Add Referrer-Policy header

Referrer: same-origin header was added.

Task

Update SQLServerDialect in documentation

org.hibernate.dialect.SQLServer2012Dialect has been deprecated; use org.hibernate.dialect.SQLServerDialect instead

Task

Deprecate old metadata scheme

The “type” attribute in collection elements is deprecated from now on and will be removed with the next major release.Use “element-type” enclosed in an "output-organizer" section instead, which was introduced with Output Organizer version 2.0. On how to create collections, see documentation at https://levigo.github.io/output-organizer-documentation/integration/import-integration/#create-collection.After adding an “import” element and saving the collection, an element of type “output” ("element-type": "output") will be created automatically by the organizer backend - so there’s no need to specify output elements any more when creating collections via REST.Old scheme:

{
    "elements": [
        {
            "metadata": {
                "type": "output",
                "source": "fusion-oo-importer",
                "filename": "testdoc.pdf"
                }
            }
        }
        {
            "metadata": {
                "type": "import",
                "filename": "testdoc.pdf"
                }
            }
        }
    ]
}

New scheme:

{
    "elements": [
        {
            "metadata": {
                "output-organizer": {
                    "element-type": "import",
                    "filename": "testdoc.pdf"
                }
            }
        }
    ]
}

Story

Missing parameter in renaming deployment documentation

Added to https://levigo.github.io/output-organizer-documentation/installation/additional-configuration/ .

Bug

Disable context menu for inactive collections

Disable context-menu for closed/Marked for deletion collections.

Bug

MySQL JDBC URL in documentation is wrong

Added necessary parameter to MySQL JDBC URL in documentation.

Bug

Allowed origins are empty by default

Default value for allowed origins is set to *

Bug

Prevent inline script execution

Policy script-src 'self' 'unsafe-inline' was removed to inhibit execution of JavaScript code that may have been injected.

Bug

Creating a collection on certain DBs results in SQL error (foreign key constraint fails)

This problem was introduced with the foreign key on table “collection_version_history” was added. Additional measures were taken that the integrity of this key is kept when creating collections.

Bug

Can't import pages with annotations from jadice viewers

Dragged pages from Jadice Viewers can now contain annotations. The annotations will be ignored when importing.

Bug

Lock not released after collection deletion job

Lock will be released at the end of the job.

Bug

strict separation for create and update collection Endpoints

Restrict collection update via POST method, as PUT is intended for updating

Bug

Usage of existing secrets is missing in documentation

Added section in the deployment documentation

Bug

Unify loading indicators

All instances of loading spinners are now using the same graphic and animation.

Bug

Support S3 STS (security token service)

Added Helm configuration for STS for AWS S3
See: https://levigo.github.io/output-organizer-documentation/installation/scaling/#configuration-values

Story

Configurable save feature

Added Helm toggle organizer.config.showSaveButton for showing or hiding a save button in Output Organizer Advanced. See https://levigo.github.io/output-organizer-documentation/installation/deployment/#output-organizer-organizer

Story

Foreign Key missing in collection_version_history

Foreign key between “collections” and “collection_version_history” was added.

Bug

CVE-2024-57699

Fixed

Bug

Documentation improvement regarding sticky sessions

Added information about cookie based sticky session configurations.
https://levigo.github.io/output-organizer-documentation/installation/installation#ingress
https://levigo.github.io/dossier-organizer-documentation/installation/installation#ingress

Bug

Typo in installation documentation regarding PostgreSQL Dialect

update dialect name of postgres in documentation

Bug

Support PVC as mount volume for container storage

Added configuration option to use an existing persistent volume claim as storage instead of the local container volume.
Helm values to configure:

organizer.storage.pvc.name: "my-pvc"

Story

Automatic deletion is executed on all pods when scaled up

Introduced a locking mechanism to ensure the deletion is only executed on one pod.

Bug

Dialog title also affected when changing export button label

A new translation key export.modal.title was added for the export modal dialog.

Bug

CVE-2024-47554

Fixed.

Bug

MediaType application/vnd.ibm.modcap not supported

Mediatype application/vnd.ibm.modcap is now supported as mediatype and recognized when performing Drag & Drop from jadice viewers.Mediatype configuration for Output Organizer Advanced see https://levigo.github.io/output-organizer-documentation/installation/deployment/

Bug

Flyway image not configurable

Flyway image is now configurable. A custom registry or image name and tag can be set. In case a global.imageRegistry: has been configured, also the initContainer images will be pulled from there. If this is not desired, it is possible to override the initContainer registry entries, see https://levigo.github.io/output-organizer-documentation/installation/deployment/#prerequisites
Helm values to configure:

organizer;
  initContainer:
    repository: flyway/flyway
    registry: registry.jadice.com
    pullPolicy: IfNotPresent
    tag: 11.3.0

Bug

Certificate Problem in toPDF worker when accessing Fusion

CA-certificates can now be configured for the To-PDF worker.
This can be configured using:

worker-topdf:
  truststore:
    enabled: true
    existingConfigMap: 
    data: ""
    fileName: "cacerts"

If you already have a truststore configmap form the Organizer deployment you can simply reuse it by entering its name with existingConfigMap. The data}}field is used to dynamically create a new configmap. Please use either {{existingConfigMap or data and not both.

