Serve custom statics

Added

• Add "init" method to Server.
• Add "addStatic" method to Server.

Fixed

• Add rejectUntrusted and auth configuration options to swagger

Changed

• Reduce timeout in Client requests
• Serve swagger under "/swagger" path, not "doc/api"

Authentication can be disabled for all origins

Added

• Add "auth" option, which allows to disable authentication for all api resources and requests origins.
• Added new custom security strategy called "disabled". When security is disabled, the "verify" method of this new strategy will be executed if it is defined, and returned data will be passed as "userData" to action handlers.

Get storage path

Added

• Add getPath method to storage. Will return the storage folder.

Fix Client scopes problem

Fixed

• Fix Client scopes problem. Concurrent requests of same method were sharing data.

Fix shared response headers

Fixed

• Avoid sharing same responseCustomizator (use for defining custom headers or statusCode) for all requests of same route.

Fix Swagger urls. Improve security.

Changed

• Use domain dependant absolute url in swagger interface.
• Change openapi servers url property depending of request hostname and port.

Added

• Add content-security-policy headers to static resources.
• Add referrer-policy and feature-policy headers.
• Add addMiddleware method to server.
• Add rejectUntrusted option.

Fixed

• Fix error when setting config values as false.
• Do not print service name in cli recommended commands when it is equal to package name.

Service name option not mandatory

Changed

• Define service type programatically using an option in the Service constructor
• Do not demand name option. Use package name as service name if it is not defined

New error constructors

Added

• Add Error constructors for GatewayTimeout and BadGateway

Fixed

• Avoid escaping characters in traces

Improve cors and security

Changed

• Use cors package to enable cors
• Upgrade dependencies

Added

• Use helmet package to improve security

Use path params in delete methods

• Avoid encoding url characters in templates.
• Do not use requestBody in delete methods, use path params.