Changelog

Fixed improper credential validation on user registration causing the user to be created even when invalid credentials (mainly the password) was provided. The fix moves the password validation step to the earlier stage of the sign up flow (#ff13912).

Fixed improper record count for grouped reports where multi-value fields are involved. The fix, for some cases, omits duplicate values (7546dbb).

Fixed improper PostgreSQL formatting for ISO timestamp templates by adding an edge-case exception (#034a7f9).

Fixed improper number and text setting value decoding by covering edge-cases (#ced2daf).

Fixed improper module field resource translation encoding, decoding, and store persistance causing the field description and hint field to get mixed up by fixing invalid value mapping and removing translations from the DB (#0422e5f, #e7ea299, #6c2dd28).

Fixed improper workflow prompt handling when user has multiple Corteza instances (tabs) open at the same time. Corteza web applications improved communication on what prompts are already resolved and where the prompts should be shown ({CORTEZA_WEBAPP_VUE_COMMIT_BASE}ef238df[#ef238df]).

Fixed broken module field value expressions where the old record reference was used. The issue occurred because the value was never provided (#993cd22).

Changed the profiler endpoints (when enabled) to be under /debug instead of /__profiler to conform to pprof requirements (2653c3894).

Fixed improper static translation loading for custom languages (964b71a56).

Fixed memory leaks and general performance optimizations for content sanitization (2711b0211), workflow loading (35c1c0892), and expression processing (4eccaa826).

Fixed workflow attachment uploading for all supported types (Reader, Bytes, and String) (7448a2d7b).

Fixed prompt duplication by preventing prompts from being resent over web sockets (f8a089a15.

Added support for Boolean field label resource translations (11af9dba7, 245c20e24).

Changed resource translation sanitization to be looser to support a wider range of formatting options (4278e5823).

Fixed missing role references for namespace export where the User module field defined role prefilters (cb44b6591).

Fixed improper namespace import resource re-identification due to resources being ignored (3b235e330).

Fixed workflow trace parameter (3e068026).

Fixed improper resource translation content sanitization for RTE contents (50671180d), link attributes (f699d4b1e).

Fixed actionlog codegen lapsus (d44d396b3)

Fixed missing roles in the impersonated user — roles were not included in the generated JWT (e4ba223da)

Fixed improper resource iterator data chunking which caused the database to error out for large datasets (69c95a5a3)

Fixed record list not working when duplicate fields reside on same page (c13dd1e81).

Added additional link tags to make them more secure (889e2485f).

Fixed set expression function to properly handle types provided by workflow execution (f42d707).

Fixed OIDC provider scope string issue (b1572e1).

Fixed workflow issues with invoker/runner (c4d80b88).

Fixed resource translations for content and automation page blocks (8a8cf42e).

Fixed inconsistent NULL order for different DB engines causing paging cursor issues (2be460ee).

Added support for RTL direction.

Added support for additional arguments when invoking automation scripts via API (91eb88d2).

Added support for resource translation on select field options (c72902a8).

Added support for SAML signed requests (5e4486c7, 7ec02f6e).

Added support for SAML HTTP binding (717cae5c0b, 5cf0597b40)

Added option to hide the import button on the record list (cd982a8, 9c85d0b, 874e0b2).

Added support for version specific DB_DSN .env variable, simplifying development (c3516dd).

Added find and has expression functions (86deaea9).

Added sort expr function (be6b572)

Added support for multi-value filtering on record lists (d0213cb).

Added processing indicator when deleting records in record list (6d47c1b)

Refactored workflow execution and fixed runner/invoker logic (92224360).

Fixed improper attachment upload permission checks due to partial request parameters (#309, #346).

Fixed improper QL argument transformations based on the used database (#308).

Fix broken docker container health check on Corredor server (dce30ba).

Changed federation locales (91094e44).

Refactored minio store and fixed invalid bucket name issue (23a2446).

Fixed scrolling when only one pageBlock is added (88f3e72).

Fixed translations on password reset (87f08d8).

Fixed RBAC rules and workflows not applying after being imported via namespace import (ff6cadc0).

Fixed improper handling of empty resource translation strings (resource-translations) (4b264798, 043588f1).

Fixed external OIDC for Corteza flow (398242b).

Fixed percentage calculation for all types of charts (2b7c949).

Fixed field picker system field translations (fa80ade, 485187e).

