OO Basic with SSO support and restriction to author

Output Organizer has a new default access policies that will be activated depending on your authentication configuration.
When a authentication is configured in Helm all API access is automatically restricted to authenticated users.
In addition you can configure the Halm Value organizer.config.ownPolicy: true to prevent access for users to collection they have not created themselves.

Task

Principal variable for access rules

Added a new access rule variable under the collection resource to create conditions that can verify if requesting user is the owner / creator of this collection.

{
  "equals" : {
    "collection.principal": "own"
  }
}

see https://levigo.github.io/output-organizer-documentation/integration/access-policies

Task

Multithreaded document loading

Improved document loading times with multiple page sequences by loading them in parallel instead of sequentially.Configurable in Helm with:

viewer:
  fusion:
    documentLoader:
      threadPoolSize: 16
      timeoutInSeconds: 600

Task

Extend annotation profile capabilities

• Annotation submenus are now supported - grouping multiple annotation variants under a single group button.
• New annotation type “polygon” is now supported.

Task

Java update

All components were updated to Java 21.

Task

Improve metrics in Output Organizer documentation

The documentation regarding performance monitoring has been updated.
See: https://levigo.github.io/output-organizer-documentation/operations/monitoring

Task

Angular framework update

Angular updated to version 20.

Task

Support Drag & Drop of zip files with multiple OpenPortfolios

Support for drag and drop for multiple documents
see https://levigo.github.io/output-organizer-documentation/integration/import-integration/#drag-and-drop-for-multiple-documents

Story

Recommendations for document cleanup

The automated deletion article has been updated to explain the file deletion process.
See: https://levigo.github.io/output-organizer-documentation/operations/housekeeping/automated-deletion

Story

OAuth2 to access archive backend

If a user-authentication is configured in Helm, the users authentication will be used when requesting documents from external sources. This behaviour acts as a fallback to any pre configured document loader configurations using `organizer.loaders.*`
https://levigo.github.io/output-organizer-documentation/integration/import-integration/#authentication

Story

Undo of pages that were moved from one document to another does not work

Tree navigation after undo is prevented to avoid changes on an unloaded document.

Bug

Undo rotating page doesn't work when viewing another document

Undo now navigates to the correct document before restoring the previous state.

Bug

Problem with URL loader when file has no mediatype

Fixed a problem when loading documents and the source for the document URL does not include a mediatype in the response.

Bug

Page zoom is sometimes set to minimum on document load

Fixed a bug where sometimes the zoom level is set to the minimum value upon changing documents.

Bug

Moving document node into an empty document fails

It is now possible to move a document (or pages) into an empty document.

Bug

Export enabled after successful export despite state MarkedForDeletion

Export button is disabled after successful export if autoMarkForDeletion is set to true

Bug

Don't ask the user for confirmation to delete the document after moving it entirely

Reverted the behaviour to not prompt the user to decide to keep the document when moving it entirely. The prompt is kept when selecting individual pages.

Bug

Documents loading with embedded annotation fails with error

Fixed a problem where the document loading process was aborted when encountering a embedded PDF annotation.

Bug

CVE-2025-7783

fixed

Bug

CVE-2025-55163

Fixed by updating Spring Boot to Version 3.5.5.

Bug

CVE-2025-50106

Fixed.

Bug

CVE-2025-50059

Fixed.

Bug

CVE-2025-48989

Fixed by updating Spring Boot to Version 3.5.5.

Bug

CVE-2025-30749

Fixed.

Bug

Typo in documentation

A typo in the user manual was fixed

Bug

Improved session and tile security config

• JSESSION cookie name was renamed to FUSION_JSESSION to avoid conflicts with other applications.
• A new Helm toggle for troubleshooting is introduced to disable authentication on tile requests viewer.tileSecurityFilterEnabled: false

Task

OAuth configuration for jwk-set-uri

Added jwk-set-uri to OAuth configuration
See: https://levigo.github.io/output-organizer-documentation/integration/authentication/#setup

Task

Configuration for X-Frame Header and Frame ancestors

x-frame-options and frame-ancestors can now be configured in Helm.https://levigo.github.io/output-organizer-documentation/installation/deployment/#output-organizer-organizer

Task

Authorization for Spring Boot Admin

The access to /actuator/** endpoints is now secured via basicAuth. Set the secrets in values.yaml as follow:

organizer:
  secrets: 
    actuator:
      user: 
      password: 

Task

Improved Viewer API

Improved the Communication between Organizer and Viewer. This results in faster performance, better caching and less reloads.

