Prepare the release of Otoroshi version 1.5.0-alpha01

CHANGELOG

@@ -4,6 +4,70 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.5.0-alpha01] - 2020-10-29
+
+https://github.com/MAIF/otoroshi/milestone/6?closed=1
+https://github.com/MAIF/otoroshi/compare/v1.4.22...v1.5.0-alpha01
+https://github.com/MAIF/otoroshi/releases/tag/v1.5.0-alpha01
+
+- Add pluggable authentication modules for services instead of Auth0 only (#3)
+- Include Kubernetes ingress controller as a Job (#91)
+- Add support for Redis cluster (#252)
+- More JWT support from Otoroshi to Backends (#4)
+- [plugin] - Mirror traffic (#118)
+- HealthCheck disable service strategy (#221)
+- add bulk apis for main entities (#285)
+- Cleanup documentation (#295)
+- Support full OIDC / OAuth2 lifecycle with forwarded access token (#298)
+- Streaming input issue (#331)
+- Identity aware TCP forwarding over HTTPS  (#332)
+- Add a geoloc target matcher  (#338)
+- Use ndjson raw export for the import/export feature instead of partial json (#343)
+- Compatibility issues with Elastic 7.x (#344)
+- Document tcp tunneling (#356)
+- Update U2F documentation (#357)
+- add a button to test LDAP connection (#426)
+- cleanup datastore code (#464)
+- Remove U2F support (#468)
+- Customize UI title from config. (#469)
+- Update all JS deps (#470)
+- Webauthn support multiple devices for the same user (#471)
+- Support for client_credentials flow backed by apikeys (#472)
+- Rewrite SSL/TLS part with new Dynamic SSLContext (#473)
+- accesslog plugins - the referred is not in the response (#477)
+- If script description is empty, then take the programmatic one (#478)
+- multi-tenant / multi-teams (#479)
+- plugins to populate user from jwt token and use it in otoroshi token (#481)
+- Move third-party apikeys OIDC to a plugin and deprecate the original feature (#482)
+- Add email address in let's encrypt settings (#484)
+- add kubernetes deployment descriptors examples (#485)
+- add Helm chart to deploy otoroshi (#486)
+- Add routing constraint based on meta keys (#536)
+- Have a unique name for groups (#539)
+- Handle initial data import with a merge option (#544)
+- Read initial secrets from files path (#545)
+- Do not support enabled in kubernetes entities (#546)
+- override httpOnly and secure in private apps session cookie from module config (#547)
+- Typo in security header key X-Frame-Options (#548)
+- Delete non existant (in otoroshi) secrets  (#551)
+- Try to find entities by id then merge it (#552)
+- Avoid phishing during private-apps authentication (#553)
+- Revamping secrets and testing them at startup (#555)
+- Duplicate auth. module configs. (#557)
+- back <- after consulting a service don't refresh the menu (#558)
+- Error after suppressing a Service target (#559)
+- Multiple authorized entities on apikeys (#560)
+- Multiple groups on service descriptors (#561)
+- Generic data exporters (#588)
+- Assign worker to handle only selected tenant data (#590)
+- Support Kubernetes 1.18 IngressClass (#591)
+- Generic notifier support in exporters (#592)
+- Add liveness probe check in service descriptors health check (crd, ingress) (#593)
+- Add usage of custom configuration file in configfile (#633)
+- Handle samesite in cookies (#660)
+- Support sendgrid for alert emails (#665)
+- enhance coredns patching to handle config changes (#667)
+
 ## [1.4.22] - 2020-03-17
 
 https://github.com/MAIF/otoroshi/milestone/29?closed=1

clients/tcp-udp-tunnel-client-gui/yarn.lock

@@ -287,7 +287,7 @@ electron-osx-sign@^0.4.11:
     minimist "^1.2.0"
     plist "^3.0.1"
 