Fixed namespace importing — additional request validation (ca178714b), improve internal resource identification (00dd86fb9, d247ec678, and 8be8be96d).

Fixed improper API request content parsing when Content-Type defines character set (d0154cc1b).

Fixed improper error handling for the upload component (a0a1ac0).

Fixed role-security setting for external providers (05a40ca).

Fixed issue with OIDC provider removal (c078808).

Fixed queue name matching on workflow onMessage event (79d8a842)

Fixed calendar event display for events that span multiple months (4d2f824)

Fixed record list filter for number and id fields (3b421a1)

Fixed namespace selector overflowing sidebar (b9aa41e)

Fixed metric page block field selector options (cb69c80)

Fixed chart rendering edge case where the canvas did not yet exist (1b965f8).

Fixed centering for the empty record list label (f467e0f)

Fixed inline record editor not checking permissions for deletion (f74d398)

Fixed improper reminder handling, causing them to sometimes not show (94247f0)

Fixed invalid membership fetch for closed roles (88955eb)

Fixed column order not persisting for ColumnPicker component (9659d9f, 2b7c949, b53bc6b).

Make default value not required for multi fields (aae3f6f)

Prefill inline record editor related values (c457679)

Disable page deletion if it has sub-pages (67c3b2c)

The record import via the import CLI command requires you to provide module field definitions along with the record import definitions. The constraint will be lifted in future patch releases.

Role security (forbidden, permitted, forced) on external authentication providers (91eb88d2).

Workflow functions for attachment management (8a8c7685).

OIDC support for corteza (a2091db).

Integration Gateway json response postfilter and http request to scope (b0590d2f).

JWT generate workflow function (eecf8670).

Unix strftime support to gval functions (d5001341).

Integer caster to gval functions (3473a267).

Added support for role permission cloning (0564fe7, d06cd41, 9bd530a).

Added custom processing button (6ec4157).

Translations for reporter webapp (6e26d5a, 931011c).

Added additional string manipulation functions to reporter expressions (a45c914e).

Added support for record import via the import CLI command (96556f54).

Translatable content (modules, names, pages, namespaces) is now sent with current language (5bd3bd37).

Improve slow performance in some casses with wf-loops by increesing workflow session state flushing from 10 to 1000 (486a5752).

Prevent table display elements from crashing if an empty join frame is recieved (f244b7b2).

Fixed improper report route bindings (d250827b).

Added missing type definition to the report filter perser registry (08ef5ab10).

Fixed panicking report filter marshaling when invalid (59ef8da1a).

Fixed improper handling of automation page blocks which define buttons with no references (047b647af).

Prevent text from exiting container in EditorToolbox (147dcd7).

Fixed improper date manipulation functions for reporter expressions (46372f55).

Fixed persistent run-as workflow issue after trigger removal (87f08d8b).

Fix access control checks on UI (e902382).

Fix user role membership picker (cadb6e1).

Fix module field order changing when you navigated to all records (3525ef8).

Fix record and user selector editors not rendering properly (09bca49).

Fix display element configurator options form not resetting properly (6b33655).

Broken translations on password reset (87f08d8)

Prevent error message from being transformed by toLowerCase() 32e9325)

Changed chart display element configurator (b553f72).

Removed the unused COUNTD metric aggregation function (29e8ab2a, 58a0a3b7, 4633b238)

Added .env options to control OAuth2 access and refresh token lifetime (14450dc4).

Added support for base password constraints (420b5ee1, 984a5e99).

Added translations for webapp-workflow (15d12b3, 77de17e).

Added custom processing button (6ec4157, 1b67f4b).

Added multi select to workflow options prompts (661781d).

Added warning when workflow triggers paths change (07705d21).

Added expandable expressions editor to workflows (680149e).

Fixed improper report filter type casting for ID-like values (597484914).

Fixed default record module field value validation setup (aced989ae).

Boolean value (record field) sanitization(edbbf2f0).

Uint64 JSON serialization in Corredor payloads (3241ff4e).

Fixed invalid data point labeling for radial charts (4cbeb210).

Fixed report table pagination (71dc2d2).

Fixed workflow help shortcut opening when inputting ? (8fd0f15).

Admin role membership management (2df2f48).

Update Bluemonday & net packages (73c0b312).

All user’s access tokens are now removed after password change (01577191).

Fixed improper page block ref validation for yaml encode (5afc715f).

