All notable changes to this project will be documented in this file
The format is based on Keep a Changelog and this project adheres to Semantic Versioning
- Encrypted values not available in emails. (Caused crashes with implementation)
- Encrypted values not available in emails.
- Ability to hook into email/webhook params.
- An issue where a debug method was undefined.
- Upgraded mongodb@3.2.3, nodemon@1.18.11, config@3.1.0, formiojs@3.19.3, mongoose@5.5.0, nodemailer@6.1.0, mocha@6.1.2
- Problems where sub-forms are submitting when "reference" is disabled on the component.
- FOR-2143: Protected fields being exposed for SAR select resources
- Upgraded mongoose@5.4.22
- Submission role tests for the enterprise server.
- Upgraded formiojs@3.18.4
- Adding loading nested forms sub-submissions to cache methods.
- Allowing the deletion of roles from a submission (but not adding)
- Adding submissionQuery hooks for all submission queries being made.
- Making loadSubForms more performant and also adding a way to bulk load forms and submissions.
- Upgraded nodemailer@6.0.0, semver@6.0.0, formiojs@3.18.3, mongoose@5.4.21, mssql@5.0.5, fast-json-patch@2.1.0, eslint@5.16.0
- Moving the owner setting to submission handler so it works on all submissions.
- Replace bcrypt with bcryptjs.
- Fix permissions check on patch submission.
- Fix issue with deploying projects with forms configured with nested forms attached to specific versions.
- formiojs@3.18.1, mongoose@5.4.20
- The token handler to also call the user hooks for other kinds of tokens.
- Upgraded formiojs@3.18.0, mongodb@3.2.2
- Added a more efficient and complete role checking mechanism for permission handling.
- Updated bcrypt@3.0.5, jsonwebtoken@8.5.1, mssql@5.0.3, eslint@5.15.3, supertest@4.0.2, formiojs@3.17.4
- Patch requests incorrectly patching files with encrypted fields.
- Removed the macros from the email action since those are now added to the formio-workers library.
- Upgraded dependencies.
- Problem with a subform put request.
- Issues with the nested subform create and update when called from the API.
- Updated mocha@6.0.1
- Default the email action to have a default email template.
- Upgraded mongoose@5.4.14, mssql@4.3.2, request-promise-native@1.0.7, formiojs@3.15.6, jsonwebtoken@8.5.0, eslint@5.14.1, mocha@6.0.0
- Issue with subform validation to not include subforms that are conditionally hidden.
- Issue with subform validation where it will not process the subform requests if the subform is not present within the data.
- A potential crash within the subform validation where if the subform requests fails, it will cause the post request to not find a submission.
- The mongoose schema definitions from removing the _id property incorrectly.
- PATCH method support for submissions.
- Now allow more than GET requests to be skipped for permissions checks.
- Upgraded async@2.6.2, bcrypt@3.0.4, mongoose@5.4.10, nodemon@1.18.10, formiojs@3.14.1
- When resetting passwords, jwtIssuedAfter sometimes got set to wrong timestamp resulting in invalid tokens.
- Ability to connect to SA enabled mongodb instances.
- Updated formiojs@3.13.9, mongoose@5.4.9, mssql@4.3.1, supertest@3.4.2, moment@2.24.0, eslint@5.13.0
- reCAPTCHA API Endpoint
- mongodb@3.1.13, formiojs@3.13.0
- The tests to work with extended systems.
- Issue where read all permissions are ignored when resource submission access is established.
- Upgraded csv@5.1.1, mongodb@3.1.12, mongoose@5.4.5, formiojs@3.12.2, nodemailer@5.1.1, eslint@5.12.1, supertest@3.4.1
- Added more permissions form matching during import process to resolve conflicts.
- Minimal support for running entire stack in docker-compose
- FOR-644: Adding logging for form actions to help tracking execution and errors.
- FOR-1908: Fixed problem where ID's could be set when creating records.
- FOR-1977: Issues with the resource access permissions where indexes were not performant and giving 401 errors.
