All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
- Change documentation folder structure
- Update Spring Boot to version 3.3.5
- Update API to AAS to v3.0.2_SSP-001 (Breaking changes)
- Changed type of aasIdentifier and submodelIdentifier from
byte[]toString - Changed patterns to
^([\\x09\\x0a\\x0d\\x20-\\ud7ff\\ue000-\\ufffd]|\\ud800[\\udc00-\\udfff]|[\\ud801-\\udbfe][\\udc00-\\udfff]|\\udbff[\\udc00-\\udfff])*$
- Changed type of aasIdentifier and submodelIdentifier from
- Update Spring Boot to version 3.3.4
- Update logback to version 1.5.8
- AWS Cognito support for authentication
- Bugfix access rule management for submodelfilter (visibleSemanticIds): Remove condition on
semanticId.keys.type = submodelbecause thesemanticId.keys.typeshould beGlobalReference. This check is not needed. - Implemented mandatory changes in licensing and legal documentation
- Bugfix: Introduced wildcardAllowedTypes for access management rules. Now, specificAssetIds can only be defined as PUBLIC_READABLE if their types are included in the wildcardAllowedTypes list.
- Added GitHub action for publishing edc extension to maven central repository.
- Fixed regex pattern for SpecificAssetId value field and some other fields. Now special characters like '+','/','=' are also allowed.
- security fix spring-web:6.1.5.jar
- Added lookup api test in aas-registry-e2e-test action
- KICS findings fixed.
- Fixed behaviour of access rule management in case of multiple specificAssetIds with same keys and different values.
- Update Springboot to version 3.2.4.
- Added API POST lookup/shellsByAssetLink to retrieve shell ids without base64 encryption.
- Added v3.1.0 postman collection for new API.
- Changed API path from api/v3.0/ to api/v3/
- Update Springboot to version 3.2.3
- Update postgres dependency version to 42.7.2
- Granular access control
- Fixed idShort null pointer exception.
- default value for registry authentication has been corrected to 'true' in the documentation
- Refactored DuplicateKey Exception handling
- Removed deprecated /query-Endpoint
- Mark idShort in openApi mandatory
- Spring Boot version updated to 3.1.6 to fix CVE-2023-34053
- update Logback version to fix CVE-2023-6378
- Length for Column "SUB_PROTOCOL_BODY" has been extended to 2048.
- Fixed Open api specification by adding the context root.
- Fix done for encoding input parameter to get shell look up api.
- Fixed response for GetDescription api.
- Fixed CVE-2023-36478 | CWE-190 and CVE-2023-40167| CWE-130 Third-Party Components vulnerability.
- Update PostgreSQL version to 15.4.
- Performance improvements in the look-up API - GET /lookup/shells.
- Implemented the regex patterns for various fields.
- IdShort is unique on shell level. Idshort can be exists only one time in the database (tenant).IdShort of submodelDescriptor is unique inside a shell. Uniqueness on shellId and idShort and Idshort of submodelDescriptors are unique.
- change comment style in .tractusx to yaml style (#).
- Add deprecated api
/queryfor release 3.2. The Apiqueryis not a part of AAS 3.0. But for release 3.2, this api will be added and marked as deprecated. This api will be removed in future releases.
- Bugfix: GlobalAssetId was not shown in the shell response. This bug is fixed. GlobalAssetId is shown, if the consumer has full access to the shell.
- In this version the models have been adjusted to new version AAS 3.0.
- Implement access control to Digital Twins Based on the BPN (Business Partner Number)/ TenantId
- Refactored existing models to align with AAS 3.0. Removed /query from lookup api because it is not a part of AAS 3.0 version.
- Fix CVE-2023-34035 (update springboot to version 3.1.2)
- Fix CVE-2023-2976 (update google guava to version 32.1.1-jre)
- In this version, a bug is fixed that occurred while fetching all the submodels for a Shell.
- In this new version, Base64 decoding is provided for the provided encoded parameters. All the provided path parameters has to be Base64 URL encoded.
- In this new version, Cursor pagination is provided for search instead of classical offset pagination in previous version.
- In this version, Spring-jdbc is converted to spring-jpa.
- Update functionality to get bpn from HEADER (Edc-Bpn) instead of token and use it to search for specificAssetIds.
- In this version, fix is given for adjusting SemanticID in submodel response. This is only temporary workaround.
- In this version, fix is given for adjusting openapiyml for length of subprotocolbody field to 2000 from 128 char.
- This version includes changes for updating the subprotocolbody length from 50 to 2000 char.
This version includes changes for updating the application to AAS version 3.0. The old AAS version is no longer supported. Only the API version 3.0 is supported.
- Update openapi yml file to the newest version AAS 3.0 version
- Remove old AAS version.
This version includes changes for the decentralized digital twin registry.
- Move Veracode to eclipse-tractusX
This version includes changes for the decentralized digital twin registry.
- Update INSTALL.md instruction to adapt /etc/hosts
This version includes changes for the decentralized digital twin registry.
- fix CVE-2023-20862
- fix CVE-2023-20873
This version includes changes for the decentralized digital twin registry.
- Create INSTALL.md
- Rename documentation.md to README.md
- Add .tractusx file
- CODE_OF_CONDUCT.md
- Provide functionality to return only specificAssetIds for consumer (not owner of twins) which matched the externalSubjectIds
- Create INSTALL.md
- Rename documentation.md to README.md
- Add .tractusx file
- CODE_OF_CONDUCT.md
- Update dependencies.md
- Fix cve-2023-20863 (update spring-core to 6.0.8)
- Fix cve-2023-20863 (update spring-expression to 6.0.8)
- Fix cve-2022-45688 (update json to 20230227)
- Update application to springboot 3.0.5
- Fix vulnerability spring-expression
- Update application to springboot 3.0.1
- Move backend/deployment to separate charts folder
- Add new workflow for Helm chart releases
- Include action to parse dependency licenses
- Making image version configurable and introduce appVersion as default
- Fixing CVEs (2022-41946 and CVE-2022-41854)
- Increase jackson-databind version to 2.14.0
- Fixing cve-2022-31692
- Adjusting openapi yaml to fix validation error
- Update commons-text (apache-org.apache.commons) to 1.10.0
- Clean-up POM
- Increase Spring Boot version
- Update Docker base images
- Adjust snakeyaml version to 1.31
- Remove h2 database from packaged JAR
- Replace variable tenantId by the tenantId from the database
- Fixed broken tests
- The registry prevents access to specificAssetIds by evaluating the BPN of a user
- The registry enforces that only users with the same BPN can update or delete twin entries once created (multi-tenancy)
- Helm Charts available via helm Repository at Eclipse Foundation
- Swagger UI now integrated with Portal Authentication
- Update of Spring Boot version to 2.7.3
- The digital twin registry allows data consumers to find data endpoints and connect to them
- The digital twin registry allows data providers the creation, update, deletion of digital twin entries
- Twins contain IDs, local identifiers and a number of submodel entries
- Submodels contain a link to the data endpoint and reference a semantic model description of how the data is structured
- The registry prevents unauthenticated access by checking whether an access token is provided by a CX user
- The registry enforces that only users with the correct role can read/create/update/delete twin entries