Fixed unstable RBAC check that was caused by more complex setup of roles and RBAC rules (a385fe1c).

Fixed multi value required field errors (a5e4fb21).

Fixed display elements configurator sometimes not loading correct information when switching between elements (b8121e5).

Added handle error text in Admin (d903a735).

Added handle error text in Reporter (963c2161).

Added handle error text in Workflow (cb1b42b3).

Added scenario switcher to Reporter (4b6b52b3f b8121e5, 79e13cb).

If you wish to enable functions for workflow - action log interaction, the ACTIONLOG_ENABLE_WORKFLOW_FUNCTIONS .env variable must be set.

Added a user interface to configure SMTP setting; such configuration does not require server restart (0b69d1a2, 20a85d8).

Added support for workflow - action log interaction (search, create) (1014f53a).

Added support for server plugins (614d2b30).

Added workflow import note (9d98170).

Compose module fields no longer accept reserved system names — recordID, ownedBy, createdBy, createdAt, updatedBy, updatedAt, deletedBy, and deletedAt (20757e58, 20a85d8).

Resource translations no longer fallback to base language in case of a missing translations (4cd54a58).

Compose webapp now sends Content-Language and `Accept-Language HTTP headers (f8427346).

Server source is now built with -trimpath and without -mod=readonly flags (0b02535c).

Namespace export no longer preserves logo/icon references (dab413ece).

Initial documentation site redesign (14550adf).

Fixed boot-level workflow initialization logic which crashed the server if an enabled workflow defined an invalid trigger configuration (415982c8).

Fixed workflow saving when the configuration sidebar was opened (6d8796e).

Fixed improper Low Code Checkbox labels representation for false values (0330e31, aef1a14).

Fixed accent & HTML escaping in translated strings (556ffc5e).

Fixed resource translation issues for current language, accents, and escaped HTML (05178c2b).

Hide pages if the parent page is marked as not visible (957a9de2).

Fixed broken permission setting from Low Code admin panel on module for fields & records (8ae2a48d).

Fixed RenderOptions expr value assignment via selectors (445f0ed5).

Fixed RBAC rule migration crash on duplicate rules (e8bc6141).

Docker container healthcheck (9d7cf23c).

Fixed compose false value label (6da6989).

Fixed sidebar shadow (4a02d90).

Fixed reporter table column reordering (6b25473).

Fixed Low Code error when the automation scripts are not loaded (bb94645).

Disabled the load button in chart editor (6912fcd).

Fixed improper prefilter handling in the chart editor (aeceb35).

Fixed improper Low Code page exporting with un configured or partially configured page blocks (032566d9).

Added handle/slug error text in Compose (c7f543ec).

Extend record export with filter in Compose (1f5d2abf).

Added tooltip for Integration Gateway endpoint in Admin (d897ba3d).

Added server sorting fields to integration gateway to support UI (c388f8).

Added Bytes ([]byte) expression type (614237).

Improved colour scheme picker in Compose (211227ba).

Open Admin template previews in new tab (88f05df2).

Refactored message bus to conform to rbac, service and package layer architecture (54b716).

Improved Integration Gateway filter handling (c6e3d0e9).

Fixed Compose calendar buttons styles.

Fixed back-button on record viewer.

Fixed Admin compose settings not reflected in Compose (bf9e7064).

Fixed for unsupported MIME types error message not showing in Compose (8561dca6).

Fixed query handling when exporting records in Compose (78e6d296).

Fixed server workflow step duplicate issue (e2e751).

Fixed unique constraint matching on resources on server (59ffe7).

Fixed: Missing Corteza server image root ssl certificates that caused issues with outbound HTTP and SMTP requests (8b008545).

Fixed invalid z-index for record list filter components (6171af5b).

Added support for internationalization of Corteza web applications (#237, 31132570, e4eb28b8, c3ff0ae1), as well as for some user-provided resources (Low Code modules, namespaces, and pages) (46a7d94d). Locale specific number and date-time formatting are also included (da9a450f).

Added a system-managed facility for defining and handling custom API endpoints (#232, 652cc074. The facility allows you to trivially define new API endpoints for webhooks or custom integrations needed by your business processes. The facility defines a tight integration with Workflows for request processing (#245).

Added a specialized facility for creating, managing, and running reports(02b3e833). The reporting facility defines a dedicated user interface (corteza-webapp-reporter).

