API Control Plane 2024.3

New Features / Changes

  • Added organization hierarchies. Organizations can now have parent organizations. A parent organization has full access to any entity owned by any child organization. If access to an entity (e.g. an API) is granted explicitly to an organization, it is implicitly granted to all of its child organizations.

  • Added ability to edit Open Proxy Specification and OpenAPI documents in administration portal.

  • Added syntax highlighting and a search bar to code views for Open Proxy Specification and OpenAPI doucments in administration portal.

  • Fulltext search in developer portal now also works for word prefixes, instead of only full words. (e.g. typing in ‘cus' will now find apis that contain the string 'customer')

  • Improved subscription dialogs by adding the ability to go back to the previous step.

  • Improved API Product deletion dialog by removing options when they don’t apply.

  • Deleted APIs will now not be re-imported on API discovery, by default (similar to how it has already been the case with plans and applications). All buttons in administration portal that start an API discovery will now open a dialog, where the user can choose to re-import deleted APIs.

  • Add read-only views to organization that contain the environments to which it has publish/subscribe access.

  • Remove non-accessible environments from server list in try-it-out view in developer portal.

  • Icons for developer portal menu items can now be selected with a comfortable icon picker, instead of having to enter their names.

  • Admins, that are not global admins, can now see API deployments in an environment, but only for APIs owned by their organization.

  • Several changes to improve performance and robustness for large tenants (with thousands of entities).

  • Agent container can now be configured to act as agent for multiple environments, by establishing independent backend connections for each one.

  • Include license report files in all docker images. Frontend and backend license reports are also accessible at specific URLs.

  • Updated OWASP ruleset for API validation to version 2.0. NOTE: Rulenames have changed - if you have extended any OWASP rules in a custom rule set, you have to update their names.

Bug Fixes

  • Fixed a bug where filtering API Products by tag would not return results beyond the first 10 products.

  • Fixed a misleading warning message when deleting API products.

  • Fixed an issue where an unnecessary horizontal scrollbar could show up in the menu.

  • Fixed a bug where reloading the administration portal after adding a documentation page to an API would lead to errors when trying to add more pages.

  • Fixed a bug where agent would receive and attempt to execute commands (e.g. API deployment) multiple times.

  • Fixed a bug where setting plan limits to unlimited could actually set them to 0.

  • Fixed a bug where filtering tables for certain special characters (like '#') would not work.

  • Fixed a bug where the owner field in API Product settings view would not show the actual owner.

  • Fixed a bug where the organization field in developer portal settings would be empty.

  • Fixed a bug where deleted organizations might still show up when managing organizations with publish/subscribe access for an environment.

  • Added maximum height and optional scrollbar to info text boxes.

  • Improve the way governance dashboard looks for small resolutions.

  • Fixed several minor visual glitches.