Tyk v1.5 and Dashboard v0.9.3

• Added caching middleware

• Added optimisation settings for out-of-thread session updates and redis idle pool connections

• Added cache option to cache safe requests, means individual paths need not be defined, but all GET, OPTIONS and HEAD requests will be cached

• Added request transformation middleware, thus far only tested with JSON input. Add a golanfg template to the extended path config like so:

  "transform": [
      {
          "path": "/",
          "template_data": {
              "template_mode": "file",
              "template_source": "./templates/transform_test.tmpl"
          }
      }
  ]
  

• Added header transformation middleware, simple implementation, but will delte and add headers before request is outbound:

  "transform_headers": [
      {
          "delete_headers": ["Content-Type", "authorization"],
          "add_headers": {"x-tyk-test-inject": "new-value"},
          "path": "/post"
      }
  ]
  

• Clock skew for HMAC requests is now configurable

• Event handlers now also receive an encoded version of the inbound request as a base64-encoded string.

• License requirements removed

Tyk Version 1.4 and Tyk Dashboard v0.9.2

Changelog

• Added expiry TTL to tykcommon, data expiry headers will be added to all analytics records, set expire_analytics_after to 0 to have data live indefinetely (currently 100 years), set to anything above zero for data in MongoDB to be removed after x seconds. requirement: You must create an expiry TTL index on the tyk_analytics collection manually (http://docs.mongodb.org/manual/tutorial/expire-data/). If you do not wish mongo to manage data expiry at all, simply do not create the index.
• Added a JS Virtual Machine so dynamic JS middleware can be run PRE and POST middleware chain
• Added a global JS VM
• Added an eh_dynamic_handler event handler type that runs JS event handlers
• Added Session management API and HttpRequest API to event handler JSVM.
• Added JS samples
• Fixed a bug where requests that happened at identical times could influence the quota wrongly
• Modified default quota behaviour: On create or update, key quotas are reset. unless a new param ?suppress_reset=1 accompanies the REST request. This way a key can be updated and have the quote in Redis reset to Max, OR it can be edited without affecting the quota
• Rate limiter now uses new Redis based rate limiting pattern
• Added a ?reset_quota=1 parameter check to /tyk/orgs/key endpoint so that quotas can be reset for organisation-wide locks
• Organisations can now have quotas
• Keys and organisations can be made inactive without deleting

Tyk Dashboard 0.9.1

Tyk Dashboard 0.9.1 - Minor update, now supporting monthly licenses.

Tyk Version 1.3 and Tyk Dashboard v0.9

Key features in this version are API mocking support, Blueprint importing and several health-check and end-user quota updates. Error and debug output has also been cleaned up for clutter free logging.

Full change log:

• It is now possible to set IP's that shouldn't be tracked by analytics by setting the ignored_ips flag in the config file (e.g. for health checks)
• Many core middleware configs moved into tyk common, tyk common can now be cross-seeded into other apps if necessary and is go gettable.
• Added a healthcheck function, calling GET /tyk/health with an api_id param, and the X-Tyk-Authorization header will return upstream latency average, requests per second, throttles per second, quota violations per second and key failure events per second. Can be easily extended to add more data.
• Tyk now reports quote status in response headers (Issue #27)
• Calling /{api-id}/tyk/rate-limits with an authorised header will return the rate limit for the current user without affecting them. Fixes issue #27
• Extended path listing (issue #16) now enabled, legacy paths will still work. You can now create an extended path set which supports forced replies (for mocking) as well as limiting by method, so GET /widget/1234 will work and POST /windget/1234 will not.
• You can now import API Blueprint files (JSON format) as new version definitions for your API, this includes mocking out responses. Blueprints can be added to existing API's as new versions or generate independent API definitions.
  • Create a new definition from blueprint: ./tyk --import-blueprint=blueprint.json --create-api --org-id=<id> --upstream-target="http://widgets.com/api/"
  • Add a version to a definition: ./tyk --import-blueprint=blueprint.json --for-api=<api_id> --as-version="2.0"
  • Create a mock for either: use the --as-mock parameter.
• More tests, many many more tests

Tyk Version 1.2.1 and Tyk Dashboard v0.8

Tyk v1.2.1

• No major updates, some core changes in the binary to make portability easier, minor bugfixes

Tyk Dashboard 0.8

• IP Whitelisting support
• Multi-tenant compatibility
• Batch request support
• Webhook support added to interface
• Listen path override on existing APIs
• Minor UI tweaks, updates and improvements
• Import API from source definition function
• Fixed bug in demo where data from today would not display in the dashboard view
• Fully self-contained, overall package is trimmer

Upgrading

It is recommended to test the new version of Dashboard against your existing database installation to ensure that there re no schema conflicts. There shouldn't be any, Tyk Dashboard v0.8 supports the full API Definition schema of Tyk v1.0+ it is recommended to back up your database before updating.

Tyk Version 1.2 release and Tyk Dashboard 0.7.1 (beta) compatability release

Tyk version 1.2 is a stability an extensibility release, with key structural changes in how the session managers and identity providers behave. They have been
completely refactored into interfaces and can now be extended programatically. New features such as IP white listing and an event subsystem with web hooks have also been
added alongside some bug-fixes. this version makes a breaking change to the REST API on some requests and will not work with v0.7 of the dashboard, however a 1.7.1
compatabiulity release has been issued to ensure ongoing compatibility.

The full change log:

• Refactored AuthManager and SessionManagers so that any identity provider / Session data handler can be used
• Added SessionExpiry to AdpiDefinition, keys can expire on a date, and can be dropped form a session store set by this value, this increases security as re-auth can be forced with this
• Enables switching out storage managers per identity or session provider, so now it is fully mix and match
• API Requests require an api_id form value (either param or body) as keys are now stored (federated) on a per API basis and can live in multiple stores. THIS IS A BREAKING CHANGE
• Will not work with Dashboard 0.7
• Added IP white listing middleware, completely self-contained, very rudimentary, only explicit IP's allowed (doesn't handle subnets etc.), hould work with IPv4 and IPv6
• Added an Event subsystem and framework for extending and creating custom event handlers (e.g. for webhooks)
• Moved path checking to be before key checks in both Open and Closed API definitions (adopted from hotfix v1.1.1)
• Webhook event handler now exists, works like any other event handler, can be templated specifically for any output format and tailored to any method type.
• Batch request support

Version 1.1.1 Minor bugfixes

Changes v1.1.1

• Path allowances (Ignored / Blacklist / Whitelist) on a version will now happen before an auth check, meaning ignored paths will allow anyone through
• Setting purge_delay to 0 will cause the service to not ever purge the redis DB of analytics data - handy for tyk clusters that only require one node to do the purging

Tyk API Gateway v.1.1

Small version bump to incorporate latest round of bugfixes and dependency updates, main breaking change is that the Tyk API now expects american spelling of "authorize". So the tyk header now must be x-tyk-authorization, all documentation has been updated.

This version is compatible with Tyk Dashboard v0.7 beta

Updated Release: Now includes tarballs for Tyk Dashboard 0.7

Tyk API Gateway v.1.0

Initial stable release of Tyk.