- Upgraded bcrypt@3.0.3, debug@4.1.1, formiojs@3.10.2, joi@14.3.1, mongoose@5.4.2, csv@5.1.0, eslint@5.11.1
- Upgraded nodemailer to version 5: From their CHANGELOG - Start using dns.resolve() instead of dns.lookup() for resolving SMTP hostnames. Might be breaking change on some environments so upgrade with care
- The formio-workers dependency from using dynamic require paths which messes up certain builds.
- Issues with the resource permissions where it would only allow one resource per type.
- The default.json configuration to point to the correct "databases" config.
- Changed the installation to say "setup" instead of "install".
- Upgrade formiojs@3.9.3, mongoose@5.3.15, progress@2.0.3, chance@1.0.18, eslint@5.10.0
- Updated to resourcejs v1.33.0 which changes more 500 errors to 400s.
- Potential issues with the recursive forms not loading correctly.
- Potential crash with the subform responses.
- Upgraded config@3.0.0, csv@5.0.0, mongoose@5.3.13, formiojs@3.9.0, joi@14.1.0, nodemailer@4.7.0
- Logging for action failures
- Respond with 400 errors instead of 500 when an error occurs.
- resourcejs 1.30.0
- Merge form handler
- Code cleanup
- API key regex.
- Upgraded
- JSONStream@1.3.5
- bcrypt@3.0.2
- express@4.16.4
- formiojs@3.6.12
- mongodb@3.1.8
- mongoose@5.3.7
- mssql@4.2.2
- progress@2.0.1
- nodemon@1.18.5
- debug@4.1.0
- resourcejs@1.28.0
- semver@5.6.0
- eslint@5.8.0
- Issue where logging would sometimes crash when tokens do not contain user objects.
- Upgraded eslint@5.6.1, formiojs@3.6.4, joi@13.7.0, mongoose@5.3.2
- basic request logging with DEBUG=formio:log.
- Minor nested form reference issue.
- Syntax for including files using __dirname. This is maintenance only.
- FOR-1719 Nested form SAR feature.
- Schema collection is now a first class model.
- Issues where an admin token generated with no logged in user would fail.
- Issue with Email configurations overriding other emails with different settings.
- Problem with the "current" user endpoint where it would not work if query parameters are provided.
- Upgraded the formio-workers library to v1.18.0
- Upgraded formiojs library to v3.5.5
- Upgrade lodash@4.17.11, mongodb@3.1.6, mongoose@5.2.16, formiojs@3.5.3, mssql@4.2.1, eslint@5.6.0, resourcejs@1.26.0, and debug@4.0.1
- Fixed the action condition checks to ensure it will not work for any empty conditionals.
- FOR-1603,FOR-1639: Improved Google CSV export
- Add option to mark template imports to create only.
- Expire all tokens when a password is reset.
- Apply form update permissions when fetching actions.
- A potential crash within the Validator.
- Query parameters to the action execution.
- Upgrade dependencies.
- Upgrade formiojs@3.4.0, resourcejs@1.25.3, mongodb@3.1.4, mongoose@5.2.10
- Upgrade formiojs@3.3.6 resourcejs@1.25.2
- Allow usage of Unauthorized certificates for SMTP servers.
- FOR-1533: Improved conditional Actions.
- FOR-1556: Added timezone support for CSV downloads.
- Upgraded JSONStream@1.3.4, mongodb@3.1.3, mongoose@5.2.8
- Introduced an "Everyone" permission which applies to Anonymous + all Roles.
- Fixed dependency deprecation and vulnerabilities.
- Fixed the permission handler to work as expected with "owner" permissions.
- Upgraded dependencies.
- Upgraded colors@1.3.1, mongoose@5.2.4, nodemon@1.18.3, mysql@2.16.0, eslint@5.2.0, fs-extra@7.0.0, method-override@3.0.0
- Issue with SQL Action for update commands.
- maxWords and minWords validation.
- Fixed the machine names to be performant and without special chars.
