Breaking change in controller/worker-topdf log configuration since OO 2.10.3

The Helm toggles worker-topdf.enableJsonLogging and controller.enableJsonLogging were removed.
To configure JSON Logging you can use a Spring Boot structured logging configuration: https://docs.spring.io/spring-boot/reference/features/logging.html#features.logging.structured.gelf https://levigo.github.io/jadice-flow-documentation/docs/next/operations/logging
e.g.:

worker-topdf.worker.logging.structured:
  format:
    console: gelf

Task

Error on Controller container startup

Reverted change in default jobtemplate.

Bug

Update preconditions for Drag & Drop from jadice web toolkit to OO

Requirements of dnd from jadice web toolkit to Output Organizer are updated
See: https://levigo.github.io/output-organizer-documentation/integration/import-integration

Task

More prominent thumbnail "current page" border

The current page is now highlighted with a thick border in the primary color.

Task

Page navigation triggers element navigation

On Previous Page navigation, pages are selected correctly

Bug

JWT Viewer fails to load when browser tab is not active

Load viewer when tab gain focus again

Bug

JWT Viewer fails to load for LongPoll

Fixed an error when loading the viewer with LongPoll

Bug

Undo doesn't change the selected document

Automatic selection of the document by undo is correct

Bug

Tree not updating when uploading faulty documents

Documents are processed correctly during import

Bug

Thumbnail size is inconsistent

Keep zoom level of document thumbnails while switching between documents

Bug

Loading Spinner is not visible

Document loading spinner is shown and custom styling is possible again

Bug

Disable export button with no pages to export

The Export button remains enabled until the collection no longer has any documents with pages.

Bug

Improve export performance

Exporting is now much faster

Task

S3 AWS SDK - End-of-Support

Migrated to AWS SDK for Java 2.0

Task

Compatibility Problems with Atomikos and Mariadb

Fixed the issue with Atomikos and Mariadb compatibility
See:https://levigo.github.io/output-organizer-documentation/installation/installation#optional-database-configuration

Task

Merging documents not always working

Merging of documents via drag&drop is fixed

Bug

I-Frame Authentication with context path

Resolve login hang that prevents redirecting to the application to finish authentication when the application is embedded in an iFrame

Bug

CVE-2025-58056

Fixed

Bug

CVE-2025-4802

Fixed

Bug

CVE-2025-41249

Fixed

Bug

CVE-2025-41248

Fixed

Bug

CVE-2024-8176

Fixed

Bug

OO Basic with SSO support and restriction to author

Output Organizer has a new default access policies that will be activated depending on your authentication configuration.
When a authentication is configured in Helm all API access is automatically restricted to authenticated users.
In addition you can configure the Halm Value organizer.config.ownPolicy: true to prevent access for users to collection they have not created themselves.

Task

Principal variable for access rules

Added a new access rule variable under the collection resource to create conditions that can verify if requesting user is the owner / creator of this collection.

{
  "equals" : {
    "collection.principal": "own"
  }
}

see https://levigo.github.io/output-organizer-documentation/integration/access-policies

Task

Multithreaded document loading

Improved document loading times with multiple page sequences by loading them in parallel instead of sequentially.Configurable in Helm with:

viewer:
  fusion:
    documentLoader:
      threadPoolSize: 16
      timeoutInSeconds: 600

Task

Extend annotation profile capabilities

• Annotation submenus are now supported - grouping multiple annotation variants under a single group button.
• New annotation type “polygon” is now supported.

Task

Java update

All components were updated to Java 21.

Task

Improve metrics in Output Organizer documentation

The documentation regarding performance monitoring has been updated.
See: https://levigo.github.io/output-organizer-documentation/operations/monitoring

Task

Angular framework update

Angular updated to version 20.

Task

Support Drag & Drop of zip files with multiple OpenPortfolios

Support for drag and drop for multiple documents
see https://levigo.github.io/output-organizer-documentation/integration/import-integration/#drag-and-drop-for-multiple-documents

Story

Recommendations for document cleanup

The automated deletion article has been updated to explain the file deletion process.
See: https://levigo.github.io/output-organizer-documentation/operations/housekeeping/automated-deletion

Story

OAuth2 to access archive backend

If a user-authentication is configured in Helm, the users authentication will be used when requesting documents from external sources. This behaviour acts as a fallback to any pre configured document loader configurations using `organizer.loaders.*`
https://levigo.github.io/output-organizer-documentation/integration/import-integration/#authentication

Story

Undo of pages that were moved from one document to another does not work

Tree navigation after undo is prevented to avoid changes on an unloaded document.

