Releases: Soluto/stitch
Patch vm2 npm package
Configure isAlive timeout
v1.2.3 Configurable isAlive timeout
Added status endpoint to registry
-
Added the status endpoint to registry that returns the metadata file for the resource group and validates that policy attachments exist for all opa policies, returning an array of the policies that have missing attachments
-
Fixed a bug in anonymous strategy authentication that included querystring as a part of the path
Introspection query policy - types fix
Introspection query policy is used like a BasePolicy, hence it needs to use the same types.
Introspection query policy
Currently stitch exposes GRAPHQL_INTROSPECTION
with a default of true.
Enabling the introspection query in production is a security vulnerability in some use cases, so we want to control access to the introspection query using a policy instead.
This change adds the introspectionQueryPolicy
resource type, which can be added same to the base policy via cli or the registry graphql gateway.
If the introspection query is not provided, it will be allowed by default (assuming GRAPHQL_INTROSPECTION
is true).
Policies with queries with policies with args with defaults
v1.1.1 Fix: Policy with query that contains another policy with default args…
Content-Type filtering & configurable prometheus histogram buckets
v1.1.0 Configurable request and resolver duration histogram metrics (#335)
Auth strategies for registry
Different levels for child loggers (#328) * Different levels for child loggers * Use createChildLogger * Fix tests * E2E test for child logger level * More logs for policies * Docs * More child loggers * Child logger level in blackbox tests
postResolve policies
v0.6.2 Combo of changes related to policy validation (#323)
Fix @localResolver merge strategy
v0.6.1 Fix @localResolver merge strategy bug (#321)