- The old
X-Content-Security-Policy*headers are no longer emitted - (Security) If the public URL is configured to start with
http://noStrict-Transport-Securityheader is emitted - (Security) The default time for the
Strict-Transport-Securityheader is now 2 years - (SQL) Fixed some errors in the DB2 Flyway scripts
- Now multiple endpoints with the same combination of Participant ID, Document Type ID, Process ID and Transport Profile ID can be created, as long as they have non-overlapping validity periods. See #454 - thx @wartab
- SMP Endpoints created via the API are now also checked for overlapping validity periods and eventually rejected
- The
ISMPEndpointnow has an ID. - The Endpoint List and the Endpoint Tree now also shows the endpoint validity separately
- Removed
ISMPServiceInformationManager.findServiceInformationand added.getAllSMPEndpoints()instead - (SQL) Flyway migrates up to version 33
- The Service Group export now contains a new attribute
smp-versionat the root, indicating the SMP version used to export the data - (XML) Fixed a bug that if an SMP endpoint had only a Service Activation Date but no Expiration Date, that the Activation Date was not persisted
- (Security) The HTTP session ID is now refreshed on login, avoiding session fixation attacks
What's Changed
Full Changelog: phoss-smp-parent-pom-8.1.1...phoss-smp-parent-pom-8.1.2