base-components

2026.7.0 (2026-09-28)

Added

Added new endpoint to the account base-component (standard-api only)
- Url: <basePath>/account/user/session/me
- Returns the logged-in user
- Requires the account.user.myuser access right
Added getMyUser() method in the user-data-access service in the account base-feature-module
[NSX-541] Added stdApi implementation to upload assets in knockout.

Changed

[BE-25] Converted Struts specific harvest files in base-components-model into expanders in account-component-struts2-knockout-expanders
Update user-my-page component to use the new getMyUser() method instead of performing a getList call with a finder on the username.
Added a colored background to the details on the user-my-page.

Fixed

Code related to the ChangePassword operation is no longer included in the user-my-page component when data-operations are not included.
#assets.stdapi.io.download/upload tags could be passed to an element that did not have the stdapi.io.download/upload option

2026.6.2 (2026-08-25)

Fixed

Fixed base-components-runtime not being java 8 compatible, by removing conflicting maven-compiler plugin configuration

2026.6.1 (2026-08-25)

Fixed

Fixed base-components-runtime not being java 8 compatible

2026.6.0 (2026-08-18)

Added

Added changePassword data operation to account.User
Added addFile data operation to assets.Asset
Added option angular.noViewLayer to Assets::InternalAssetChunk::Content.
Add base-feature-modules, also grouped in base-feature-modules, for account, assets and utils
Add account-feature-module-expanders
Add assets-feature-module-expanders
Add "Prepare base feature modules" stage to Jenkins file

Changed

Updated jdk on Jenkins from v17 to v25
Updated dependencies
- net.democritus:expanders-core: 8.0.0 > 8.2.6
- net.democritus.metamodel:prime-core: 2026.1.0 > 2026.4.3

Fixed

Fixed backwards compatibility to mirror the data access rights to the struts2 API for GET and PATCH endpoints in the standard-api.

2026.5.0 (2026-06-22)

Added

[BE-24] Add findByProfileIn finder for account.User

2026.4.0 (2026-05-26)

Changed

Updated dependencies
- net.democritus.api.rest:jaxrs-standard-api-expanders: 0.22.0 > 0.29.0
- net.democritus:web-styles: 2024.8.1 > 2026.2.0
- net.democritus:prime-data: 2024.0.3 > 2025.0.0
- net.democritus.data:application-data-addons-expanders: 1.0.2 > 1.3.0
Replaced dependencies on net.democritus:Expanders::8.3.0 with net.democritus:proxy-logic-expanders::9.4.0
Isolated several Struts2 related expanders and features into separate modules:
- account-component-struts2-knockout-expanders
- assets-component-struts2-knockout-expanders
- utils-component-struts2-knockout-expanders
- workflow-component-struts2-expanders

2026.3.0 (2026-03-23)

Added

[BE-13] Added workflow-shared-jpa-jakarta to support Jakarta EE

Changed

Upgrade nsx-runtime dependency 2024.1.0 > 2025.1.1

2026.2.0 (2026-01-19)

Added

Added module manifests for all base-components.

Changed

Upgrade prime-core dependency v2024.8.3 > 2026.1.0.

2026.1.0 (2026-01-15)

Fixed

(assets/stdapi) Fixed illegal imports due to features enabled when the Assets component is not present.
Users could no longer be created.

Changed

Set EncryptPassword.createLegacyHash() to private, as it is no longer being used.
Renamed EncryptPassword.encrypt() to EncryptPassword.createHash().
Created EncryptPassword.PasswordInput and EncryptPassword.PasswordVerificationData POJOs to make the methods of EncryptPassword version transparent.

2026.0.0 (2026-01-14)

Added

Added support for password hashing using BCrypt.

Changed

Updated implementation to create (and update) new passwords using BCrypt, but still support existing hashed passwords that use the legacy hashing technique.

Removed

Drop legacy support for plain text passwords.

2025.4.0 (2025-10-13)

Fixed

Fixed javax import used in OpenID connection authentication implementation.

Changed

[VEGA-398] LoginRedirectHelper moved from ext to gen to allow for injection through feature expanders.
Migrated LogoutActionExpander to new import system.
Updated dependencies:
- com.nimbusds:oauth2-oidc-sdk: 11.23.1 > 11.29.2

2025.3.1 (2025-09-22)

Fixed

The configurable email claim was not used in OIDCAccessProcessorImpl.
The user_groups claim was not processed in OIDCAccessProcessorImpl.

2025.3.0 (2025-08-04)

Changed

Several features have been split up to separate the insertions for the JAX-RS Standard API.
Added utils-component-standard-api-expanders to contain std-api features for utils.
Changed dependency on knockout-jaxrs-stdapi-expanders to be symbiotic.

2025.2.0 (2025-06-18)

Added

(workflow) Added validations to flowElements targeting a claimable dataElement.

Changed

[NSX-285][NSX-485] Updated all expanders that extend the standard API implementation to support the breaking changes in version 0.22.0 of standard-api-expanders.
account-component-standard-api-expanders and assets-component-standard-api-expanders are now symbiotic dependencies in base-components.

2025.1.2 (2025-04-27)

Fixed

Fixed incorrect escape character in EmbeddedAssetUpload.

2025.1.1 (2025-04-27)

Fixed

Added missing imports in EmbeddedAssetUpload feature.

2025.1.0 (2025-04-22)

Changed

The following classes in the assets component are now expanded:
- net.democritus.assets.action.AssetDownloader
- net.democritus.assets.action.AssetUploader
Updated Expanders dependency to 8.3.0 to migrate deprecated Struts features.
Migrated AssetUploader to the newer action file upload interceptor in Struts2.
Migrated EmbeddedAssetUpload to the newer action file upload interceptor in Struts2.
Marked setters that take input for requests with @StrutsParameter interface in preparation to allow the use of input filtering for additional security:
- AssetUploader
- LoginValidatorAction
The following classes in the account component are now expanded:
- net.democritus.url.action.GetLoginInfoAction
- net.democritus.web.action.AccessInfoRetrieverAction
- net.democritus.web.action.RemoteSessionTerminatorAction
- net.democritus.web.action.SessionTerminatorAction
- net.democritus.web.common.LoginUserSessionHelper
- net.democritus.web.common.UniqueSessionKeeper
- net.democritus.web.common.UniqueSessionRetriever
- net.democritus.web.common.UniqueSessionUnregistrar
- net.democritus.web.interceptor.DefaultStyleInterceptor
- net.democritus.web.listener.UniqueSessionListener
The following classes in the workflow component are now expanded:
- net.democritus.wfe.AsyncTaskExecutionBean
- net.democritus.wfe.AtomicInternalTaskExecutor
- net.democritus.wfe.DefaultTimerFactoryImpl
- net.democritus.wfe.Ejb3_1TimerFactoryImpl
- net.democritus.wfe.EngineHealthBean
- net.democritus.wfe.EngineStarterBean
- net.democritus.wfe.ExecutorServiceTaskProcessor
- net.democritus.wfe.NoTransactionTaskExecutor
- net.democritus.wfe.TimerFactory
- net.democritus.wfe.TimerFactoryImpl
- net.democritus.wfe.TimerInfo
- net.democritus.workflow.FlowOrchestratorLookup
- net.democritus.workflow.action.RecoverWorkflowAction
- net.democritus.workflow.action.RunWorkflowAction