Bug

Startup error with enabled truststore

Resolved an error when renaming the deployment and enabling the truststore at the same time.

Bug

Content Security Policies

Implemented content security policies to prevent cross site scripting attacks.

Task

Alllow disabling Mimetype check and support empty mediatypes

Allow adding documents to a collection without providing their mimetype by setting the Helm configuration as follows (only supported in Output Organizer Advanced):

organizer.config.supportedMimeTypes: ['*/*']

See Documentation.Be careful with this setting, since there’s no check any more for “unwanted” file formats. In consequence, if documents in unsupported formats are added, they may be displayed incorrectly.

Task

Update to Spring Boot version 3.4.1

Updated to Spring Boot 3.4.1. The upgrade fixes the following CVEs:

• CVE-2024-38819
• CVE-2024-50379
• CVE-2024-56337

Task

Customized translation texts

Predefined texts (like button labels…) can be overriden by providing customized translation files for en and de. For more details see Customizing and Deployment.

Story

Customizable title banner

The visibility of the complete header, its logo or title, can be configured in the customized styling as follows:

  /* hide the header completely */
  --nfwc-header-display: none;
  /* hide only the logo and the title in the header */
  --nfwc-header-branding-display: none;
  /* hide only the title in the header */
  --nfwc-header-title-display: none;

More about providing customized stylesheets see Customizing.

Story

Authentication via OAuth 2.0 in Output Organizer

Access to Output Organizer can now be secured by using an OAuth 2.0 provider. See Authentication.

Story

Toggle to remove import via UI and D&D

Added Helm configuration to disable local import via button and via Drag & Drop from local filesystem or another jadice viewer using organizer.config.allowUserDocumentUpload: boolean
See Advanced Import Configuration.

Story

Output Organizer: Delete collections & documents automatically

Collections with "Marked for deletion" state can be automatically deleted after a certain period of time, as well as the documents attached to collection. Configuration takes place via Helm, see DocumentationTo mark collections for deletion after export set autoMarkForDeletion: true

organizer:
  jobs:
    deletion:
      enabled: true
      cron: "0 0 0 * * ?"  # Default cron expression for nightly deletion at 12:00 AM
      gracePeriodInDays: 5
      autoMarkForDeletion: true
      transactionBatchSize: 500

Story

Problems with ProstgreSQL database

Fixed support for PostgreSQL DB.

Bug

toPDF worker fullNameOverride not working

New documentation about deployment renaming. See Renaming Deployments.

Bug

Preprocessing on `/elements` endpoint fails

Rest endpoint “/elements” now fully working for Output Organizer.

Bug

Page selection is ignored in D&D from jadice viewers to OO

Importing only selected pages when performing Drag & Drop from jadice viewer or jadice web viewer to Output Organizer instead of adding the whole document.

Bug

Anonymous requests without access rules are accepted without authentication

Fixed an issue where Http Requests below /api and /internal were not correctly filtered by Springs authorization filter.

Bug

Problems with preflight requests and credentials

Allowed origins and credentials can now be configured for cross-origin requests; see: Deployment.

Bug

CVE-2024-56337

Fixed in JWT Viewer.

Bug

CVE-2024-50379

Fixed in JWT Viewer.

Bug

Navigation with < and > buttons broken at start/end of documents

Navigating from the first/last page of a document to the previous/next page now takes you to the previous/next document.

Bug

Duplicate mediatype in collection & inconsistent evaluation

From now on, the mediatype of a content element is only specified at “specification.pageSequences.mediaType”. The duplicated entry at “metadata.output-organizer.mediaType” was removed from the collection definition.

Bug

S3 signing region can not be set via Helm

S3 signing server region can now be set with organizer.storage.s3.signingRegion in Helm.

Bug

Embedded Annotations in PDF are not visible

Fixed since Dossier Organizer 1.14.2 and Output Organizer 2.2.17 (18./19. December 2024).

Bug

Separate historic from current versions in DB

New database schema for improved performance.Important: This change does not impact the API in any way and all external services are unaffected.New collections will be saved in the new format.As of this version the old tables are deprecated and will be removed in the next major version.

Story

Variable truststore name instead of hard-coded "cacerts"

A new variable organizer.truststore.fileName has been introduced to configure the truststore file name.
See: Output Organizer Documentation Dossier Organizer Documentation

Story

Export without user interaction

It is possible to customize the document export process.See: Output Organizer Documentation

Story

DB Schema Updates via Flyway

Now using Flyway for DB schema migrations (except H2).

Story

Ausgefülltes PDF wird nicht angezeigt

Embedded annotations in PDFs are now displayed in JWT.

Bug

Broken main UI layout with collections using the legacy metadata format

Fixed a UI layout problem when opening collections with old metadata formats.

Bug

CVE-2024-21538

fixed

Bug

CVE-2024-38821

fixed

Bug

CVE-2024-21536

Fixed by updating to Angular 18.

Bug