[Unity-idm-discuss] Unity 3.12.0 release

[Krzysztof B. <kb...@un...>]

Dear Subscribers,

I'm happy to announce availability of a new Unity release.

As always all relevant links are available at 
https://unity-idm.eu/releases/release-3-12-0/

The 3.12.0 release brings a new library for easier REST integration with 
Unity from Java, a new REST endpoint to manage projects and much more.


        REST Types API

The biggest change in this release is introduction of a new Java module 
/unity-rest-api/. This module can be used by apps written in Java, which 
integrate with Unity REST API.

This module offers a clean, simple to use set of immutable classes 
following builder pattern, allowing for easy preparation of REST 
requests as well as parsing of responses. All Unity REST Admin paths are 
covered.

At the same time the other module /unity-types-api/ gets deprecated. It 
will be dropped in the release 4.0.0. Users of this module should 
consider migrating to the /unity-rest-api/ module.

Note that REST API has not been changed – the new module offers only a 
new Java API making the REST integration easier on Java platform.


        SAML metadata handling of IdPs

We have finally concluded our big effort to update SAML metadata 
handling. The previous releases covered more impacting part of 
authenticators. In this release we have aligned the IdP part. A user 
visible effect of this change is slightly reduced memory consumption in 
case of IdP endpoints configured from SAML metadata, as well as faster 
(re)loading of metadata.


        RPM packaging dropped

Since we haven’t observed almost any download activity related to RPM 
packaging, we have decided to drop it. tar.gz bundle is now the only 
distribution format.


        Proxied OAuth token introspection

Unity allows now for acting as a proxy to other OAuth servers when it 
comes to handling OAuth token introspection requests. To enable this 
feature the upstream OAuth Authorization Servers needs to be setup in 
Unity OAuth endpoint’s configuration.


        UpMan REST API

A new type of endpoint was added: UpMan REST API. This API complements 
UpMan web interface, but is not its REST replacement functionality-wise. 
Instead the REST API allows for quick and easy management of projects 
themselves. Creation, removal and fundamental configuration of an UpMan 
project (like setting the initial manager) can be done effortlessly with 
the new REST interface.


        Policy documents REST API

Unity Admin REST API was enhanced with support of Unity policy documents 
management.

Also a new authorization role was added: policyDocumentsManager. Holder 
of this role has generally limited permissions as a regular user, but 
additionally can manage policy documents over the REST API.


        Other improvements

  * After typing a wrong password the Enter key binding is not lost anymore
  * Invitations are not loosing the >by invitation< status even after
    switching to enquiry mode
  * Invitation to upman with default settings do not allows for choosing
    arbitrary initial groups anymore
  * Null entries in trusted apps tab on home UI should not happen anymore
  * Missing logo do not causes upman loading to crash anymore


Best regards,
Krzysztof