Removed

Removed unused downloadDirectory fields from EmbeddedAssetUpload feature for EntererAction and from AssetUploader.
Removed AsyncTaskExecutionBean for EJB 3.0, which can no longer be use. (JEE6 is minimum with EJB 3.1)

2025.0.1 (2025-04-14)

Fixed

Changed technology for SessionInfo and GetSessionInfoAction expanders to STRUTS2.

2025.0.0 (2025-04-14)

Changed

Only synchronize engineNode retrieve method when find failed.
The classes net.democritus.web.SessionInfo and net.democritus.web.GetSessionInfoAction in the utils component are now expanded.
The HTTP method check in GetSessionInfoAction was split off into a separate expander feature that is activated by the option struts.security.enforceHttpMethod to be consistent with other action implementations.
Updated Expanders dependency to 8.2.0 to ensure Struts2 6.7.x and struts interface refactoring.
Replaced deprecated interfaces in Struts2 runtime and expanded code:
- com.opensymphony.xwork2.Action > org.apache.struts2.action.Action
- com.opensymphony.xwork2.ActionSupport > org.apache.struts2.ActionSupport
- com.opensymphony.xwork2.ActionContext > org.apache.struts2.ActionContext
- com.opensymphony.xwork2.ActionInvocation > org.apache.struts2.ActionInvocation
- com.opensymphony.xwork2.interceptor.AbstractInterceptor > org.apache.struts2.interceptor.AbstractInterceptor
- com.opensymphony.xwork2.interceptor.Interceptor > org.apache.struts2.interceptor.Interceptor
Updated dependencies:
- com.nimbusds:oauth2-oidc-sdk: 11.20 -> 11.23.1.

2024.7.4 (2025-02-20)

Fixed

Updated application-data-addons dependency to 1.0.2 to fix issue with SNAPSHOT dependency.

2024.7.3 (2025-02-20)

Fixed

Updated Expanders dependency to 8.0.5 to fix issue with SNAPSHOT dependency.

2024.7.2 (2024-12-11)

Merged v2024.6.3 into v2024.7.1.

2024.7.1 (2024-12-05)

Merged v2024.3.7 into v2024.7.0.

2024.7.0 (2024-11-26)

Changed

Added dependency on application-data-addons: 1.0.0
Updated expander dependencies:
- net.democritus:Expanders: 7.8.1 -> 8.0.0

2024.6.3 (2024-12-11)

Fixed

Fixed the legacy access right compatibility for the standard API so the rights are added to the new contracts.

Changed

Updated expander dependencies:
- net.democritus:Expanders: 7.7.1 -> 7.8.1
- net.democritus.api.rest:standard-api-expanders: 0.5.0 -> 0.15.1
[NSX-285][NSX-520] Moved authorization implementation for DataAccess in the standard API from the authorization filter to the new access right validator.

2024.6.2 (2024-11-05)

Fixed

Use DataRef instead of database id in feature for AssetBean.

Changed

Updated expander dependencies:
- net.democritus:Expanders: 7.7.1 -> 7.7.3

2024.6.1 (2024-10-10)

Changed

Updated dependencies:
- net.democritus.api.rest:standard-api-expanders: 0.4.1 -> 0.5.0

2024.6.0 (2024-10-10)

Merged v2024.3.6 into v2024.5.3.

Changed

Updated dependencies:
- net.democritus.api.rest:standard-api-expanders: 0.1.0 -> 0.4.1
- com.nimbusds:oauth2-oidc-sdk: 11.14 -> 11.20.

2024.5.3 (2024-09-12)

Merged v2024.3.5 into v2024.5.2.

2024.5.2 (2024-08-12)

Fixed

[VEGA-380] Changed ShutdownEnginesTask target element to Node to fix an error at shutdown.

Changed

[VEGA-318] Skip set name in StateTransitioner if name field does not exist on status element.

2024.5.1 (2024-08-10)

Changed

Updated expander dependencies:
- net.democritus.metamodel:prime-core: 2024.4.3 -> 2024.4.5
Renamed return header for asset endpoints from X-UploadFileId to NS-File-Upload-Id.
Renamed expansion resources:
- net.democritus:account-component-jaxrs-expanders > net.democritus:account-component-standard-api-expanders
- net.democritus:assets-component-stdapi-expanders > net.democritus:assets-component-standard-api-expanders

2024.5.0 (2024-08-09)

Added

Added implementation for assets.embeddedUpload in combination with JAX-RS standard API.

Changed

Changed menu on user and account page to app-menu.

2024.4.0 (2024-08-03)

Added

[NSX-285][NSX-411] Add basic authentication to openapi specification.

Changed

Use skip count query on DataAccess retrieval.
Use skip count query on EngineNodeMasterStatusViewer.
Use skip count query on EngineNodeExpiredNodeCleaner.
Updated expander dependencies:
- net.democritus.metamodel:prime-core: 2024.3.13 -> 2024.4.3

2024.3.7 (2024-12-05)

Fixed

Fixed some deprecation warnings in account

2024.3.6 (2024-10-08)

Changed

[VEGA-383] Fixed usage of deprecated methods in several places.

2024.3.5 (2024-09-12)

Merged v2023.14.7 into v2024.3.4.

