tyk

Tyk version 1.2 is a stability an extensibility release, with key structural changes in how the session managers and identity providers behave. They have been
completely refactored into interfaces and can now be extended programatically. New features such as IP white listing and an event subsystem with web hooks have also been
added alongside some bug-fixes. this version makes a breaking change to the REST API on some requests and will not work with v0.7 of the dashboard, however a 1.7.1
compatabiulity release has been issued to ensure ongoing compatibility.

The full change log:

• Refactored AuthManager and SessionManagers so that any identity provider / Session data handler can be used
• Added SessionExpiry to AdpiDefinition, keys can expire on a date, and can be dropped form a session store set by this value, this increases security as re-auth can be forced with this
• Enables switching out storage managers per identity or session provider, so now it is fully mix and match
• API Requests require an api_id form value (either param or body) as keys are now stored (federated) on a per API basis and can live in multiple stores. THIS IS A BREAKING CHANGE
• Will not work with Dashboard 0.7
• Added IP white listing middleware, completely self-contained, very rudimentary, only explicit IP's allowed (doesn't handle subnets etc.), hould work with IPv4 and IPv6
• Added an Event subsystem and framework for extending and creating custom event handlers (e.g. for webhooks)
• Moved path checking to be before key checks in both Open and Closed API definitions (adopted from hotfix v1.1.1)
• Webhook event handler now exists, works like any other event handler, can be templated specifically for any output format and tailored to any method type.
• Batch request support

Changes v1.1.1

• Path allowances (Ignored / Blacklist / Whitelist) on a version will now happen before an auth check, meaning ignored paths will allow anyone through
• Setting purge_delay to 0 will cause the service to not ever purge the redis DB of analytics data - handy for tyk clusters that only require one node to do the purging

Small version bump to incorporate latest round of bugfixes and dependency updates, main breaking change is that the Tyk API now expects american spelling of "authorize". So the tyk header now must be x-tyk-authorization, all documentation has been updated.

This version is compatible with Tyk Dashboard v0.7 beta

Updated Release: Now includes tarballs for Tyk Dashboard 0.7

Initial stable release of Tyk.