Fixed

• Multiple HTTP Headers coming from a proxied response are now correctly aggreagated using a , instead of a space. #1489
• Improved the returned path for Problem JSON payloads #1530
• Prism will now consider the first response in the document in case of the absence of a 2XX response, instead of requiring at least a successful response. #1531

Changed

• Prism will now validate that the requested code (either through prefer code header or __code query param) is a number. #1542

Changed

• When running in proxy mode and an upstream server responds with 501, Prism will now "remock" the request and provide a meaningful response. This is a fancy way to say "if the upstream server has not yet implemented an operation, it will mock" #1426

Fixed

• Fixed a type issue in the HTTP Client that would let you pass incorrect parameters #1391

Fixed

• Prism will now refuse to start in case it will detect circular references. #1270

Changed

• Prism is now able to take in consideration all the responses defined for a request (typical in Postman Collection) and respond in a more appropriate way #1310

• BREAKING: The getHttpOperationsFromSpec has been moved from the HTTP Package to the CLI package. If you're using Prism programmatically, this might require some code changes on your side. getHttpOperationsFromResource has been removed. #1009, #1192
• BREAKING: The createClientFromOperations is now exported as export function instead of exporting an object. If you're using Prism programmatically, this might require some code changes on your side #1009
• BREAKING: Prism does NOT support Node 8 and 10 anymore; the miminal runtime is now 12
• A significant number of dependencies has been upgraded

Fixed

• Prism's Proxy feature will stop proactively requesting Compressed responses, following what is really in the OAS document #1309,#1319

Changed

• Prism is now stop to claim error for paths declared in the document that are not starting with a / #1340

Fixed

• Prism is not returning an error anymore when trying to construct a schema for HTTP headers and query string with mixed cases property names #1268

Fixed

• Since the media type parameters are not standardised (apart from the quality one), the negotiator will discard them during the matching process or simply treat them as strings/numbers without trying to guess anything more #1159
• Prism is now handling correctly hypens on both Path parameters and Query Parameters #1189, #1992

Fixed

• The mock diagram has been updated to include the security validations #1141
• Prism will now correctly refuse invalid requests even when used with the proxy command with the --errors flag #1101
• Autogenerated security validation errors now have the detail field filled with an informative message #1101
• Correctly catch some exceptions and propagate them to the CLI #1107

Fixed

• All the dependencies used by the various Prism packages have been explicitily declared avoiding some resolutions problems in case you are using Prism programmatically #1072
• Prism's current options aren't overriden internally anymore because of the Prefer header set #1074

Fixed

• Prism will not correctly consider that HTTP Security Schemes are case insensitive #1044

Fixed

• Prism is now able to correctly differentiate between a preflight request and a regular OPTIONS request #1031
• Fixed a condition where Prism would ignore CLI flags in case the nor Prefer or Query String preferences were passed #1034
• Created a specific error when a 200-299 response cannot be found for a successful request #1035

Added

• Prism now supports sending its configuration parameters through the Prefer header #984
• Experimental Postman Collection support #985

Fixed

• Correctly evaluate the ServerMatch property so that Prism will prefer concrete matches over templated ones #983
• HTTP Client now correctly returns empty bodies #993

Fixed

• Correctly discriminate methods in the router when server is not defined #969

Fixed

• Correctly set access-control-expose-headers headers for preflight and regular responses when CORS is enabled #958
• Prism public HTTP Client fixes and docs improvements #959

Fixed

• Correctly set vary and access-control-request-headers headers for preflight and regular responses when CORS is enabled

Changed

• Replaced Fastify HTTP server with its tinier counterpart: Micri #927

Fixed

• Prism's proxy will now strip all the Hop By Hop headers #921
• Prism is now normalising the media types so that when looking for compatible contents charsets and other parameters are not taken in consideration #944
• Prism's external HTTP Client is now correctly constructing the internal log object #952

Fixed

• Prism will not coerce JSON Payloads anymore during the schema validation #905

Fixed

• Correctly handle the possibility of a body/headers generation failure #875
• Input validation errors should not trigger a 500 status code when the --errors flag is set to true #892