FLAT
CouperSevenval TechnologiesDocker ImageGithub
develop
develop
  • Changelog
  • FLAT
  • Administration
    • Configuration
    • Docker
    • Logging
  • Cookbook
    • Using the Built-in Mocking
    • Performing Additional Checks on JWT Access Tokens
    • Logging Custom Fields
    • Using Environment Variables
    • Handling Errors with an Error Flow
    • File Serving
    • Forwarding a Request to an Upstream API
    • Extracting Common Initialization Flow Tasks
    • Encoding and Decoding JWT
    • Passing Header Fields to the Client
    • How can I pass an arbitrary header field to an upstream system?
    • Performing Additional Checks on JWT Access Tokens
    • Proxying requests to Upstream APIs
    • Increasing the Request Timeout
    • How can I see what the client requested?
    • Using Swagger UI for API Documentation
    • Testing API Requests
    • Testing with Backend Requests
    • Testing Templates
    • Sending POST Requests
    • Processing Upstream Responses
    • Protecting Access using JWT Tokens
  • Reference
    • Configuration
    • Debugging
    • flat CLI
    • Flow
    • Variables
    • OpenAPI / Swagger Integration
    • OpenAPI
      • CORS - Cross-Origin Resource Sharing
    • OpenAPI
      • Differences from Swagger
    • OpenAPI
      • Mocking
    • OpenAPI
      • Routing
    • OpenAPI
      • Security
    • OpenAPI
      • Upstream APIs
    • OpenAPI
      • Validation
    • Flow Actions
      • assert Action
      • auth Action
      • backend-flow Action
      • copy Action
      • debug Action
      • dump Action
      • echo Action
      • error Action
      • eval Action
      • log Action
      • nameshave Action
      • pass-body Action
      • proxy-request Action
      • regex Action
      • request Action
      • requests Action
      • serve Action
      • set-config Action
      • set-env Action
      • set-response-headers Action
      • set-status Action
      • sub-flow Action
      • template Action
      • test-request Action
      • xslt Action
    • Functions
      • apply-codecs()
      • array-reverse()
      • array()
      • base64-decode()
      • base64-encode()
      • body()
      • calc-signature()
      • capitalize-first()
      • content()
      • decrypt-xml()
      • decrypt()
      • encrypt()
      • ends-with()
      • file-exists()
      • fit-document()
      • fit-log()
      • fit-serialize()
      • get-log()
      • has-class()
      • html-parse()
      • join()
      • json-doc()
      • json-parse()
      • json-stringify()
      • json-to-csv()
      • json-to-xml()
      • jwt-decode()
      • jwt-encode()
      • ldap-lookup()
      • ldap-query()
      • lookup()
      • matches()
      • md5()
      • replace()
      • sort()
      • split()
      • tolower()
      • toupper()
      • trim()
      • unixtime()
      • urldecode(), url-decode()
      • urlencode(), url-encode()
      • uuid3() and uuid4()
      • verify-signature()
      • verify-xmldsig()
      • xml-parse()
      • xml-to-json()
    • Templating
      • {{,}}
      • Comment {{// …}}
      • Dot {{.}}
      • Conditional `{{if <condition>}} … {{elseif <condition> }} … {{else}} … {{end}}
      • loop
      • ?? Operator
      • Object XML Notation (OXN)
      • Pair Producer {{: …}}
      • Placeholder
      • Template Variables
      • with
    • Testing
  • Tutorial
Powered by GitBook
On this page
  • 20220413
  • Added
  • Fixed
  • 20210623
  • Added
  • Fixed
  • 20210107
  • Added
  • Fixed
  • 20200828
  • Added
  • Fixed
  • Changed
  • 20200519
  • Added
  • Fixed
  • 20200424
  • Added
  • Fixed
  • Changed
  • 20200409
  • Added
  • Changed
  • Fixed
  • 20200323
  • Fixed
  • 20200318
  • Added
  • Changed
  • 20200213
  • Added
  • Fixed
  • Changed
  • 20200110
  • Added
  • Changed
  • Fixed
  • 20191210
  • Added
  • Changed
  • Fixed
  • 20191018
  • Added
  • Changed
  • Fixed
  • 20190919
  • Added
  • Changed
  • Fixed

Was this helpful?

Changelog

NextFLAT

Last updated 3 years ago

Was this helpful?

Added

  • provide request info as a HAR file if is enabled

Fixed

  • More helpful error message for misspelled type names in

  • don't leak Authorization in FLAT::getRequestInfo()

  • fixed a mixup of JSON DOM representation styles

Added

  • The

Fixed

  • now does not produce unnecessary quotes for numeric values

  • Problem in the , if called with a string containing an ampersand

  • Send Vary: Origin response headers for non-preflight requests if is enabled but Origin was not sent

Added

Fixed

Added

Fixed

Changed

Added

Fixed

Added

Fixed

Changed

Added

Changed

Fixed

Fixed

Added

Changed

Added

Fixed

Changed

Added

Changed

Fixed

Added

Changed

Fixed

  • Incorrect default content-type text/xml for request bodies

Added

Changed

Fixed

Added

Changed

Fixed

The

The

and

The and properties

Specifying the

via environment variables

were not usable in

to enable debugging using the Debug request header, defaults to false

The force-cache-refresh

The

The cacheHit property in the

Empty objects are no longer as empty arrays.

The allows null values in array entry objects.

The can no longer override .

now publicly available.

Warnings in about invalid

Validation for the and test action configurations.

