ASAB Release 03/12/2024

Patch

• v24.47.1 - Security authorization patch by @byewokko in #648

What's Changed

• ASAB library libsreg provider is more prone to failures by @ateska in #588
• Use task service in library changed by @mithunbharadwaj in #590
• Repair items encrypted with broken padding method by @byewokko in #593
• Create Service Discovery docs by @mejroslav in #533
• Internal authorization via discovery service by @byewokko in #585
• Extract and authorize tenant from X-Tenant HTTP header by @byewokko in #592
• More descriptive info in logging obsolete by @mejroslav in #597
• Kickoff: Add watchdog for loop interactivity. by @PremyslCerny in #596
• Library: Fix subscribe mechanism in ZK provider by @eliska-n in #599
• JSON serializer can handle dataclasses + better exception handling in threadsafe PubSub by @ateska in #598
• Discovery Service: rescan threadsafe by @eliska-n in #594
• Task Service: Schedule threadsafe by @eliska-n in #600
• Fix ES storage service delete method by @Plesoun in #602
• Tenant layer introduction to library by @mithunbharadwaj in #549
• Add target info to "Library.change!" pubsub message by @byewokko in #603
• Improve library pubsub example by @byewokko in #609
• Api Service & Manifest: Fix timestamp, so it fits iso standard and can be further used by @eliska-n in #605
• Add Tenant Layer information to reference doc by @mithunbharadwaj in #601
• Use c based yaml loader by @mithunbharadwaj in #608
• Sentry.io: Disable transaction sampling by @mejroslav in #610
• Remove target argument from library's pubsub callback by @byewokko in #612
• OBSOLETE Log in Discovery; removed temporarily by @language-shprt in #611
• Fix of the incorrect imports by @ateska in #613
• Pass tenant to discovery session by @byewokko in #616
• Publish "Tenants.changed!" when new tenants are loaded by @byewokko in #618
• Fix request authorization in discovery service by @byewokko in #619
• Fix wrong layers counting in library.list() method by @mejroslav in #617
• Remove obsolete authz module by @byewokko in #620
• Lock Yarl version to keep python 3.8 compatibility by @byewokko in #624
• Implicit discovery session authorization using Request context variable by @byewokko in #621
• Introduce Authz contextvar and Authorization object by @byewokko in #615
• Fix discovery service authorization by @byewokko in #627
• Warn on dangerous internal authorization usage by @byewokko in #626
• Change unnecessary closure in WebContainer into plain function by @byewokko in #628
• Deprecate Python 3.8 by @byewokko in #630
• Fix AuthService housekeeping by @byewokko in #629
• Direct auth introspection in mock mode by @byewokko in #625
• Fix auth example app by @byewokko in #631
• Introduce tenant providers in TenantService by @byewokko in #632
• Restore AuthService.get_authorized_tenant as a legacy method by @byewokko in #635
• When libsreg directory contains no files, it forces re-download by @ateska in #623

Full Changelog: v24.29-rc1...v24.47.1