2024.3.4 (2024-06-17)

Fixed

[NSX-285] Fixed inference of content type in file uploads.
Updated expander dependencies:
- net.democritus:Expanders: 7.4.4 -> 7.4.5

2024.3.3 (2024-06-17)

Fixed

[NSX-285] Added content type to asset download.
Updated expander dependencies:
- net.democritus:Expanders: 7.4.2 -> 7.4.4

2024.3.2 (2024-06-14)

Added

[NSX-285][NSX-423] Added connector with download and upload endpoints specifically for Asset element.

Changed

[NSX-285] Store content type for asset upload.

2024.3.1 (2024-06-11)

Changed

[NSX-285] Added Content-Length header for file downloads.
[NSX-285] Added the type of a resource to the resource not found error message.
Moved SimpleUriFormat class to assets compone****nt, which is the only place it is used.
Updated expander dependencies:
- net.democritus:Expanders: 7.4.0 -> 7.4.2

2024.3.0 (2024-06-10)

Added

[NSX-285][NSX-423] Added support for file up- and downloads with assets in the standard api.
Updated expander dependencies:
- net.democritus:Expanders: 7.2.0 -> 7.4.0
- net.democritus:web-styles: 2024.3.0 -> 2024.3.2
- net.democritus.metamodel:prime-core: 2024.2.3 -> 2024.3.10

Changed

Marked fileId fields as functional key for assets::Asset element.

Removed

Removed dependency from assets component on account component.

2024.2.0 (2024-05-13)

Added

Added dependency on new knockout-jaxrs-stdapi-expanders resource in web-styles to base-components-expanders.

Changed

Updated expander dependencies:
- net.democritus:Expanders: 7.1.1 -> 7.2.0

2024.1.6 (2024-05-03)

Changed

[NSX-465] The name of the email claim is now configurable with the emailClaim property. It still defaults to email if no configuration value is supplied.
Updated expander dependencies:
- net.democritus:Expanders: 7.0.7 -> 7.1.1
- net.democritus.metamodel:prime-core: 2024.1.1 -> 2024.2.3

2024.1.5 (2024-04-26)

Fixed

Fixed accountPage and userPage session properties for Struts.

2024.1.4 (2024-04-09)

Fixed

[NSX-285][NSX-433] Return unauthorized error when authentication fails in JAX-RS API.

2024.1.3 (2024-03-27)

Fixed

Added some missing expanders.

2024.1.2 (2024-03-24)

Fixed

Fixed baseComponents.authentication.enableOIDC option to work correctly when applied to Application instead of ApplicationInstance.

Added

[NSX-285][NSX-433] Added feature to provision rights in JAX-RS API for backwards compatibility with the old rights used in the Struts2 API.
[NSX-285][NSX-433] Implemented authentication with OpenID Connect for JAX-RS API. (Currently limited to one IDP.)

2024.1.1 (2024-03-19)

Fixed

Applied some refactoring following package name changes in runtime library for new jaxrs-based API.

2024.1.0 (2024-03-15)

Added

[NSX-285][NSX-433] Added new account-component-jaxrs-expanders expansion resource, which integrates the account component with the new experimental JAX-RS standard API.

Changed

Updated com.nimbusds:oauth2-oidc-sdk: 11.9.1 -> 11.10.1.
base-components has been renamed to base-component-expanders and a new stack resource with the name base-components was added to take its place.

2024.0.0 (2024-01-16)

Changed

Updated com.nimbusds:oauth2-oidc-sdk: 11.8 -> 11.9.
Several Expanders now use tags
Removed redundant method from EmailSender interface, which was never used and could cause issues for other implementations.

2023.14.7 (2024-08-12)

Re-release 2023.14.7

2023.14.6 (2024-08-12)

Fixed

[VEGA-380] Changed ShutdownEnginesTask target element to Node to fix an error at shutdown. (cherry-picked from 2024.5.2)

Changed

[VEGA-318] Skip set name in StateTransitioner if name field does not exist on status element. (cherry-picked from 2024.5.2)
[VEGA-318] Skip set name in StateTransitioner if name field does not exist on status element.

2023.14.5 (2023-12-19)

Merged 2023.3.3 into main branch.

Fixed

Parsing of email addresses in notification component threw an exception for an empty string.

Changed

Updated com.nimbusds:oauth2-oidc-sdk: 11.5 -> 11.8.
Updated expander dependencies:
- net.democritus:Expanders: 5.38.0 -> 6.2.2
- net.democritus.metamodel:prime-core: 2023.9.2 -> 2023.12.0

2023.14.4 (2023-11-08)

Fixed

Removed @Override from methods in UserAgent because Agents no longer implements AgentIf.
Rewrote AssetChunkInputStream to use a function instead of a reference to an AssetAgent

2023.14.3 (2023-10-28)

Fixed

Removed unique constraint from User.name for now, to restore old behavior, because the constraint collides with the disabled field.

Changed

Updated com.nimbusds:oauth2-oidc-sdk: 11.3 -> 11.5.
Updated expander dependencies:
- net.democritus:Expanders: 5.37.4 -> 5.38.0
- net.democritus.metamodel:prime-core: 2023.9.1 -> 2023.9.2

2023.14.2 (2023-10-20)

Fixed

Added some imports to custom code that will no longer be provided by expanded code.

Changed

Updated com.nimbusds:oauth2-oidc-sdk: 11.2 -> 11.3.
Updated expander dependencies:
- net.democritus:Expanders: 5.37.3 -> 5.37.4

2023.14.1 (2023-10-18)

Fixed

Fixed issue in 2023.14.0 that caused the notification Component to be harvestable.

Changed

Updated expander dependencies:
- net.democritus:Expanders: 5.37.0 -> 5.37.3

2023.14.0 (2023-10-12)

Changed

Updated some harvest and feature expanders for claims, to support the changes to Expanders in migrating to the new imports system.

2023.13.0 (2023-10-11)

Fixed

[NSX-324] Implemented fix to properly UTF-8 encode the subject of an email in the notification component.

Changed

Migrated GetAccessRightsAction and GetTaskAccessRightsAction to expanders in preparation for JEE9 support.
Changed types of sender/receiver fields for emails in notification component to new InternetMessageAddress and InternetMessageAddresses value types to enforce correct formatting.
Updated com.nimbusds:oauth2-oidc-sdk: 11.0 -> 11.2.

Removed

Removed dependency of notification component on account, utils and validation components.

