v3.2

Users using OAuth2 or OpenID Connect are urged to upgrade to this release because of security improvements:

• Removed OAuth2 tokens from query parameters #109 , now using cookies instead
• Generate Dockerfile with clamnewproject #104
• Allow JSON-LD content request for service metadata, using schema.org vocabulary #110
• Allow using OAuth2 and HTTP Basic at the same time
• Implemented USERS_FILE directive to load user credentials from a simple tsv file
• Made wrapper shell script template POSIX-compliant
• Revised documentation regarding installation and deployment, favouring containerised setups (e.g. Docker) in production scenarios.

v3.1.8

Fixed regression in oauth2 authentication introduced in v3.1.6

v3.1.7

Bugfix release: status log has to be utf-8 encoded

v3.1.6

Bugfix release: redirect (401) when oauth tokens expire or other unexpected errors occurs

v3.1.5

Minor bugfix release, metadata update (no functional changes)

v3.1.4

Bugfix release:

• Fixed project creation when using OAuth2 authentication
• Fixed/disabled automatic redirects in flask/werkzeug that were having unwanted side-effects
• Fix for parsing json environment variables in external configuration
• Increased debug output in OAuth2 login process

v3.1.3

Minor bugfix release: fixes environment variables to JSON mapping in external configuration files

v3.1.2

Implemented some type casts for handling environment variables in config files:

• Now supports constructions like: {{VAR|int}} {{VAR|bool}}
• Fixed a small regression issue in the test suite (#107)

v3.1.1

• Implemented more extensive support for handling environment variables in config files,
  • Now supports required variables: {{VAR!}} and defaults {{VAR=defaultvalue}}

v3.1

• Implemented the ability to share output publicly over a one-time download link to overcome authentication barriers #95
  • Implemented support for temporary unauthenticated storage (enabled by default) in the Forwarder
  • Defer building of downloadable archives to when temporary storage is accessed
  • Implemented a share option in the interface, using a new ShareView. Implemented the ability to share more persistently.
  • fixes for return mime types on error responses for the storage endpoint
  • Implemented a downloadstorage() method in the client library
• Forwarders now automatically urlencode the backlink #86
  • Resolve more variables in Forwarder urls and updated documentation accordingly #86
• Implemented OpenID Connect support (#93). Various fixes and improvements for OAuth2 authentication:
  • added OAUTH_CLIENT_URL configuration directive
  • Implemented OAUTH_USERINFO_URL parameter and implemented more general behaviour for getting usernames (email) that should work with OpenID Connect #93
• Augmented the interface so things don't get cluttered when there are many viewers for a file #102
• Do not serialise empty/unfilled input parameters in CLAM metadata #103
• Added utility functions isncname and makencname to check if a string is a valid XML NCName and to make it so if not. Duplicated from the folia library but included here so we don't need an external dependency.
• Implemented an allowdefault option on viewers, can be used to state that you don't want a feature to be used as default viewer.
• ensure textstats example also works without external configuration file (it is used as a simple demo case)
• Implemented ability to read original host from X-Forwarded-Host (#105)
• Updated dependencies to the latest versions, deprecated Python 3.5 support (use 3.6 or higher)