v1.3.0-rc.1

1.3.0-rc.1 (2022-01-26)

Bug Fixes

• Avoids irrelevant but logged ClassNotFoundException. It is correct that the class iris.backend_service.configurations.CentralConfigurationException is missing. (89c2da8), closes #527
• Cleans the .env(.sample) from values that are prescribed for the environments. Admins in the HDs do not have to do anything with it now, instead the correct values are set internally based on the IRIS_ENV. (0211219), closes #566
• Deps: Sets new log4j version to fix current vulnerability in versions ≤2.17.1 (c57d32f)
• Removes a few default values for configurations that do not work in general, but hide the lack of an individual configuration. If the .env(.sample) has been filled in according to the notes it contains, then all mandatory values are already set correctly and no action is required. (c61dc00), closes #561
• Removes the long deprecated environment variable TRUSTED_CA_CRT from .env.sample. This has not had any effect for some time. (1e19b7e), closes #554 #555
• Stack traces are not included in error responses now to avoid giving too many internal details to the outside world for error conditions. (07c6476), closes #560
• Standalone installation: The announcement database file is now relative to the execution path by default and can be additionally configured with ANNOUNCEMENT_DB_FOLDER. (f9e5bf9), closes #222 #528
• The property SECURITY_JWT_SHARED_SECRET is now deprecated and is no longer considered. Instead, the secret is set randomly. This relieves the administrators of the IRIS client from this technically necessary detail. (1bfe801), closes #553 #556
• Updates EPS from version from v0.1.69 to v0.2.1 (fc4e767), closes #526

Features

• Adds alerts about configuration mismatch of proxy target subdomain. (7327bf8), closes #529
• Codescan: Adds more queries to the CodeQL scan to be more helpful. (8fb828c)
• Database: Updates the integrated PostgreSQL database (Docker-Compose installation) to the version 13.5. (60ed899), closes #540
• Set content specific cell formats to excel export for octoware. (5d2854d), closes iris-connect/iris-backlog#264
• The certificate of the local EPS is validated by the IRIS Client now. This will further improve security within the health department installation. (870ae47), closes iris-connect/iris-backlog#226 #568
• To protect against flooding with very large amounts of data, submissions is now limited. This concerns both the pure amount of data and the number of elements per data submission. (7733fe8), closes iris-connect/iris-backlog#180 #573