What's changed

• Fix security issue that allowed a user to escalate to admin status. (Kudos to j3ssie).
• Fix XSS vulnerabity on alerts and notifications. (Kudos to j3ssie).
• Fix issues #555, #562. Initial registration allows multiple admin users to be created
• Implemented missing headers, snis, sources, destingations and path_handling fields on routes.
• Implemented missing client_certificate field on services.
• Added the ability to seed initial user and node data via configmaps and mounts PR: #522
• Added Basic Auth credentials support on Connections PR: #393
• Implemented ACME plugin configuration
• Updated project dependencies
• Fix some typos PRs: #551, #546

• Fixed NO_AUTH onboarding problems related to #474 when using a database.

• Fixed NO_AUTH onboarding problems related to #474.
• Minor improvements.

• Fix issue #473 concerning password length validation on first user registration

• Added support for TAGS in all major Kong Entities (Starting from Kong 1.1.0-rc1).
• Konga can now be used without authentication. In order to do that, simply set the env var NO_AUTH=true.
• You can now seed default Users and Kong Connections on first install. Check out the docs.
• The new env var BASE_URL, allows you to run Konga behind a reverse proxy on a relative path. For example, if you configure your proxy to route requests to example.com/konga you will need to set BASE_URL=/konga/
• Fix compatibility with new response-ratelimiting plugin schema. Ref issue #363.
• Add ENV HOST support for sails host to bind host by IP address. Ref pull req #451. Big ups to narate!
• Updated Dockerfile node.js version to 10.16
• Various minor fixes and improvements

Starting from version 0.14.0, Konga won't be compatible with Kong versions prior to 1.x due to the breaking changes on Kong's API and plugin schemas.

• [Compatibility] Kong 1.x compatibility.
• [Deprecation] APIs and related implementations are deprecated.
• [Fix] Missing fields are included on the upstream form.
• [Fix] The bundled Kong plugins are no longer needed in order features like Accessible Consumer Routes and Snapshots to work properly.
• [Enhancement] You can now set up alert triggers and dispatch notifications when upstream targets are not healthy.

What's new

• Better onboarding experience on first install.
• User accounts are not auto-generated by default. You need to manually register the admin account on first run.
• The default Kong connection (http://kong:8001) is not auto-generated on first install.
• Login and Sign up pages got a clean redesign.
• Fix minor issues

• [Fix] Solved some routing issues when running Konga behind a reverse proxy at a sub-path. #278
• [Fix] Fix Glitch that prevented editing services or routes on first login. #281
• Other minor issues

Changelog

• [Fix] Fix wrong require path on db prepare.
• Other minor issues

Changelog

• [Deprecation] Deprecated consumer imports. This feature was not adopted and provided unnecessary complexity to maintenance as well as increased the overall project's size.
• [Fix] Fixed the trailing slash issue. Konga is now able to communicate with Kong even if a trailing slash exists in the connection url.
• Cleaned up unused dependencies.
• When installing Konga from source, the confing/local.js file is deprecated in favor of a .env file. Check the README.md for details.