Bug

Undo rotating page doesn't work when viewing another document

Undo now navigates to the correct document before restoring the previous state.

Bug

Problem with URL loader when file has no mediatype

Fixed a problem when loading documents and the source for the document URL does not include a mediatype in the response.

Bug

Page zoom is sometimes set to minimum on document load

Fixed a bug where sometimes the zoom level is set to the minimum value upon changing documents.

Bug

Moving document node into an empty document fails

It is now possible to move a document (or pages) into an empty document.

Bug

Export enabled after successful export despite state MarkedForDeletion

Export button is disabled after successful export if autoMarkForDeletion is set to true

Bug

Don't ask the user for confirmation to delete the document after moving it entirely

Reverted the behaviour to not prompt the user to decide to keep the document when moving it entirely. The prompt is kept when selecting individual pages.

Bug

Documents loading with embedded annotation fails with error

Fixed a problem where the document loading process was aborted when encountering a embedded PDF annotation.

Bug

CVE-2025-7783

fixed

Bug

CVE-2025-55163

Fixed by updating Spring Boot to Version 3.5.5.

Bug

CVE-2025-50106

Fixed.

Bug

CVE-2025-50059

Fixed.

Bug

CVE-2025-48989

Fixed by updating Spring Boot to Version 3.5.5.

Bug

CVE-2025-30749

Fixed.

Bug

Typo in documentation

A typo in the user manual was fixed

Bug

Improved session and tile security config

• JSESSION cookie name was renamed to FUSION_JSESSION to avoid conflicts with other applications.
• A new Helm toggle for troubleshooting is introduced to disable authentication on tile requests viewer.tileSecurityFilterEnabled: false

Task

OAuth configuration for jwk-set-uri

Added jwk-set-uri to OAuth configuration
See: https://levigo.github.io/output-organizer-documentation/integration/authentication/#setup

Task

Configuration for X-Frame Header and Frame ancestors

x-frame-options and frame-ancestors can now be configured in Helm.https://levigo.github.io/output-organizer-documentation/installation/deployment/#output-organizer-organizer

Task

Authorization for Spring Boot Admin

The access to /actuator/** endpoints is now secured via basicAuth. Set the secrets in values.yaml as follow:

organizer:
  secrets: 
    actuator:
      user: 
      password: 

Task

Improved Viewer API

Improved the Communication between Organizer and Viewer. This results in faster performance, better caching and less reloads.

Task

Revise sample configuration in OO doku

Sample configuration in documentation has been revised
See: https://levigo.github.io/output-organizer-documentation/installation/installation

Task

Add information regarding element UUIDs in documentation

Additional information regarding element and collection IDs has been added.
See:
https://levigo.github.io/output-organizer-documentation/integration/import-integration#element-and-collection-id-requirements

Task

Size limit configuration for the export document (Advanced)

The maximum allowed size of the export can be set as follows

organizer:
  flow:
    export:
      sizeLimit: 10 # in Megabytes (MB), -1 means no limit

If the file exceeds this size, the export will fail and a message dialog is shown.

Story

Insufficient client side document caching causes heavy load on the document backend

Clientside caching was improved. Cache stays valid for the entire session.

Bug

Search sometimes not working with console errors

Fixed.

Bug

Arrow navigation is broken

UX for navigating with arrow keys in Thumbnail-View and Main-View is improved

Bug

Add missing silent-refresh

Added the missing silent-refresh.html, which is necessary for seamless redirection for iFrame integration

Bug

Undo after move rotated pages into new document doesn't work

Fixed.

Bug

Undo "Move pages to new document" doesn't work

Fixed.

Bug

Search is broken after undo delete pages

Fixed.

Bug

Navigation from tree to viewer via tab is broken

Navigation between tree and viewer is possible via TAB shortcut

Bug

Moving a document into itself should be forbidden

Implemented a prevention measure that prevents a merge process of a document with itself.
New behavior is that if you try to drag a document node into its own thumbnail view nothing will happen.

Bug