Mercurial > hg > orthanc-authorization
annotate NEWS @ 126:8b123c2adb69
now overriding /tools/find and /tools/labels only if the auth-service is providing user profile
author | Alain Mazy <am@osimis.io> |
---|---|
date | Fri, 20 Oct 2023 15:29:14 +0200 |
parents | db60c361e395 |
children | 8591a0c1fa2a |
rev | line source |
---|---|
126
8b123c2adb69
now overriding /tools/find and /tools/labels only if the auth-service is providing user profile
Alain Mazy <am@osimis.io>
parents:
122
diff
changeset
|
1 Pending changes in the mainline |
8b123c2adb69
now overriding /tools/find and /tools/labels only if the auth-service is providing user profile
Alain Mazy <am@osimis.io>
parents:
122
diff
changeset
|
2 =============================== |
8b123c2adb69
now overriding /tools/find and /tools/labels only if the auth-service is providing user profile
Alain Mazy <am@osimis.io>
parents:
122
diff
changeset
|
3 |
8b123c2adb69
now overriding /tools/find and /tools/labels only if the auth-service is providing user profile
Alain Mazy <am@osimis.io>
parents:
122
diff
changeset
|
4 * now overriding /tools/find and /tools/labels only if the auth-service |
8b123c2adb69
now overriding /tools/find and /tools/labels only if the auth-service is providing user profile
Alain Mazy <am@osimis.io>
parents:
122
diff
changeset
|
5 is providing user profiles ("WebServiceUserProfileUrl" has been configured). |
8b123c2adb69
now overriding /tools/find and /tools/labels only if the auth-service is providing user profile
Alain Mazy <am@osimis.io>
parents:
122
diff
changeset
|
6 |
122 | 7 23-09-18 - v 0.6.0 |
8 ================== | |
121 | 9 |
10 * Now handling permissions based on labels from a user profile: | |
11 - filter the results from tools/find to grant access only to the | |
12 authorized_labels from the user profile | |
13 - grants access to resources (studies) based on their labels and | |
14 the authorized_labels from the user profile. | |
15 - check the https://github.com/orthanc-team/orthanc-auth-service | |
16 sample project for more details | |
17 * Added integration tests in the https://hg.orthanc-server.com/orthanc-tests/ | |
18 repository. | |
19 | |
104 | 20 2023-06-21 - v 0.5.3 |
21 ==================== | |
22 | |
102
18d3f7bd18db
new standard configuration 'ohif'
Alain Mazy <am@osimis.io>
parents:
100
diff
changeset
|
23 * New standard configuration "ohif" |
100
760fd9ad7007
new default permissions for labels
Alain Mazy <am@osimis.io>
parents:
98
diff
changeset
|
24 * new default permissions for labels |
98
c82f0c7d2c6a
Fix parsing of dicom-web/studies/../series/../instances/../bulk/.. routes
Alain Mazy <am@osimis.io>
parents:
96
diff
changeset
|
25 * Fix parsing of dicom-web/studies/../series/../instances/../bulk/.. routes |
c82f0c7d2c6a
Fix parsing of dicom-web/studies/../series/../instances/../bulk/.. routes
Alain Mazy <am@osimis.io>
parents:
96
diff
changeset
|
26 |
96 | 27 2023-05-15 - v 0.5.2 |
28 ==================== | |
95
dff72e397f90
fix standard configuration 'orthanc-explorer-2' for TokenGetArguments
Alain Mazy <am@osimis.io>
parents:
93
diff
changeset
|
29 |
dff72e397f90
fix standard configuration 'orthanc-explorer-2' for TokenGetArguments
Alain Mazy <am@osimis.io>
parents:
93
diff
changeset
|
30 * Fix standard configuration "orthanc-explorer-2": consider the "token" |
dff72e397f90
fix standard configuration 'orthanc-explorer-2' for TokenGetArguments
Alain Mazy <am@osimis.io>
parents:
93
diff
changeset
|
31 Get arguments |