The

additional configuration options for the

property for easy JWT forwarding

Calls to the affecting the result of the

can now also be specified at the path level.

to configure proxies without a flow

Enhanced with origin, query, stripEndpoint and addPrefix properties

If a client URL path is below the API base path, does not match any defined route, and a path is defined which equals the API base path, so that a matching client URL path is the concatenation of the API base path with itself (e.g. /api/api if the basePath is /api), the is now properly executed.

Some PEM formatted keys could not be recognized during .

Multi-line values for are now supported.

If the definition is given with either a or , the defaults for the exit-on-error, validate-request and validate-response request options are changed to true.

The

The FLAT revision is shown when FLAT is started and is available in

Enhanced with new fields

When multiple test files with flat test, each test now tests its own response.

Fatal errors when using certain combinations of and

are shown in the debug log if the is env

With activated , a missing definition or a definition value referencing a non-existant resource now results in a 500 response with a proper error message.

Swagger security scheme objects without x-flat-jwt are ignored for .

.

now accepts the empty object {}

Reading is faster because of caching

Validation for application/x-www-form-urlencoded encoded

The action

The functions and .

Parameter handling of the functions and .

Padding scheme for and to .

Relative paths in the are resolved relative to the flow file's path.

The x-flat-validate is now also recognized below paths/<path> and paths/<path>/<operation>.

The force-cache-ttl

Only allow operations defined in to be used in the

The default value for the use-http-cache is now false, even if no request options are configured.

Segmentation fault (or double free) when is used to assign nodes from a node-set variable to another variable

The functions , , , and

The function

The variable is set and is triggered if a request error occurs

The and properties in the JSON request configuration

More environment variables for system

If a path in ends with /**, this entry matches the given path as well as arbitrary paths below it.

now gracefully accepts empty objects in the definition.

Logging of for more

Some alert messages were twice

Evaluating an undefined or null , as a string, now returns the empty string instead of the string null

The now replaces Cache-Control headers instead of merging them

The now correctly handles whitespace and other URL-Encoded characters in the name of the fallback-doc

Swagger definition supports , and

The and , and functions

Validation of the , and JSON bodies

The expected result in an 's assertion can now be null

The , the

The test search for is recursive

are sent to stderr in JSON format

The report-only

The exit-on-error, mock and validate also for XML-configured requests

Relative paths for e.g. in with copy in

The variable containing error information for client request/response validation errors

The , called if an error occurs, and referenced by flow in x-flat-error in the swagger.yaml

The exit-on-error (for JSON-configured requests) to trigger the error flow

An additional parameter algorithm for the function to limit the acceptable signing algorithms. Mandatory for RSASSA based signatures

The contains and pattern for the assert action

The flat test Framework with , , and actions

The and functions

The default User-Agent for is FLAT

Unless terminate="false" is set, the will terminate the flow

For the : values in may now also be numeric or boolean

If the signature cannot be created, the function returns an empty string and an error message is logged

The key for the and functions must not be empty

HTML only if HTML is accepted; plain text otherwise

Fatal error when creating requests with null

Fatal error when creating requests with invalid

Requests are now rejected if upstream validation is enabled, but no is configured or the given definition is not found

The results of the function can now be used as input for or

20210107
uuid3() and uuid4() functions
ldap-query() function
20200828
ldap-lookup() function
json-to-csv() function
20200519
Beta image
More about Docker images…
debug log
Swagger definitions
assert
set-env
error action
PHP-FPM process management
content() function
body() function
20200424
Swagger security requirements
proxy-request action
JWT processing
environment variables
20200409
json-to-csv() function
$env/FLAT_REVISION
testing
jwt-decode()
<eval/>
20200323
Environment variables
debug topic
security checks
20200318
body() function
pass-body action
Security checks with JWT
set-response-headers action
swagger.yaml
20200213
formData parameters
proxy-request
verify-xmldsig()
decrypt-xml()
decrypt()
calc-signature()
encrypt()
decrypt()
RSAES-OAEP
json-doc() function
20200110
OpenAPI version 2.0
swagger.yaml
eval
20191210
apply-codecs()
encrypt()
decrypt()
calc-signature()
verify-signature()
file-exists()
configuration and tuning
Swagger validation
template results
flow actions
logged
variable
set-response-headers action
serve action
20191018
discriminator
JSON schema $id references
JSON schema propertyNames
array-reverse()
sort()
xml-parse()
html-parse()
request
requests
set-response-headers action
assert action
log action
get-log() function
flat-test
Logs
validation modes
backend-flows
20190919
error flow
jwt-decode()
assert
test-request
backend-flow
set-env
json-stringify()
json-parse()
upstream requests
serve action
jwt-encode()
jwt-encode()
jwt-decode()
split()
join()
fit-serialize()
20220413
flat/collect-request-info
Swagger schemas
20210623
set-env
split() function
CORS
log action
proxy-request action
exit-on-error/error flow handling
request action
Merging directives into php.ini
Path parameters
error flows
x-flat-proxy
fallback flow
FLAT_DEBUG_ALLOW_HEADER
LDAP TLS configuration
LDAP timeout
scope-claim
post-check-flow
required token scope
out-header
validate-request-security request option
request option
x-flat-proxy
request option
request option
request option
id
encoding
request options
request option
headers
query parameter
body source
definition option
logged
Swagger extension
swagger.yaml
system log fields
flat_access log
option
upstream response information ($upstream)
$error
$error
upstream validation
error page
compare flags