Skip to content

custos-1.1

Latest
Latest
Compare
Choose a tag to compare
@lahirujayathilake lahirujayathilake released this 06 Dec 18:29
· 1 commit to master since this release
custos-1.1
a81bf10

Apache Airavata Custos 1.1 Release Notes

Key Features

1. Authentication Services

  • Support for multiple authentication mechanisms

    • OAuth2 Simplified authentication for web and mobile applications.
    • OIDC (OpenID Connect) Enhanced user experience and secure identity verification.

  • PKCE Flow

    • Introduced support for Proof Key for Code Exchange (PKCE), making it suitable for Single Page Applications (SPA).

  • JWKS Endpoint

    • Added support for a JSON Web Key Set (JWKS) endpoint to enable public key verification.

2. Authorization Management

  • Token Customization

    • Injected group and scope claims into tokens for fine-grained authorization.

  • OIDC Standards Implementation

    • Updated authorization, token, and OIDC endpoints to comply with OIDC standards, with changes to parameters and response formats.

3. Secrets Management

  • Secure storage and retrieval

    • API keys, credentials, and other secrets are securely stored and retrieved.
    • All sensitive information is encrypted at rest.

  • User-Friendly Management

    • Command Line Interface (CLI) and API support for managing secrets.

4. Multitenancy Support

  • Enhanced Multitenancy
    • Host multiple tenants with isolated data and configurations.

5. Federated Identity Management

  • Single Sign-On (SSO)

    • Support for SSO across multiple applications and services.

  • Federation with Identity Providers

    • Seamless support for multiple identity providers through federation.

6. Developer-Friendly Tools

  • Comprehensive REST APIs

    • Simplified integration with applications.

  • Sample Applications

    • Demonstrations of common integration patterns.

Major Changes Since the last Release

  1. Keycloak Upgrade

    • Upgraded from version 9.0.2 to 24.0.0 for improved security and additional features.

  2. Service-to-Service Communication

    • Simplified service interactions by refactoring them into dependency-based communication.

  3. OIDC Standards Implementation

    • Updated endpoints for authorization, token, and OIDC to comply with the latest OIDC standards.

  4. Nginx Proxy Removal

    • Removed Nginx as a reverse proxy; SSL termination is now handled by the deployment architecture.

  5. New Module Architecture

    • custos-application Entry point, configuration, and API integration.
    • custos-core Core business logic, entities, and repositories.
    • custos-services Service classes for implementing business logic.
    • custos-api REST controllers for exposing application functionality.

  6. Terraform Deployment Scripts

    • Added scripts for AWS, including:
      • Network layer (VPC, private/public subnets).
      • Keycloak deployment.
      • Vault deployment.

What’s Next?

Our roadmap for future releases includes:

  • Group Invite Links:

    • Enable group invitations, allowing members to join via invite links.

  • Token Signing Key Rotation:

    • Implement automated and seamless token signing key rotation for enhanced security.

  • Tenant-Specific Token Signing Keys:

    • Support for tenant-specific token signing keys to ensure isolated and secure token management per tenant.

  • Enhanced Custos Portal Functionality:

    • Expose more features and capabilities through the Custos portal for improved user experience.

  • Notifications:

    • Adding support for notifications to keep users informed.

Changelog

Full Changelog: 0.0.0...custos-1.1

We welcome feedback from the community to further enhance Apache Airavata Custos. For more details, visit our GitHub repository.

Contributors

machristie, DImuthuUpe, and 10 other contributors
Assets 2
Loading