dff72e397f90
fix standard configuration 'orthanc-explorer-2' for TokenGetArguments
Alain Mazy <am@osimis.io>
parents:
93
diff
changeset
|
32 |
93 | 33 2023-04-15 - v 0.5.1 |
34 ==================== | |
89 | 35 |
90
bb4c32b25c5d
Added a default permission for /changes
Alain Mazy <am@osimis.io>
parents:
89
diff
changeset
|
36 * Added a default permission for /toolk/bulk-delete |
bb4c32b25c5d
Added a default permission for /changes
Alain Mazy <am@osimis.io>
parents:
89
diff
changeset
|
37 * Added a default permission for /changes |
91
50b18e7a254d
Added a default permission for /auth/tokens/ohif-viewer-publication
Alain Mazy <am@osimis.io>
parents:
90
diff
changeset
|
38 * Added a default permission for /auth/tokens/ohif-viewer-publication |
92
8dc22bc353de
QIDO-RS now supports named tags in get arguments
Alain Mazy <am@osimis.io>
parents:
91
diff
changeset
|
39 * QIDO-RS now supports named tags in get arguments |
89 | 40 |
41 | |
84 | 42 2023-03-17 - v 0.5.0 |
43 ==================== | |
44 | |
72
e381ba725669
new PUT auth/tokens/{token-type} API route + updated interface with WebService
Alain Mazy <am@osimis.io>
parents:
71
diff
changeset
|
45 * BREAKING-CHANGE: the API between the authorization plugin and the |
e381ba725669
new PUT auth/tokens/{token-type} API route + updated interface with WebService
Alain Mazy <am@osimis.io>
parents:
71
diff
changeset
|
46 WebService has slightly changed. Check the samples in the README (TODO). |
e381ba725669
new PUT auth/tokens/{token-type} API route + updated interface with WebService
Alain Mazy <am@osimis.io>
parents:
71
diff
changeset
|
47 - "identifier" has been renamed into "server-id" |
71 | 48 * new user-permission based authorization model. This is enabled if you |
49 define the new "WebServiceUserProfileUrl" configuration. | |
72
e381ba725669
new PUT auth/tokens/{token-type} API route + updated interface with WebService
Alain Mazy <am@osimis.io>
parents:
71
diff
changeset
|
50 * new "orthanc-explorer-2" StandardConfigurations |
e381ba725669
new PUT auth/tokens/{token-type} API route + updated interface with WebService
Alain Mazy <am@osimis.io>
parents:
71
diff
changeset
|
51 * new GET "auth/user/profile" Rest API route to retrieve user permissions |
e381ba725669
new PUT auth/tokens/{token-type} API route + updated interface with WebService
Alain Mazy <am@osimis.io>
parents:
71
diff
changeset
|
52 * new PUT "auth/tokens/{token-type}" Rest API route to create tokens |
74 | 53 * new POST "auth/tokens/decode" Rest API route to decode tokens |
84 | 54 * these 3 new routes required an updated auth-web-service. |
77
94a9484d7f8f
fix security issues allowing to browse remote dicom servers + introduced UnitTests
Alain Mazy <am@osimis.io>
parents:
74
diff
changeset
|
55 * SECURITY FIX: in prior versions, it was possible to browse remote |
94a9484d7f8f
fix security issues allowing to browse remote dicom servers + introduced UnitTests
Alain Mazy <am@osimis.io>
parents:
74
diff
changeset
|
56 dicom-web servers without being authenticated. (The API routes |
94a9484d7f8f
fix security issues allowing to browse remote dicom servers + introduced UnitTests
Alain Mazy <am@osimis.io>
parents:
74
diff
changeset
|
57 /dicom-web/servers/.../studies were unprotected). The local |
94a9484d7f8f
fix security issues allowing to browse remote dicom servers + introduced UnitTests
Alain Mazy <am@osimis.io>
parents:
74
diff
changeset
|
58 dicom-web server was correctly protected. |
72
e381ba725669