- Allow admins the ability to see all anonymous submissions
- Issues where the validator would crash for certain JSON form structures.
- formiojs@2.32.3, mongodb@3.1.1, mongoose@5.2.3, eslint@5.1.0, nodemon@1.18.1, bcrypt@3.0.0
- Date converting for filter.
- The original message type of an email to the message payload.
- Moved all instances of mongoose to use a single entity provided within the formio object.
- Make select query validation use caching to limit requests being made.
- CSV export of wysiwyg
- Webhook improvements
- Upgrade mongoose@5.1.7, nodemailer@4.6.7, jsonwebtoken@8.3.0, eslint@5.0.1
- Problems with the machine name generation where numbers in the project name would mess it up.
- Issues with the machine name generation for names with more than 10 instances.
- Ability for email templates to execute from workers library.
- Validation changes for multi-mask fields
- Ability to configure email transports via hooks.
- Upgraded JSONStream@1.3.3, async@2.6.1, body-parser@1.18.3, mongodb@3.0.8, nodemailer@4.6.5, vanilla-text-mask@5.1.1, nodemon@1.17.5, colors@1.3.0, csv@3.1.0, formiojs@2.32.2, joi@13.3.0, mongoose@5.1.3, nodemailer-mailgun-transport@1.4.0, request@2.87.0, mocha@5.2.0, supertest@3.1.0, fs-extra@6.0.1, adm-zip@0.4.11
- Potential crash when merging forms when one row was empty or missing.
- Upgraded resourcejs to v1.23.1 to fix issue with number filtering.
- Ability to calculate values of fields on server.
- Unique validation for objects.
- Issues with DataGrid exports.
- Issues with DateTime filters on index apis.
- Upgraded dependencies.
- Save as reference issues with multiple configuration.
- Problems with using the "exists" endpoint with the new converted ObjectId's
- Problems with providing an _id filter when using save as reference indexes.
- Upgraded formiojs@2.30.1, mongoose@5.0.12, nodemailer@4.6.4, nodemon@1.17.3, moment@2.22.0
- Email view for File component.
- Problem where some values would get converted to ObjectIds and then would not work with indexing.
- Upgraded express@4.16.3, mongodb@3.0.5, mongoose@5.0.11, nodemailer@4.6.3, mocha@5.0.5, nodemon@1.17.2, colors@1.2.1, formiojs@2.30.0, request@2.85.0, eslint@4.19.1
- Convert all sub-document submissions to use ObjectId's for form, owner, and _id.
- Added recommended indexes for performance.
- Problem where the references could get in a state where the Id's are not ObjectIds.
- Running the update hook to fix the references again to ensure they are all ObjectIds.
- Issues with single record save-as-reference where previous submission would mess up queries.
- Problems with the SMTP settings where username and password could be optional.
- Problems with the save-as-reference not working with empty references.
- Fixed some filtering issues with Save as reference.
- Potential crash within the CSV export functions.
- Refactored the save-as-reference so pagination + sort works as expected.
- Pagination issues with save-as-reference
- Correct sorting for save-as-reference when there are more items than references.
- Issues with save-as-reference lookup for single references.
- Some more issues with save as reference features.
- Resourcejs to allow fix date values.
- Upgrade dependencies.
- The form component unique validation to only care about input components.
- Issues with the store as reference features.
- The filter and sort index queries for referenced fields.
- CSV exporter that would throw an error for DateTime components.
- Issue where hidden components that have a value set remove their parent containers or datagrids.
- Ensure sub-requests get their own cloned request paramters.
- Issue with the field parameter actions would execute twice unintentionally.
- Issue where empty list of references would fail the request.
- Some potential undefined references causing crashes.
- A bunch of small bugs in CSV export.
- Issue with the resource references index query taking too long and taking a lot of memory.
- Problems with using cloneDeep on sub-requests which would gobble up memory.
- Problems with sub-responses calling methods that do not exist.
- Upgraded formiojs (2.29.5), nodemailer (4.5.0), nunjucks (3.1.0)
- Upgraded mongoose to 5.0.6, formio.js to 2.29.2
- Removed all calls to snapshot since it was causing serious performance regressions.
