TykTechnologies/tyk v4.0.1

Tyk Gateway v4.0.1 and Tyk Dashboard v4.0.1

on GitHub

Tyk Gateway 4.0.1

• Tags that are configured on the api spec are now forwarded to an analytics record that can be used with the data pump.
• Added new use_param and param_name fields to the auth token signature configuration, in order to be able to pass the signature as a query parameter.
• Improved JWT Error messages response to prevent leaking information in case of wrong signing method. This will return generic error message as API response, but in logs it will be still fully visible error.
• Fixed support of GraphQL @extends directive alongside “extend” keyword - both provide the same behaviour when used
• Added a parameter disable_query_batching in API definition that controls if federation uses batching for GQL queries or not - users can choose if they want the queries to be executed with batching or not (this is connected to solving N+1 problem in federation)
• UDG Proxy config generator now supports union types
• Fixed behaviour of SSE stopping to work when websockets are enabled.
• Fixed unexpected behavior for grpc/coprocess middleware, where the request body sent from the client is not received in the grpc/coprocess application.
• Fixed invalidating cache through gateway API
• Fixed issue when client certificates enabled auth token mode, when key ID is passed as authorization header client certificate checking should work without needing to append client certificate to the request.
• Fixed same Go plugins to be referenced in multiple APIs
• Log body is now properly displayed, when enable_detailed_recording is on and 'Transfer-Encoding: chunked' is set.
• Fixed the auth data not being stripped from cookie although stripping auth data is enabled when cookie name is custom.
• Fixed an issue where GraphQL Federation was crashing gateway during performance testing
• Improved handling of optional query parameters in REST data sources, so that correct configuration is possible via GUI, not only via manual manipulation of API definition
• A GraphQL field selected by the user on an interface type is no longer ignored and is sent to the upstream
• GraphQL Engine will now correctly validate nested object variables instead of ignoring them
• Fixed an issue with templating syntax for UDG REST data sources in UDG which wasn’t working due to regression defect
• Fixed issues in the LocalTypeFieldExtractor GetAllNodes
method in graphql-go-tools which improved performance of the code and library
• Fixed an issue which was causing supergraph schema to be created incomplete when user was using @extends directive for a type that was not defined in any other subgraph
• Fixed an issue where sending arrays as variable for input types was not working
• Fixed an issue where GraphQL query failed to leave Tyk when it contained optional variables that had no value provided - it now works with a missing value or a value null
• Fixed an GraphQL issue where panic was occurring while gateway was accessing union and interface types
• Changed the way websocket connections are opened for GraphQL subscriptions - for multiple subscriptions from a single downstream just one connection is opened, for subscriptions with different auth headers separate connections are opened
• Body transformation templates now has access to new functions http://masterminds.github.io/sprig/
• Fixed concurrency issue where the wrong session object is returned when policies are applied, causing the Gateway to report an 403 error on first call
• Fixed an issue where sometimes the Gateway on first start would fail to load a certificate from Redis
• Fixed certificate revoking the in MDCB environment
• Fixed an issue where the Gateway would throw an error when you attempt to load a Python plugin with multiple modules
• Fixed an issue building Golang auth plugins

Tyk Dashboard 4.0.1

• Fixed the Oauth clients page in the Dashboard UI to render properly.
• Fixed error when creating APIs while using CosmosDB
• Fixed polices to be visible in Dashboard UI when using CosmosDB
• Fixed the dashboard license update via API when the existing license is expired.
• Fixed an issue with finding existing keys via key lookup - it is now possible to find previously created keys
• Fixed UI popups which show full Key ID
• Fixed an issue where UDG UI could cause an infinite loop and eventually app crash
• Fixed an issue that prevented users from deleting newly created UDG schema objects via GUI
• Fixed an issue where “Upstream protected” checkbox was visible for REST/TCP/Federation API types
• Fixed an issue where key search by substring in the UI stopped working after switching to graphQL query
• Fixed an issue where the Dashboard reported an error when trying to retrieve last login date for an SSO user due to Tyk not storing temporary users in its database