new PUT auth/tokens/{token-type} API route + updated interface with WebService
Alain Mazy <am@osimis.io>
parents:
71
diff
changeset
|
59 |
65 | 60 |
63 | 61 2022-11-16 - v 0.4.1 |
62
222f0652025f
fix get argument values that were transformed to lowercase
Alain Mazy <am@osimis.io>
parents:
60
diff
changeset
|
62 ==================== |
222f0652025f
fix get argument values that were transformed to lowercase
Alain Mazy <am@osimis.io>
parents:
60
diff
changeset
|
63 |
222f0652025f
fix get argument values that were transformed to lowercase
Alain Mazy <am@osimis.io>
parents:
60
diff
changeset
|
64 * fix: get argument values were transformed to lower case |
222f0652025f
fix get argument values that were transformed to lowercase
Alain Mazy <am@osimis.io>
parents:
60
diff
changeset
|
65 * the "osimis-web-viewer" StandardConfigurations now take into account |
222f0652025f
fix get argument values that were transformed to lowercase
Alain Mazy <am@osimis.io>
parents:
60
diff
changeset
|
66 the token get argument used when downloading a study from the UI |
222f0652025f
fix get argument values that were transformed to lowercase
Alain Mazy <am@osimis.io>
parents:
60
diff
changeset
|
67 |
60 | 68 2022-11-10 - v 0.4.0 |
69 ==================== | |
53 | 70 |
58
ad279c70c22d
added a new configuration 'StandardConfigurations'
Alain Mazy <am@osimis.io>
parents:
56
diff
changeset
|
71 * new configuration option "CheckedLevel" that is clearer than "UncheckedLevels". |
ad279c70c22d
added a new configuration 'StandardConfigurations'
Alain Mazy <am@osimis.io>
parents:
56
diff
changeset
|
72 "UncheckedLevels" remains for backward compatibility. |
ad279c70c22d
added a new configuration 'StandardConfigurations'
Alain Mazy <am@osimis.io>
parents:
56
diff
changeset
|
73 Allowed values: "patients", "studies", "series", "instances" |
ad279c70c22d
added a new configuration 'StandardConfigurations'
Alain Mazy <am@osimis.io>
parents:
56
diff
changeset
|
74 * new configuration option "StandardConfigurations" to replace multiple configurations. |
ad279c70c22d
added a new configuration 'StandardConfigurations'
Alain Mazy <am@osimis.io>
parents:
56
diff
changeset
|
75 Allowed values: "osimis-web-viewer", "stone-webviewer" |
56
c02f0646297d
added support for /dicom-web/studies?0020000D=1.2.3&...
Alain Mazy <am@osimis.io>
parents:
54
diff
changeset
|
76 * added support for QIDO-RS query arguments (e.g: /dicom-web/studies?0020000D=1.2.3&...) |
59
a5f2976fe8a0
fix Authorization header conflicting with WebServiceUsername
Alain Mazy <am@osimis.io>
parents:
58
diff
changeset
|
77 * possible BREAKING_CHANGE: if "TokenHttpHeaders" is set to "Authorization" and if |
a5f2976fe8a0
fix Authorization header conflicting with WebServiceUsername
Alain Mazy <am@osimis.io>
parents:
58
diff
changeset
|
78 "WebServiceUsername" is defined, the "Authorization" header of the HTTP request |
a5f2976fe8a0
fix Authorization header conflicting with WebServiceUsername
Alain Mazy <am@osimis.io>
parents:
58
diff
changeset
|
79 sent to the auth-service will contain the basic auth info from WebServiceUsername and |
a5f2976fe8a0
fix Authorization header conflicting with WebServiceUsername
Alain Mazy <am@osimis.io>
parents:
58
diff
changeset
|
80 WebServicePassword. You should get the "Authorization" value from the token-value field |
a5f2976fe8a0
fix Authorization header conflicting with WebServiceUsername
Alain Mazy <am@osimis.io>
parents:
58
diff
changeset
|
81 of the payload sent to the auth-service. |