-[email protected].9:
+[email protected].0:
   version "15.1.0"
   resolved "https://registry.yarnpkg.com/electron-packager/-/electron-packager-15.1.0.tgz#16a3733e4cad26112a2ac36f0b0f35c3b0170eff"
   integrity sha512-THNm4bz1DfvR9f0g51+NjuAYELflM8+1vhQ/iv/G8vyZNKzSMuFd5doobngQKq3rRsLdPNZVnGqDdgS884d7Og==

otoroshi/app/models/apikey.scala

@@ -967,7 +967,7 @@ object ApiKeyHelper {
               errorResult(Unauthorized, "Invalid API key", "errors.invalid.api.key")
             case Some(key) if key.isInvalid(clientSecret) => {
               sendRevokedApiKeyAlert(key)
-              errorResult(BadRequest, "Bad API key", "errors.bad.api.key")
+              errorResult(Unauthorized, "Bad API key", "errors.bad.api.key")
             }
             case Some(key) if !key.matchRouting(descriptor) =>
               errorResult(Unauthorized, "Bad API key", "errors.bad.api.key")

scripts/changelog.sh

@@ -1 +1,2 @@
-curl -H "Authorization: bearer ${GITHUB_TOKEN}" -X POST -d '{"query":"{\n  repository(owner: \"MAIF\", name: \"otoroshi\") {\n    milestone(number: 29) {\n      id\n      issues(first: 500) {\n        edges {\n          node {\n            number,\n   title\n          }\n        }\n      }\n    }\n  }\n}","variables":null}' https://api.github.com/graphql | jqn 'at("data.repository.milestone.issues.edges") | map(a => a.map(i => i.node.title + " (#" + i.node.number + ")" ))'
+curl -H "Authorization: bearer ${GITHUB_TOKEN}" \
+  -X POST -d '{"query":"{\n  repository(owner: \"MAIF\", name: \"otoroshi\") {\n    milestone(number: 6) {\n      id\n      issues(first: 500) {\n        edges {\n          node {\n            number,\n   title\n          }\n        }\n      }\n    }\n  }\n}","variables":null}' https://api.github.com/graphql | jqn 'at("data.repository.milestone.issues.edges") | map(a => a.map(i => i.node.title + " (#" + i.node.number + ")" ))'

scripts/release/release.js

@@ -79,14 +79,23 @@ function runSystemCommand(command, args, location, env = {}) {
 }
 
 function runScript(script, where, env = {}) {
-  const source = spawn(script, [], {
-    cwd: where,
-    shell: true,
-    env: { ...process.env, ...env },
-    stdio: ['ignore', 'pipe', process.stderr]
+  return new Promise((success, failure) => {
+    const source = spawn(script, [], {
+      cwd: where,
+      shell: true,
+      env: { ...process.env, ...env },
+      stdio: ['ignore', 'pipe', process.stderr]
+    });
+    source.on('close', (code) => {
+      if (code === 0) {
+        success('return code: ' + code)
+      } else {
+        failure(new Error('bad return code: ' + code));
+      }
+    });
+    return echoReadable(source.stdout);
   });
-  return echoReadable(source.stdout);
-}
+}  
 
 async function changeVersion(where, from, to, exclude = []) {
   console.log(`Changing version from '${from}' to '${to}'`)
@@ -111,9 +120,6 @@ async function buildVersion(version, where, releaseDir) {
   await runSystemCommand('/bin/sh', [path.resolve(where, './scripts/build.sh'), 'clean'], where);
   // build ui
   await runScript(`
-    source $NVM_TOOL
-    nvm install 13.1.0
-    nvm use 13.1.0
     cd ${where}/otoroshi/javascript
     yarn install
     cd ${where}
@@ -215,9 +221,6 @@ async function buildLinuxCLI(location, version) {
 
 async function buildTcpTunnelingCli(location, version) {
   await runScript(`
-    source $NVM_TOOL
-    nvm install 12.7.0
-    nvm use 12.7.0
     cd ${location}/clients/tcp-udp-tunnel-client
     yarn install
     yarn pkg
@@ -237,9 +240,6 @@ async function buildTcpTunnelingCli(location, version) {
 
 async function buildTcpTunnelingCliGUI(location, version) {
   await runScript(`
-    source $NVM_TOOL
-    nvm install 12.7.0
-    nvm use 12.7.0
     cd ${location}/clients/tcp-udp-tunnel-client-gui
     yarn install
     yarn dist-mac
@@ -384,6 +384,7 @@ async function ensureStep(step, file, f) {
 async function releaseOtoroshi(from, to, next, last, location, dryRun) {
   console.log(`Releasing Otoroshi from version '${from}' to version '${to}'/'${next}' (${location})`);
   console.log(`Don't forget to set JAVA_HOME to JDK8_HOME and to docker login`);
+  console.log(`Don't forget to setup nvm with latest 13.x`);
   console.log(`Don't forget to update the CHANGELOG file before starting`);
   console.log(`Press a key to continue ...`)
   await keypress();