2023.12.0 (2023-09-26)

Fixed

Updated expanders for options, so they correctly works on Application and not just ApplicationInstance:
- baseComponents.authentication.enableOIDC
- baseComponents.authentication.disableInternalAuth

Changed

Updated model to replace deprecated options hasDataBaseSchema and uniqueKey.
Updated expander dependencies:
- net.democritus.metamodel:prime-core: 2023.6.1 -> 2023.8.0
- net.democritus:Expanders: 5.33.0 -> 5.36.1
Updated com.nimbusds:oauth2-oidc-sdk: 10.14.2 -> 11.0.

2023.11.0 (2023-09-11)

Fixed

Added missing import for UserDetails in DataAccessBean (caused by imports cleanup in Expanders).

Changed

Cleaned up some code in StateTaskParameterContextFactory and WorkflowParameterContextFactory.
Refactored various uses of deprecated methods of ParameterContext.
FlowElement expanders are now only applicable when the workflow component is active.
Updated com.nimbusds:oauth2-oidc-sdk: 10.13.2 -> 10.14.2.

2023.10.0 (2023-08-28)

Fixed

Replaced some uses of deprecated code in InternalAssetBean.

Changed

Updated expander dependencies:
- net.democritus:Expanders: 5.31.0 -> 5.32.0

Removed

Removed deprecated method TagValuePairAgent.getTagValueList(). (Deprecated since 2021-06-21)
Removed unused deprecated class net.democritus.io.ReporterAgent.
Removed deprecated constructor WorkflowInterruptRecoverer(UserContext) (Deprecated since 2022-04-14)

2023.9.0 (2023-08-17)

Fixed

[NSX-325] Added workaround to synchronize user creation in OIDC implementation in the application with minimal performance impact during authentication. (A database-level safeguard will be added later.)
Removed one more use of Options.Option that was left behind in OIDCUserTransformer.

Changed

Updated expander dependencies:
- net.democritus.metamodel:prime-core: 2023.5.3 -> 2023.5.4
- net.democritus:Expanders: 5.30.0 -> 5.31.0
Updated com.nimbusds:oauth2-oidc-sdk: 10.11 -> 10.13.2.

2023.8.2 (2023-07-13)

Fixed

Refactoring to Optional had resulted in a few lines of code that were not backwards compatible with Java 8.

2023.8.1 (2023-07-12)

Fixed

Fixed one remaining instance where an Options.Option.asOptional() was still used in the OIDC implementation.
A SNAPSHOT dependency for Expanders was left behind.

2023.8.0 (2023-07-12)

Changed

Refactored code related to breaking changes in Expanders 5.30.0.
All Struts actions that used Options.Option as type for fields have been refactored to nullable fields:
- GetAccessRightsAction
- GetTaskAccessRightsAction
Updated expander dependencies:
- net.democritus:Expanders: 5.29.0 -> 5.30.0

2023.7.0 (2023-07-11)

Changed

Updated com.nimbusds:oauth2-oidc-sdk: 10.9.2 -> 10.11.
Updated expander dependencies:
- net.democritus:Expanders: 5.28.0 -> 5.29.0
Refactored code related to breaking changes in Struts 6.2.0.
All Struts interceptors now use the Context object stored in the session, rather than the UserContext object directly.
AccessInfoRetrieverAction will now log an error and return a logout when retrieving rights for a task if the name of the task is not found in the session, rather than just throwing an exception.
LoginUserSessionHelper.createUserSession(UserContext) is now marked as deprecated.

Removed

The struts action net.democritus.web.action.EnvRetrieverAction has been removed. It has been marked as deprecated for a long time and no longer had any functionality.

2023.6.0 (2023-06-30)

Changed

Updated taskElement options to align with Expanders update
Updated expander dependencies:
- net.democritus.metamodel:prime-core: 2023.4.1 -> 2023.5.2
- net.democritus:Expanders: 5.27.0 -> 5.28.0

2023.5.0 (2023-06-26)

Changed

Some general code cleanup.
Updated expander dependencies:
- net.democritus.metamodel:prime-core: 2023.4.0 -> 2023.4.1
- net.democritus:Expanders: 5.25.0 -> 5.27.0
Updated nsx-runtime: 2023.2.1 -> 2023.4.0
Replaced most uses of Context.getContext() by Context.find().
Replaced most uses of SearchResult.getFirst() by SearchResult.getFirstResult().
Replaced most uses of Options.Option by Optional.
Updated com.nimbusds:oauth2-oidc-sdk: 10.7.2 -> 10.9.2.

2023.4.0 (2023-06-14)

Added

Added SimpleValueTypes dataResources for Password and FileLink to base-components-model. This makes it possible to use when there is no dependency on net.democritus:Expanders.

Changed

Updated expander dependencies:
- net.democritus.metamodel:prime-core: 2023.2.1 -> 2023.4.0
- net.democritus:Expanders: 5.22.0 -> 5.25.0
Updated nsx-runtime: 2023.1.0 -> 2023.2.1
Updated NSX Maven plugin in expanders project (not in expanded code):
- net.democritus.maven.plugins:expanders-maven-plugin: 2023.1.1 -> 2023.4.5
Updated to new dataResource setup.

2023.3.3 (2023-12-18)

Changed

(Backport 2023.7.0) Refactored code related to breaking changes in Struts 6.2.0.
Updated expander dependencies:
- net.democritus:Expanders: 5.22.0 -> 5.24.0.5

2023.3.2 (2023-05-31)

Added

Added SCM information to deployed pom.xml artifacts

2023.3.1 (2023-04-21)

Fixed

Fixed issue that caused the workflow caches to not be correctly expired after edit.

2023.3.0 (2023-04-20)

Changed

Updated expander dependencies:
- net.democritus.metamodel:prime-core: 2023.0.3 -> 2023.2.1
- net.democritus:Expanders: 5.17.0 -> 5.22.0
Updated nsx-runtime: 2023.0.0 > 2023.1.0
Changed EngineService::lastRunAt from DateTime to Timestamp
Removed workflow -> validation dependency

Fixed

Improved translations for username and password errors

Updated

Updated model to use Password and FileLink ValueTypes instead of ValueFieldTypes

2023.2.6 (2023-04-19)

Changed

Moved com.nimbusds:oauth2-oidc-sdk dependency for OpenID Connect to data resources.
Updated com.nimbusds:oauth2-oidc-sdk: 9.18 -> 10.7.2. (CVE-2023-1370)

2023.2.5 (2023-04-14)

Fixed

Changed Notifier#content to Text, so that it has no limit

2023.2.4 (2023-04-13)

Fixed

Add missing isStatusField options to EngineNode and EngineNodeStatus

2023.2.3 (2023-04-13)

Fixed

Updated ValueFields to ValueTypes
Changed Notifier#content to BigString

2023.2.2 (2023-04-11)

Fixed

Removed showLinkDetails options from User
Removed support for expired legacy.vectorCollectionType.reenable option

2023.2.1 (2023-03-31)

Fixed

User language was not updated from OIDC token for existing users.
Fixed conditions of EngineRemoteExpanders, which were always expanded, even with ejb.interfaces.localOnly

2023.2.0 (2023-02-20)

Fixed

Fix EngineBeanExpanders to use ejb.interfaces.localOnly.
Add id_token_hint parameter to OIDC logoutUrl to fix the session logout for recent keycloak releases.