Extended Low Code feature set:

Added a fake data generator which can be used to create placeholder records and users (#216). The data generator is invoked through the CLI @todo CLI ref.

Added support for entire Low Code namespace duplication, import, and export directly from the Low Code interface (000664ef, 533b534f).

Extended authentication feature set; allowing authentication sessions to be manually revoked (#254, #210, 1cb2e64d), improved the users CLI commands with additional options (bed63c4f, e4cd1f5b), and added the client_credentials and user impersonation (b245726c, 25e4d11f). The authentication clients user interface now provides a series of cURL examples for interacting with authentication clients (16ae4c22).

Added support for SAML authentication providers (#188, aedb2aef, 670b1609).

Added *.search RBAC access control operations for all resources 92d2de86, f630a3d9, 0a388382.

Added support for automation which is triggered before or after a user is suspended (13fc9d26).

Extended Workflow feature set:

Expended the feature set of the expression engine:

Improved system setup and configuration flow as well as overall stability (5a67ecf7, a94e39b3, a229d0ec):

Prepared the store infrastructure for cockroachDB support (109e23fc).

The user interface of the Corteza web applications was changed to increase consistency, accessibility 58aa46ee, 89ad4311, and better user experience. More notable changes:

Changed the file field preview to show the last uploaded attachment when the single image option is selected (2d593af0).

Reworked the RBAC access control facility allowing greater flexibility with resource-specific rules, contextual roles (2f2c055e), and improved logging (922f4c31). Corteza now defines a series of system users and roles which are used for system tasks, such as provisioning and federation.

Low Code module, module field, and record RBAC rule configuration buttons are now located under a single drop-down.

Added the reporter webapp to the default list of webapps (e6950812).

Changed workflow deferred triggers to ignore and skip empty constraint values (8d9a3d54).

Upgraded zap logger to v1.19 (e48ffb2e).

Tweaked system logging:

Moved PROVISION_SETTINGS_ settings into a YAML provision file (2d78ae42).

Switch the base image to deb/ubuntu due to library incompatibilities (00ba60e5).

Removed PROVISION_SETTINGS_ in favour of a YAML provision file (2d78ae42).

Removed the query parameter from the record list filter endpoint (10e8b77d).

Removed Google maps from the provisioned application list (d6f24605).

Removed obsolete settings for the namespace sidebar and Corteza One (b459bd35).

Removed tabs and panels on Corteza One.

Fix broken links in README (7974ca65).

Fix inconsistent grant-validGrant auth client JSON prop name (40ddb9db).

Fixed attachment upload errors when an empty attachment or an ico file were uploaded (f5532acf).

Removed unneeded content from the served webapp content evaluation check (3638ecac).

Fixed failing mount when webapps are disabled (63dbe702).

Exclude deleted reminders from the reminder list API endpoint (9f74d5c0).

Prevented duplicate values on multi-value selection fields.

Fixed the task duplication bug on calendars (2e322054).

Fixed namespace searching be case insensitive (5ce9572d).

Fixed improper actionlog type casting which resulted in broken log messages when the front-end technology stack was unable to parse the values (5ac8790b, d1ccbc3e).

Fix invalid error message if the user is not allowed to search over namespaces (7cf6c18d).

Fixed missing notifications across web applications.

Fixed typos in envoy error messages (0a241fab).

Fixed notifications disappearing when changing the current page.

Fix ClaimsToIdentify to return identity with all authenticated roles (67d7882b).

Added missing access control properties to resource responses (774354d6).

Addedd missing access control checks for reminders (03344782).

Fixed improper admin webapp permission display if the user does not have sufficient permissions..

Fixed improper automation session state representation for prompted sessions (234d3795).

Fixed expression function parameter and return value casting for string functions.

Added missing federation structure sync response wrappers (8ee91eb7).

General stability of the system has been improved.

CLI commands now use the system user when executing commands (dca5757f).

Moved import/provisioning access control from Envoy to the invoking service (a2b964c5).

Defined a proper facility for testing Integration gateway handling logic (6ceadf40).

Allow store function codegen logic to define imports specific to them (b95e878c).

Build and integration pipelines moved to Github Actions.

Removed misleading federation etc/ (d4505482).

Removed the long deprecated storybook (76270476).

Implemented the C3 feature and applied it to web applications (a318b380, 4c5e2c24).