CHANGELOG.md

Unreleased

0.4.2 - 2015/08/10

Added

• Cassandra authentication and SSL encryption. #405
• preserve_host flag on APIs to preserve the Host header when a request is proxied. #444
• Added the Resource Owner Password Credentials Grant to the OAuth 2.0 Plugin. #448
• Auto-generation of default SSL certificate. #453

Changed

• Remove cassandra.port property in configuration. Ports are specified by having cassandra.hosts addresses using the host:port notation (RFC 3986). #457
• Default SSL certificate is now auto-generated and stored in the nginx_working_dir.
• OAuth 2.0 plugin now properly forces HTTPS.

Fixed

• Better handling of multi-nodes Cassandra clusters. #450
• mashape-analytics plugin: handling of numerical values in querystrings. #449
• Path resolver strip_path option wrongfully matching the path property multiple times in the request URI. #442
• File Log Plugin bug that prevented the file creation in some environments. #461
• Clean output of the Kong CLI. #235

0.4.1 - 2015/07/23

Fixed

• Issues with the Mashape Analytics plugin. #425
• Handle hyphens when executing path routing with strip_path option enabled. #431
• Adding the Client Credentials OAuth 2.0 flow. #430
• A bug that prevented "dnsmasq" from being started on some systems, including Debian. f7da790
• File Log plugin: optimizations by avoiding the buffered I/O layer. 20bb478

0.4.0 - 2015/07/15

Added

• Implement wildcard subdomains for APIs' public_dns. #381 #297
• Plugins
  • New OAuth 2.0 plugin. #341 #169
  • New Mashape Analyics plugin. #360 #272
  • New IP whitelisting/blacklisting plugin. #379
  • Ratelimiting: support for multiple limits. #382 #205
  • HTTP logging: support for HTTPS endpoint. #342
  • Logging plugins: new properties for logs timing. #351
  • Key authentication: now auto-generates a key if none is specified. #48
• Resolver
  • path property now accepts arbitrary depth. #310
• Admin API
  • Enable CORS by default. #371
  • Expose a new endpoint to get a plugin configuration's schema. #376 #309
  • Expose a new endpoint to retrieve a node's status. 417c137
• CLI
  • $ kong migrations reset now asks for confirmation. #365

Fixed

• Plugins
  • Basic authentication not being executed if added to an API with default configuration. 6d732cd
  • SSL plugin configuration parsing. #353
  • SSL plugin doesn't accept a consumer_id anymore, as this wouldn't make sense. #372 #322
  • Authentication plugins now return 401 when missing credentials. #375 #354
• Admin API
  • Non supported HTTP methods now return 405 instead of 500. 38f1b7f
  • Prevent PATCH requests from overriding a plugin's configuration if partially updated. 9a7388d
• Handle occasionally missing schema_migrations table. #365 #250

internal

• DAO:
  • Complete refactor. No more need for hard-coded queries. #346
• Schemas:
  • New self_check test for schema definitions. 5bfa7ca

0.3.2 - 2015/06/08

Fixed

• Uppercase Cassandra keyspace bug that prevented Kong to work with kongdb.org
• Multipart requests not properly parsed in the admin API. #344

0.3.1 - 2015/06/07

Fixed

• Schema migrations are now automatic, which was missing from previous releases. #303

0.3.0 - 2015/06/04

Added

• Support for SSL.
• Plugins
  • New HTTP logging plugin. #226 #251
  • New SSL plugin.
  • New request size limiting plugin. #292
  • Default logging format improvements. #226 #262
  • File logging now logs to a custom file. #202
  • Keyauth plugin now defaults key_names to "apikey".
• Admin API
  • RESTful routing. Much nicer Admin API routing. Ex: /apis/{name_or_id}/plugins. #98 #257
  • Support PUT method for endpoints such as /apis/, /apis/plugins/, /consumers/
  • Support for application/json and x-www-form-urlencoded Content Types for all PUT, POST and PATCH endpoints by passing a Content-Type header. #236
• Resolver
  • Support resolving APIs by Path as well as by Header. #192 #282
  • Support for X-Host-Override as an alternative to Host for browsers. #203 #246
• Auth plugins now send user informations to your upstream services. #228
• Invalid target_url value are now being catched when creating an API. #149

Fixed

• Uppercase Cassandra keyspace causing migration failure. #249
• Guarantee that ratelimiting won't allow requests in case the atomicity of the counter update is not guaranteed. #289

internal

• Schemas:
  • New property type: array. #277
  • Entities schemas now live in their own files and are starting to be unit tested.
  • Subfields are handled better: (notify required subfields and auto-vivify is subfield has default values).
• Way faster unit tests. Not resetting the DB anymore between tests.
• Improved coverage computation (exclude vendor/).
• Travis now lints kong/.
• Way faster Travis setup.
• Added a new HTTP client for in-nginx usage, using the cosocket API.
• Various refactorings.
• Fix #196.
• Disabled ipv6 in resolver.

0.2.1 - 2015/05/12

This is a maintenance release including several bug fixes and usability improvements.

