SECRET
  • KEYCLOAK_DESIGNER_ACCESS_ROLE
• Added
  • ACE_DEV_API_AUTH_DISABLE - default false. Allows to disable development API authentication in case other method, like gateway or sidecar is used to protect APIs.
  • ENABLED_EVAL_EXTENSIONS
  • DEFAULT_EVAL_EXTENSION
  • IVM_TIMEOUT
• Removed
  • JWT_EXPIRE - moved to designer web server
  • ACE_UI_AUTH_STRATEGY - moved to designer web server and is keycloak by default, so no need to add it
  • KEYCLOAK_CLIENTID - moved to designer web server
  • KEYCLOAK_REALM - moved to designer web server
  • KEYCLOAK_CLIENT_SECRET - moved to designer web server
  • KEYCLOAK_AUTH_SERVER_URL - moved to designer web server
  • ACE_UI_URL - moved to designer web server
  • SELF_EXTERNAL_URL - removed completely

Keycloak

ACE runtime server url can be removed from Keycloak configuration completely. It is sufficient to leave only Designer Web URL.

Release notes

See docker images below.

ACE 5.29.0

October 11, 2023

Features

• DIG2022-19888
  Mandatory authorization in Designer Web
• DIG2022-13095
  Upgrade to Node.js 18
• DIG2022-17353
  Expression evaluator: isolated-vm
• DIG2022-21613
  Mongo-db step ObjectId support
• DIG2022-13658
  Upgrade RJSF to 5.x
• DIG2022-16744
  Scheduler installation command (CLI)
• DIG2022-19891
  Authorize Designer Web users in application backend
• DIG2022-17323
  Designer test endpoint git authorization in backend
• DIG2022-17322
  Designer Web Git authorization in backend
• DIG2022-17319
  Store Designer settings in Mongo
• DIG2022-17318
  Call test endpoints through Designer Web backend

ACE 5.29.1

October 14, 2023

Bug Fixes

• DIG2022-22044
  View API Definition is not loading the swagger UI page of deployed API's
• DIG2022-22047
  Executing deployed apis in swagger page are having additional attribute 'api-spec' in url

Docker images

Designer Web

Hash: sha256:9c7d501a7bd074f0389fedd8c56bc09a340391c50f44a2694d0aa683299940cd

docker pull euadigportalcoredev02acr.azurecr.io/ace-designer:5.29.1

Designer runtime server

Hash: sha256:88548d16b9bffdd4060789013041bfdc2741e6a630247f7f08a3ad8d8a7cfeab

docker pull euadigportalcoredev02acr.azurecr.io/ace-designer-server:5.29.1

Versioning CLI

Hash: sha256:38ff5857e2e480f8886aa497ce59f70823a4a74cb7e45c4b5d959e81d3a55013

docker pull euadigportalcoredev02acr.azurecr.io/ace-versioning:5.29.1

Scheduled job (BullMQ) administration

Hash: sha256:bd51bc16ebdd006a5cf2e71a2ed1eeef7005bbbb80f64e04d5d6117e17fb3f27

docker pull euadigportalcoredev02acr.azurecr.io/bull-board:5.29.1

Designer Desktop

ACE Designer Desktop is not available in this release. It will be available in future releases.