Changed

Updated expander dependencies:
- net.democritus.metamodel:prime-core: 2023.0.2 -> 2023.0.3

2023.1.1 (2023-02-02)

Fixed

[VEGA-277] Removed EJBPolicy condition from UserAuthenticationLocalExpander, since EJBPolicy=REMOTE is no longer supported

2023.1.0 (2023-02-01)

Updated

Updated prime-core to 2023.0.2
Updated expanders to 5.17.0

2023.0.4 (2023-01-26)

Updated

Replaced includeCsvImport options with csv.import to remove warnings.

2023.0.3 (2023-01-25)

Fixed

Removed cache from EngineNode because it was interfering with startup mechanism

2023.0.2 (2023-01-25)

Fixed

[VEGA-266] Removed parentheses from claim queries, since they clash with EclipseLink
[VEGA-261] Catch and log Exceptions in EngineNodeConfig
[VEGA-237] StateTransitionerExpander: Don't set name of StateTask if name is not defined
[VEGA-267] Skip query in claimInstances if targetInstances parameter is empty

2023.0.1 (2023-01-17)

Merged

Merged v2022.7.4

2023.0.0 (2023-01-11)

Changed

Changed type of Asset.downloadLink, Asset.uri, ExternalAsset.uri and RemoteAsset.url from StringLink to String, as StringLink has not been supported for a while.

Removed

Removed deprecated DataAccess.target field.
Removed deprecated elements in the account component:
- Component
- HelpInfo
- Menu
- MenuItem
- Portal
- Screen
- ScreenProfile
Removed deprecated elements in the utils component:
- Execution
- Executor (task element)
- IdCounter
- Thumbnail
Removed deprecated elements in the workflow component:
- StateTimer
- TimeTask

2022.10.9 (2022-11-14)

Fixed

Added some missing option types as data resources and added proper constraints and meta information for all types.

Changed

Updated expander dependencies:
- net.democritus:Expanders: 5.13.3 -> 5.14.4
- net.democritus.metamodel:prime-core: 2022.6.1 -> 2022.10.6
Added default values for unused fields in EngineService:
- no for changed
- 0 for collector

Removed

Removed deprecated expansion step that was used to support the previously removed option baseComponents.authentication.enableGoogleAuth.

2022.10.8 (2022-11-10)

Fixed

Changed name of session value keys for OIDC implementation to avoid collisions with internal keys of Struts.

2022.10.7 (2022-10-27)

Added

Added dataStates to Notifier model.

Changed

Remove unused userAgent.

Fixed

Fixed issue with finder import in InterruptRecovererExpander when using claims

2022.10.6 (2022-10-21)

Fixed

Removed deprecated option valueFieldType.disableHashCodeMethod from validation component.

2022.10.5 (2022-10-04)

Fixed

Reverted removal of import in WorkflowBean.

2022.10.4 (2022-10-04)

Fixed

Fix for the cached UserContext of the workflow responsible, which only contained the id of the user.

2022.10.3 (2022-10-04)

Fixed

UserGroups were not added to a User on create with OIDC authentication.

Changed

Updated expander dependencies:
- net.democritus:Expanders: 5.13.0 -> 5.13.3 (several vulnerabilities in snakeyaml)

2022.10.2 (2022-09-09)

Fixed

Reverted migration away from SimpleUriFormat in assets component.

2022.10.1 (2022-09-08)

Fixed

Fixed user being resolved by name which was not always set when running workflows.

2022.10.0 (2022-09-07)

Added

Added option view.linkfield.displayField to several DataElements to use with new LinkField UI implementation
Added runWorkflowWithEngineServiceAsync and runWorkflowWithTargetsAsync to WorkflowAgent to kickstart workflow asynchronously

2022.9.0 (2022-08-30)

Fixed

When creating an instance of FlowJsonResult, the errors were not added to the pojo.

Changed

[FLOW-44] Move workflow task timeout from TaskProcessor to TaskExecutor (currently only for atomicInternal tasks).
Cleaned up several SonarQube violations in ext classes in the workflow component + some refactoring to clean up some of the code.
assets component:
- The AssetDownloader class now logs a separate exception if more than one asset is found with the same file identifier.
- The ExternalAssetChunkRetriever, ExternalAssetCreator and FileAssetDirectoryManager classes now use Java's built-in URLEncoder.encode() method now instead of nsx-runtime's deprecated SimpleUriFormat class, so it can now supports a far broader range of characters.
- Added explicit assets.internalAsset.duplicateChunk error to InternalAssetChunkRetriever when more than one chunk was found for a given position in the asset.
- Marked ByteArrayConverter class as deprecated.
Updated expander dependencies:
- net.democritus:Expanders: 5.12.1 -> 5.13.0

Moved

Several Expanders and Features have been moved from Expanders to base-components:

Engine(Bean|Local|Remote)Expander (flowElement and serviceElement)
ClaimCleanerExpander
InterruptRecovererExpander
StateTransitionerExpander
StateViewerExpander
Claimable feature
ClaimElement feature
WorkflowTaskStatus feature
Service feature
EngineShutdown feature
TaskTimers feature

In addition, a new feature has been to extract some workflow-related logic in the FinderBeanExpander and FinderDetailsExpander:

FindByClaimed feature

Next, 2 new runtime libraries have been added to house runtime classes related to workflow. LayerImplementations have been defined to make sure these libraries are added as a dependency to any expanded project using the workflow.

workflow-shared-common: Most of the runtime classes in workflow.