58
ad279c70c22d
added a new configuration 'StandardConfigurations'
Alain Mazy <am@osimis.io>
parents:
56
diff
changeset
|
82 |
54
317b31e99501
Added 3 new configurations: WebServiceUsername, WebServicePassword, WebServiceIdentifier. WebServiceIdentifier is now included in the payload as the 'identifier' field
Alain Mazy <am@osimis.io>
parents:
53
diff
changeset
|
83 2022-09-26 - v 0.3.0 |
317b31e99501
Added 3 new configurations: WebServiceUsername, WebServicePassword, WebServiceIdentifier. WebServiceIdentifier is now included in the payload as the 'identifier' field
Alain Mazy <am@osimis.io>
parents:
53
diff
changeset
|
84 ==================== |
317b31e99501
Added 3 new configurations: WebServiceUsername, WebServicePassword, WebServiceIdentifier. WebServiceIdentifier is now included in the payload as the 'identifier' field
Alain Mazy <am@osimis.io>
parents:
53
diff
changeset
|
85 |
317b31e99501
Added 3 new configurations: WebServiceUsername, WebServicePassword, WebServiceIdentifier. WebServiceIdentifier is now included in the payload as the 'identifier' field
Alain Mazy <am@osimis.io>
parents:
53
diff
changeset
|
86 * Added 3 new configurations: WebServiceUsername, WebServicePassword, WebServiceIdentifier. |
317b31e99501
Added 3 new configurations: WebServiceUsername, WebServicePassword, WebServiceIdentifier. WebServiceIdentifier is now included in the payload as the 'identifier' field
Alain Mazy <am@osimis.io>
parents:
53
diff
changeset
|
87 * The WebServiceIdentifier is now included in the payload sent to the WebService as the |
317b31e99501
Added 3 new configurations: WebServiceUsername, WebServicePassword, WebServiceIdentifier. WebServiceIdentifier is now included in the payload as the 'identifier' field
Alain Mazy <am@osimis.io>
parents:
53
diff
changeset
|
88 "identifier" field. |
317b31e99501
Added 3 new configurations: WebServiceUsername, WebServicePassword, WebServiceIdentifier. WebServiceIdentifier is now included in the payload as the 'identifier' field
Alain Mazy <am@osimis.io>
parents:
53
diff
changeset
|
89 |
53 | 90 |
52 | 91 2022-05-13 - v 0.2.5 |
92 ==================== | |
1 | 93 |
50 | 94 * Fix osimis-viewer route |
43 | 95 |
58
ad279c70c22d
added a new configuration 'StandardConfigurations'
Alain Mazy <am@osimis.io>
parents:
56
diff
changeset
|
96 |
43 | 97 2020-12-10 - v 0.2.4 |
98 ==================== | |
99 | |
28
ae19947abf68
Added support for Osimis Web Viewer new route (osimis-viewer/custom-command/)
am@osimis.io
parents:
25
diff
changeset
|
100 * Added support for Osimis Web Viewer new route (osimis-viewer/custom-command/) |
38 | 101 * Support of dynamic linking against the system-wide Orthanc framework library |
28
ae19947abf68
Added support for Osimis Web Viewer new route (osimis-viewer/custom-command/)
am@osimis.io
parents:
25
diff
changeset
|
102 |
43 | 103 |
25 | 104 2018-08-13 - v 0.2.3 |
105 ==================== | |
106 | |
24 | 107 * Compatibility with Linux Standard Base |
108 * Now using the Orthanc framework | |
1 | 109 |
43 | 110 |
25 | 111 2018-07-19 - v 0.2.2 |
112 ==================== | |
113 | |
114 * Added automated build | |
115 | |
43 | 116 |
16 | 117 2018-03-09 - v 0.2.1 |
118 ==================== | |
119 | |
120 * Upgraded sdk to 1.3.1 | |
121 | |
43 | 122 |
12 | 123 2018-03-08 - v 0.2.0 |
124 ==================== | |
125 | |
126 * Added support for Osimis Web Viewer | |
127 | |
1 | 128 |
129 2017-03-22 | |
130 ========== | |
131 | |
132 * Initial release |