Added

• Support for local DNS resolution. #194
• Support for Debian 8 and Ubuntu 15.04.
• DAO
  • Cassandra version bumped to 2.1.5
  • Support for Cassandra downtime. If Cassandra goes down and is brought back up, Kong will not need to restart anymore, statements will be re-prepared on-the-fly. This is part of an ongoing effort from jbochi/lua-resty-cassandra#47, #146 and #187. Queries effectued during the downtime will still be lost. #11
  • Leverage reused sockets. If the DAO reuses a socket, it will not re-set their keyspace. This should give a small but appreciable performance improvement. #170
  • Cascade delete plugins configurations when deleting a Consumer or an API associated with it. #107
  • Allow Cassandra hosts listening on different ports than the default. #185
• CLI
  • Added a notice log when Kong tries to connect to Cassandra to avoid user confusion. #168
  • The CLI now tests if the ports are already being used before starting and warns.
• Admin API
  • name is now an optional property for APIs. If none is being specified, the name will be the API public_dns. #181
• Configuration
  • The memory cache size is now configurable. #208

Fixed

• Resolver
  • More explicit "API not found" message from the resolver if the Host was not found in the system. "Api not foun with Host: %s".
  • If multiple hosts headers are being sent, Kong will test them all to see if one of the API is in the system. #186
• Admin API: responses now have a new line after the body. #164
• DAO: keepalive property is now properly passed when Kong calls set_keepalive on Cassandra sockets.
• Multipart dependency throwing error at startup. #213

internal

• Separate Migrations from the DAO factory.
• Update dev config + Makefile rules (run becomes start).
• Introducing an ngx stub for unit tests and CLI.
• Switch many PCRE regexes to using patterns.

0.2.0-2 - 2015/04/27

First public release of Kong. This version brings a lot of internal improvements as well as more usability and a few additional plugins.

Added

• Plugins
  • CORS plugin.
  • Request transformation plugin.
  • NGINX plus monitoring plugin.
• Configuration
  • New properties: proxy_port and api_admin_port. #142
• CLI
  • Better info, help and error messages. #118 #124
  • New commands: kong reload, kong quit. #114 Alias of version: kong --version #119
  • kong restart simply starts Kong if not previously running + better pid file handling. #131
• Package distributions: .rpm, .deb and .pkg for easy installs on most common platforms.

Fixed

• Admin API: trailing slash is not necessary anymore for core ressources such as /apis or /consumers.
• Leaner default configuration. #156

internal

• All scripts moved to the CLI as "hidden" commands (kong db, kong config).
• More tests as always, and they are structured better. The coverage went down mainly because of plugins which will later move to their own repos. We are all eagerly waiting for that!
• src/ was renamed to kong/ for ease of development
• All system dependencies versions for package building and travis-ci are now listed in versions.sh
• DAO doesn't need to :prepare() prior to run queries. Queries can be prepared at runtime. #146

0.1.1beta-2 - 2015/03/30

Fixed

• Wrong behaviour of auto-migration in kong start.

0.1.0beta-3 - 2015/03/25

First public beta. Includes caching and better usability.

Added

• Required Openresty is now 1.7.10.1.
• Freshly built CLI, rewritten in Lua
• kong start using a new DB keyspace will automatically migrate the schema. #68
• Anonymous error reporting on Proxy and API. #64
• Configuration
  • Simplified configuration file (unified in kong.yml).
  • In configuration, plugins_installed was renamed to plugins_available. #59
  • Order of plugins_available doesn't matter anymore. #17
  • Better handling of plugins: Kong now detects which plugins are configured and if they are installed on the current machine.
  • bin/kong now defaults on /etc/kong.yml for config and /var/logs/kong for output. #71
• Proxy: APIs/Consumers caching with expiration for faster authentication.
• Admin API: Plugins now use plain form parameters for configuration. #70
• Keep track of already executed migrations. rollback now behaves as expected. #8

Fixed

• Server header now sends Kong. #57
• migrations not being executed in order on Linux. This issue wasn't noticed until unit testing the migrations because for now we only have 1 migration file.
• Admin API: Errors responses are now sent as JSON. #58

internal

• We now have code linting and coverage.
• Faker and Migrations instances don't live in the DAO Factory anymore, they are only used in scripts and tests.
• scripts/config.lua allows environment based configurations. make dev generates a kong.DEVELOPMENT.yml and kong_TEST.yml. Different keyspaces and ports.
• spec_helpers.lua allows tests to not rely on the Makefile anymore. Integration tests can run 100% from busted.
• Switch integration testing from [httpbin.org] to [mockbin.com].
• core plugin was renamed to resolver.

0.0.1alpha-1 - 2015/02/25

First version running with Cassandra.

Added

• Basic proxying.
• Built-in authentication plugin (api key, HTTP basic).
• Built-in ratelimiting plugin.
• Built-in TCP logging plugin.
• Configuration API (for consumers, apis, plugins).
• CLI bin/kong script.
• Database migrations (using db.lua).