net.democritus.claims.BatchRequest
net.democritus.claims.ReleaseRequest
net.democritus.claims.ClaimCleaner
net.democritus.claims.ClaimCleanerFactory
net.democritus.claims.ClaimId
net.democritus.state.NOPStateRecoverer
net.democritus.state.StateRecoverer
net.democritus.state.StateRecovererFactory
net.democritus.state.StateTransitioner
net.democritus.state.StateTransitionerFactory
net.democritus.state.StateUpdate
net.democritus.state.StateViewer
net.democritus.state.StateViewerFactory
net.democritus.state.TaskInterruptStateRecoverer
net.democritus.state.TaskUpdate
net.democritus.sys.workflow.FlowParameterContext
net.democritus.sys.workflow.FlowProcessingContext
net.democritus.sys.workflow.RunId
net.democritus.sys.workflow.TaskParameterContext
net.democritus.sys.workflow.TaskProcessingContext
net.democritus.sys.FlowOrchestrator
net.democritus.sys.FlowResult
net.democritus.sys.TaskExecutor
net.democritus.sys.TaskPerformer
net.democritus.sys.TaskPerformerByDataRef
net.democritus.wfe.BatchProcessingContext
net.democritus.wfe.EngineServiceProcessingContext

workflow-shared-jpa: Classes related to database functionality related to workflow.

ClaimQueryParameter (houses createClaimExistsParameter() and createClaimDoesNotExistParameter() methods)

2022.8.1 (2022-08-11)

Changed

Some refactoring to clean up code in OIDCUserTransformer.
Updated expander dependencies:
- net.democritus:Expanders: 5.12.0 -> 5.12.1
- net.democritus.metamodel:prime-core: 2022.6.0 -> 2022.6.1

2022.8.0 (2022-08-10)

Changed

Refactored use of Vector to List/ArrayList following the rest of the JEE stack expanders.
Removed java.util.HashSet import from UserAuthenticationBean.
Refactored UserAuthenticationBean.getNames() to use Java streams.
Updated expander dependencies:
- net.democritus:Expanders: 5.9.3 -> 5.12.0
- net.democritus.metamodel:prime-core: 2022.5.6 -> 2022.6.0

2022.7.3 (2022-09-23)

Fixed

[workflow][VEGA-249] Fixed TimerHandlerBean passing a UserContext where userName is null
[workflow][VEGA-233] Adding better error handling in EngineStarterBean and EngineHealthBean postConstruct methods
Fixed NullPointerException in preDestroy method of EngineHealthBean

2022.7.2 (2022-08-09)

Changed

Refactored UserAuthenticationBean to not use Vector.

Removed

Cleaned up deprecated code:
- Removed net.democritus.usr.ProfileUserContext
- Removed net.democritus.sys.ObjectValueAgent
- Removed net.democritus.web.acting.EngineControllerAction
- Removed net.democritus.web.acting.EngineDetailerAction

2022.7.1 (2022-06-16)

Fixed

Check whether OIDC logout URL is provided, as this only applied to OpenID Connect implementations that provide session management capabilities.

2022.7.0 (2022-06-09)

Added

Added context to user session next to userContext
[NSX-220] Add support for OIDC logout

Changed

[NSX-217] Add more OIDC error logging
Fix some OIDC sonarqube bugs
[FLOW-40] Optimize database query to update engineService.lastRunAt

Fixed

[FLOW-16] Fix multiple cached instances

2022.6.0 (2022-05-30)

Changed

Updated 3rd party dependencies in expanders project (not in expanded code):
- Maven plugins:
  - org.apache.maven.plugins:maven-jar-plugin: 3.2.0 -> 3.2.2
  - org.apache.maven.plugins:flatten-maven-plugin: 1.2.1 -> 1.2.7
Updated NSX Maven plugin in expanders project (not in expanded code):
- net.democritus.maven.plugins:expanders-maven-plugin: 2021.5.13 -> 2022.1.6
Updated expander dependencies (minimum version) to address security vulnerabilities:
- net.democritus:Expanders: 5.2.4 -> 5.9.3
- net.democritus.metamodel:prime-core: 2021.5.12 -> 2022.5.6
Updated model files to format supported by prime-core version 2022.5.6.

2022.5.2 (2022-05-19)

Fixed

Fix NPE in TimeWindowValidator
Fix StateTaskDetailsWithoutRefs -> StateTaskDetails

2022.5.1 (2022-05-16)

re-release 2022.5.0

2022.5.0 (2022-05-16)

Changed

Optimize getParamTargetValue() with skipCount
Add error logging on workflow related tasks
[FLOW-16] Cache workflow runtime configuration to reduce database queries
[FLOW-16] Use detailsWithoutRefs projection in workflow orchestration to reduce database queries
[FLOW-16] Update EngineNodeService with projection to reduce database queries
[FLOW-13] Add 'refresh' button to engineService table to force a timer reset if settings are changed
[FLOW-26] Ignore collector from EngineService

Fixed

[FLOW-13] Fixed automatic timer reset on timeout when settings are changed
[FLOW-36] Fix incorrect timewindow validation in last minute of window

Changed

[FLOW-22] Add support for task timeout in ExecutorServiceTaskProcessor

2022.4.1 (2022-04-14)

Fixed

Fixed naming conflict in harvest code
Fixed missing imports

2022.4.0 (2022-04-14)

Added

Added workflow/workflow-recover-json endpoint to start recovering instances, mainly used for tests. Provide the workflow reference as a parameter, e.g. workflow/workflow-recover-json?workflow.name=MessageProcessorFlow

2022.3.0 (2022-02-18)

Added

Added run now button to engineService table

2022.2.1 (2022-02-16)

Fixed

[NSX-213] Verify that email is present in OIDC token as this is a required field.

Added

[NSX-218] Added support to the OIDC authentication for UserGroups.

Changed

Performance optimizations in OIDC flow.

2022.2.0 (2022-02-07)

Removed

[VEGA-173] Removed start/stop engine buttons from workflow page, since they are automatically managed by the EngineStarterBean

Fixed

OIDC implementation failed on non-standard ports on a reverse proxy in front of the application.
Added synchronization to EngineNodeContextRetriever#getEngineNode() to prevent the EngineNode from being created multiple times

2021.6.1 (2021-12-13)

Fixed

Fixed DataAccessFinderBean not using ENTITY_NAME in a custom finder harvest

Removed

Removed obsolete ProfileFindByUserGroups_ProfileEqDetails originally used by a long removed UserGroupScreenInfoRetrieverAction

2021.6.0 (2021-12-06)

Removed

Removed obsolete cocoon addScreen() and getScreenVector() harvests for Profile and ScreenProfile elements
- This is likely to break existing overlays/copy-pastes of LoginUserSessionHelper, please sync your code
Removed obsolete cocoon ScreenInfoRetrieverAction behavior (it is a no-op now)

2021.5.0 (2021-12-06)

Added

Added delete stub for custom asset types to implementation class.