Task

Revise sample configuration in OO doku

Sample configuration in documentation has been revised
See: https://levigo.github.io/output-organizer-documentation/installation/installation

Task

Add information regarding element UUIDs in documentation

Additional information regarding element and collection IDs has been added.
See:
https://levigo.github.io/output-organizer-documentation/integration/import-integration#element-and-collection-id-requirements

Task

Size limit configuration for the export document (Advanced)

The maximum allowed size of the export can be set as follows

organizer:
  flow:
    export:
      sizeLimit: 10 # in Megabytes (MB), -1 means no limit

If the file exceeds this size, the export will fail and a message dialog is shown.

Story

Insufficient client side document caching causes heavy load on the document backend

Clientside caching was improved. Cache stays valid for the entire session.

Bug

Search sometimes not working with console errors

Fixed.

Bug

Arrow navigation is broken

UX for navigating with arrow keys in Thumbnail-View and Main-View is improved

Bug

Add missing silent-refresh

Added the missing silent-refresh.html, which is necessary for seamless redirection for iFrame integration

Bug

Undo after move rotated pages into new document doesn't work

Fixed.

Bug

Undo "Move pages to new document" doesn't work

Fixed.

Bug

Search is broken after undo delete pages

Fixed.

Bug

Navigation from tree to viewer via tab is broken

Navigation between tree and viewer is possible via TAB shortcut

Bug

Moving a document into itself should be forbidden

Implemented a prevention measure that prevents a merge process of a document with itself.
New behavior is that if you try to drag a document node into its own thumbnail view nothing will happen.

Bug

Use UUID V7 in OO frontend

The id generation for the collection is handled by the backend. Also, instead of uuidv4, the Output Organizer now uses uuidv7

Task

Documentation update regarding Output Organizer variants

Information about supported variants and features of Ouptu Organizer has been updated.
See:
https://levigo.github.io/output-organizer-documentation/gettingStarted/user-manual
https://levigo.github.io/output-organizer-documentation/installation/deployment
https://levigo.github.io/output-organizer-documentation/installation/additional-configuration
https://levigo.github.io/output-organizer-documentation/integration/import-integration
https://levigo.github.io/output-organizer-documentation/integration/intents
https://levigo.github.io/output-organizer-documentation/customizing/customizing-general

Task

CVE-2025-48988

fixed

Task

Version-config ConfigMap name missmatch

The config map name generation was improved to always match expected name in the deployment.

Bug

Disable export button after export

If the collection is marked as MarkedForDeletion , after successful export, the export button will be disabled.

Bug

Update Base Images due to several CVEs

Base image is updated to newer version

Task

Spring Boot Admin Support

Added the possibility to activate spring boot admin for Output Organizer
See: https://levigo.github.io/output-organizer-documentation/installation/deployment/#output-organizer-organizer

Task

OO documentation improvement (Scaling, Stickiness)

Documentation regarding session affinity and databases supported by Output Organizer has been updated.

Task

Make timezone configurable

Timezone for fusion containers are configurable
See:
https://levigo.github.io/output-organizer-documentation/installation/deployment/#global-parameters

Task

Login in pop-up window

Use pop-up window for OAuth login when using the application in an i-frame.

Task

Documentation for flow truststore configuration

Was added information about truststore configuration for Flow Worker and Organizer.
See: https://levigo.github.io/output-organizer-documentation/installation/additional-configuration#truststore-configuration-for-flow-worker

Task

Annotation color and settings overhaul

Annotation profile is now standardized, in terms of color options and border width

Task

Save user UI preferences

User preferences such as language selection, tree panel width, thumbnail view width, thumbnail zoom level, side toolbar visibility and width (bookmarks toolbar), and page layout are now persistently stored in the browser local storage and automatically restored across sessions, ensuring a consistent experience even after page reloads.
To turn back to default settings, clear the local storage of the browser of the application

Story

Possible fill color in stamp annotation is wrong

Instead of only supporting black/white, more colors have been added to style Stamp annotations.

Bug

Document still can be edited after export

If autoMarkForDeletion is set to true, after export documents become uneditable

Bug

Copy text in viewer sometimes doesn't work

Fixed an issue that prevented text from being copied to the clipboard.

Bug

Odd behavior of line width settings for annotations

Improved line width selection of several annotations.

Bug

Pages get lost after move into new document and undo

Fixed a bug where pages got lost after undo moving into new document via context menu “Seiten ab/bis hier verschieben”

Bug

Use external URL for export result

When organizer.useExternalFlow is false, the export result now references the Organizer’s external link instead of the internal container URL

Bug