2021.4.4 (2021-10-28)

Fixed

OpenID Connect pipeline did not always terminate in the authentication process.

2021.4.3 (2021-10-21)

Added

Support for OIDC access tokens, to support OIDC for APIs.

2021.4.2 (2021-10-20)

Fixed

Default value for defaultLoginTimeout with OpenID Connect was not set if the property was not present (and empty) in the configuration.

2021.4.1 (2021-10-20)

Fixed

User profile and account should only update if externally managed through OpenID Connect provider.

2021.4.0 (2021-10-20)

Added

Option baseComponents.isAccount on the account component to match the component in its expanders.
Generic support for OpenID Connect authentication from any provider with the ApplicationInstance option baseComponents.authentication.enableOIDC.

Changed

AccountApplicationSettings now combines the settings of all account.ns.properties files found in the classpath. This allows some settings to be specified inside the application and some outside of it.
Moved AccountApplicationSettings as expander to net.democritus:Expanders.

Removed

Removed support for the proprietary Google authentication implementation for OpenID Connect and the related baseComponents.authentication.enableGoogleAuth option.
Removed includeBouncyCastle option on utils component.

2021.3.1 (2021-09-21)

Fixed

Fixed some files containing non-ASCII characters

2021.3.0 (2021-07-16)

Fixed

Translation for DataAccess.authorized field.

Added

[NSX-163] Added support methods to validate listFields in TagValuePairAgent
Added support for component name in DataAccess element. It should be inserted in the element field as componentName_dataElementName. Just defining the name of the element is still supported, but discouraged.
Added wildcard right for DataAccess as all, which can be used to deny all rights for an element when the default is allowing all rights, or to allow all rights for an element when the default is denying all rights.
Added simple wildcard support for components and elements in the DataAccess element where the element can be * to cover all elements in every component, or componentName_* to cover every element in a component.
Added net.democritus.acl.ConfigurableDataAuthorizationImpl and net.democritus.acl.ConfigurableTaskAuthorizationImpl classes as an alternative default implementation for the authorization tasks. They default to deny all (or whitelisting), which requires you to define all rights (made easier by the wildcard support). It can be configured to use allow all (or blacklisting) by default if the ParamTargetValue with name defaultAccessRights is set to allowAll.

Changed

DataAccessRights and TaskAccessRights can now take an instance of AccessRightStrategy, which determines the default authorization for access rights, as well as how access rights are combined.

Removed

Removed junit:junit dependency in assets-shared, which is already added by the expanders.
Removed net.democritus:nsx-logging dependency in assets-shared, which is already inherited from net.democritus:nsx-shared-common.
Removed unused org.json:json dependency in account-logic.

2021.2.1 (2021-06-08)

Fixed

Fixed issue where AccessInfoInterceptor would reject saveDetails actions when the user has modify rights, but not create rights.
Fixed ParamTargetValueBean#setParamTargetValue not updating existing values
Fixed ExecutorServiceTaskProcessor getting stuck when completionService.submit() throws an exception (e.g. when the executorService queue is too small)

2021.2.0 (2021-05-07)

Added

Added ExecutorServiceTaskProcessor, which uses an ExecutorService to perform tasks

2021.1.0 (2021-03-10)

Added

Added base-components-model:jar:model-components classifier containing only pure NS model (without harvest/etc.)

2021.0.1 (2021-01-18)

Fixed

EngineNodeUpdater now automatically removes EngineNodes with duplicate names during startup.

2021.0.0 (2021-01-14)

Fixed

Updated custom code in base-components to use most recent finders

2020.12.2 (2020-12-04)

Fixed

ParamTargetValueAgent.setParamTargetValue() now correctly sets the param field instead of the name to the given paramName.

2020.12.1 (2020-11-24)

Fixed

Fixed EmbeddedAssetUpload feature to work with change in expanders 4.11.1

2020.12.0 (2020-11-24)

Added

Added PTV support to configure a default user timeout value for accounts with Google authentication.

2020.11.3 (2020-11-10)

Fixed

Fixed issue with Register external asset button on Assets page.
Reverted implementation of LoginValidatorAction to proxy the login call though the Authentication element's task, instead of calling the authentication pipeline in User directly.
Removed transaction from run-workflow methods

2020.11.2 (2020-10-23)

Fixed

Fixed an issue in the TimerHandlerBean where the timer would get stuck if the database failed when trying to retrieve the details projection of the EngineService.

2020.11.1 (2020-10-09)

Updated

Updated nsx-parent 2020.5 -> 2020.9.1

2020.11.0 (2020-09-24)

Added

A workflow can now be triggered with a POST request to /workflow/workflow-run-json.
- to run it based on an engineService; You must define a dataRef engineService. E.g. http://localhost:9400/messageApp/workflow/workflow-run-json?engineService.name=MessageImportEngineService
- to run it with a set of targetInstance; You must define a dataRef workflow and an array of dataRefs targetInstances. E.g. http://localhost:9400/messageApp/workflow/workflow-run-json with body:
```
{
    "workflow": {
        "name": "MessageImportService"
    },
    "targetInstances": [
        {
            "id": 351
        }
    ]
}
```
In addition, the WorkflowAgent has new methods runWorkflowWithEngineService(DataRef engineService) and runWorkflowWithTargets(DataRef workflow, List<DataRef> targetInstances) that will trigger a workflow.

2020.10.0 (2020-07-16)

Added

[account] Added support for Google authentication. This is enabled by adding the ApplicationInstance option baseComponents.authentication.enableGoogleAuth. The value of this option should be the client ID that can be obtained from the Google API console. For more information refer to https://developers.google.com/identity/one-tap/web/guides/get-google-api-clientid.
[account] Added an ApplicationInstance option to disable the internal password authentication baseComponents.authentication.disableInternalAuth. This will not remove the mechanism to authenticate, but rather remove the login form from the UI and disable login in the struts action that processes the login.
[account] Added a new expanded authentication pipeline in the User element. This pipeline passes through the entire stack and ends up in its own new UserAuthenticationBean in the logic layer. This new bean class can be used to add additional authentication methods through expander features. Similar to finders and other pipelines, the type of the POJO sent through the pipeline determines the implication called.

Changed

[account] The internal password authentication implementation has moved to the new UserAuthenticationBean. The previous authentication system using the authentication TaskElement is still present and behaves the same as previously, but now serves as a proxy to the authentication pipeline.

2020.9.1 (2020-07-09)

Fixed issue in TimerHandlerBean that would set busy flag to false after any timer tick

2020.9.0 (2020-05-29)

Updated dependencies

2020.8.0 (2020-05-26)

Added

Support for external asset types defined in other components. These are represented by DataElements marked with the assets.implementsCustomAsset option. The value of this option is used as the name of the new asset type, or the name of the DataElement is used if no value is given in the option. An implementation stub is generated in the logic layer for the DataElement, where an AssetStream has to be provided upon retrieval or persisted when uploading.
Struts actions now enforce their specific http methods (same as if globalOptionSettings.enforceHttpMethod was always enabled)

2020.7.0 (2020-05-07)

Added

Added submodule base-components-model providing just the model resource without expanders

Changed

Renamed standard dependency from baseComponents to base-components

Removed

Removed cocoon ext code

2020.6.1 (2020-04-24)

Fixed

Store result of EngineNode name to prevent the name changing due to a changing hostname
Fix customizations for option jpa.entity.name.format

2020.6.0 (2020-04-10)

Fixed

Wrong class was used to check for TaskParameterContext constructors, resulting in context not being passed through as intended.

2020.5.0 (2020-03-19)

Fixed

AccessInfoRetrieverAction is now compatible with both struts 2.3 and 2.5

2020.4.0 (2020-03-06)

Added

Build baseComponents as expansion resource

2020.3.0 (2020-02-27)

Fixed

Fix issues with threading and create engineNodeService if missing

2020.2.0 (2020-02-07)

Changed

Updated AccessInfoRetrieveAction for struts 2.5

Removed

dependency jar files are no longer packaged

2020.1.0 (2020-01-22)

Added

WorkflowParameterContextFactory and StateTaskParameterContextFactory now pass the context through to parameterContext. The factories first check if the correct constructor is present, in case the application is expanded with an earlier expander version and thus a nsx-runtime version < 2019.7.1
Modified the label of workflow::Workflow::className to 'Flow element name' to better represent how the actual value is used.
Added clearer error message if workflow::Workflow::className is not correctly defined

2026.7.0 (2026-09-28)​

Added​

Changed​

Fixed​

2026.6.2 (2026-08-25)​

Fixed​

2026.6.1 (2026-08-25)​

Fixed​

2026.6.0 (2026-08-18)​

Added​

Changed​

Fixed​

2026.5.0 (2026-06-22)​

Added​

2026.4.0 (2026-05-26)​

Changed​

2026.3.0 (2026-03-23)​

Added​

Changed​

2026.2.0 (2026-01-19)​

Added​

Changed​

2026.1.0 (2026-01-15)​

Fixed​

Changed​

2026.0.0 (2026-01-14)​

Added​

Changed​

Removed​

2025.4.0 (2025-10-13)​

Fixed​

Changed​

2025.3.1 (2025-09-22)​

Fixed​

2025.3.0 (2025-08-04)​

Changed​

2025.2.0 (2025-06-18)​

Added​

Changed​

2025.1.2 (2025-04-27)​

Fixed​

2025.1.1 (2025-04-27)​

Fixed​

2025.1.0 (2025-04-22)​

Changed​

Removed​

2025.0.1 (2025-04-14)​

Fixed​

2025.0.0 (2025-04-14)​

Changed​

2024.7.4 (2025-02-20)​

Fixed​

2024.7.3 (2025-02-20)​

Fixed​

2024.7.2 (2024-12-11)​

2024.7.1 (2024-12-05)​

2024.7.0 (2024-11-26)​

Changed​

2024.6.3 (2024-12-11)​

Fixed​

Changed​

2024.6.2 (2024-11-05)​

Fixed​

Changed​

2024.6.1 (2024-10-10)​

Changed​

2024.6.0 (2024-10-10)​

Changed​

2024.5.3 (2024-09-12)​

2024.5.2 (2024-08-12)​

Fixed​

Changed​

2024.5.1 (2024-08-10)​

Changed​

2024.5.0 (2024-08-09)​

Added​

Changed​

2024.4.0 (2024-08-03)​

Added​

Changed​

2026.7.0 (2026-09-28)

Added

Changed

Fixed

2026.6.2 (2026-08-25)

Fixed

2026.6.1 (2026-08-25)

Fixed

2026.6.0 (2026-08-18)

Added

Changed

Fixed

2026.5.0 (2026-06-22)

Added

2026.4.0 (2026-05-26)

Changed

2026.3.0 (2026-03-23)

Added

Changed

2026.2.0 (2026-01-19)

Added

Changed

2026.1.0 (2026-01-15)

Fixed

Changed

2026.0.0 (2026-01-14)

Added

Changed

Removed

2025.4.0 (2025-10-13)

Fixed

Changed

2025.3.1 (2025-09-22)

Fixed

2025.3.0 (2025-08-04)

Changed

2025.2.0 (2025-06-18)

Added

Changed

2025.1.2 (2025-04-27)

Fixed

2025.1.1 (2025-04-27)

Fixed

2025.1.0 (2025-04-22)

Changed

Removed

2025.0.1 (2025-04-14)

Fixed

2025.0.0 (2025-04-14)

Changed

2024.7.4 (2025-02-20)

Fixed

2024.7.3 (2025-02-20)

Fixed

2024.7.2 (2024-12-11)

2024.7.1 (2024-12-05)

2024.7.0 (2024-11-26)

Changed

2024.6.3 (2024-12-11)

Fixed

Changed

2024.6.2 (2024-11-05)

Fixed

Changed

2024.6.1 (2024-10-10)

Changed

2024.6.0 (2024-10-10)

Changed

2024.5.3 (2024-09-12)

2024.5.2 (2024-08-12)

Fixed

Changed

2024.5.1 (2024-08-10)

Changed

2024.5.0 (2024-08-09)

Added

Changed

2024.4.0 (2024-08-03)

Added

Changed