- Problem with the owner property not getting set properly when they are an admin.
- Upgrade config@1.29.4, joi@13.1.2, lodash@4.17.5, eslint@4.17.0
- A potential crash when assigning submission resource access.
- Upgraded MongoDB driver to 3.0.2, Mongoose 5.0.3
- Add list querystring to allow more efficient list returns.
- Field Logic handling.
- Fix required multi-value fields not returning required.
- Fix the way rows are found for datagrid checkConditionals.
- Fix email actions for external authentication (User doesn't exist in form.io)
- Fixed an issue where the token handler would return 401 when it should try as anonymous.
- Upgrade MongoDB (v3) and Mongoose (v5) to latest versions.
- Potential crashes in CSV export and template imports.
- Removed a bunch of superfluous debug messages for memory and performance improvements.
- Tests to refer to the correct helper template instead of the global one.
- Submission index queries that filter based on the user owner.
- Problems with the Save as Reference for Select dropdowns and other bugs.
- Connection issues with SQL Action.
- ES6 cleanup items.
- Issue where the metadata property for submissions was getting stripped out.
- DateTime component export.
- Upgraded resourcejs to latest version.
- Upgraded all dependencies.
- Upgraded resourcejs to fix crash in index queries.
- The owner property to be either a MongoID or a string with custom value.
- Converted some code into ES6 patterns.
- Hook into the export capabilities.
- CSV export when Select component within DataGrid component.
- Do not replace the title and name during import if none are provided.
- Custom Form properties.
- Allow people to provide their form access settings on POST.
- Issue with CSV export crashing on fields within a datagrid.
- Threading so that it will not block debugging ports.
- Make async validators work properly and move select to joi validation.
- Fix issue with importing subforms out of order.
- Move sub form validation and submission to the appropriate areas so it works in conjunction with other functionality.
- Hooks for tempTokens.
- Problems with using temp tokens with remote environments.
- Import order of subforms no longer crashes import.
- Issues with problematic aggresive resource caching.
- Upgraded dependencies.
- Datetime fields to be stored as MongoDB Date objects.
- Ability to alter models dynamically.
- Partial indexes for non-deleted entities.
- Ability to provide dynamic sub-forms from parent form submissions.
- Upgrade all dependencies.
- Made the editgrid validation not dependant on the multiple flag in component settings.
- Bugfix/FOR-809. Fix in CSVExporter for multivalue resource and select fields.
- EditGrid validation.
- Tests
- A hook within the submission tests to get the right hook.alter.
- Ability to alter validation form before submission validation occurs.
- Enhancements to webhook actionz
- Validation for Checkbox component with 'radio' type and 'name' option.
- Allow altering of resources for forms.
- Backend validation checks for select dropdown components.
- Blocking webhook support
- Possibility to add shortcuts.
- Issue with the validation clearing out values when clearOnHide is set to false.
- Issue where a database update would be able to occur.
- Ensure we are on a 3.1.0 db schema.
- Allow patch schema updates without stopping server start.
- Added update hook to remove previous machineName indexes.
- Stop empty string removal on validation
- More changes to machineName so that it is not enforced unique at mongo level to keep duplicate errors from occuring.
- Machine name collisions on project import when there exists deleted entities.
- The export and import to translate the form property on form components.
- Issues with the machineKey not auto-incrementing and staying unique.
- Ability to alter submission with a hook.
- Possibility to use underscore in API key.
- Upgraded many dependencies to latest versions.
- Add json logic validation
- Upgrade Joi to 1.11.1
- Move custom javascript validation to Joi extension
- Change validator to return all errors instead of only the first encountered
- Return validation result along with errors
- Return result on dryrun
- Issue where data grid elements could not share name of parent element.
- Include the form settings within the export.
- Added a try/catch around the checkConditionals so that it will not crash when a bad conditional is provided.
- Submission validation with multi-value with empty strings would fail on the second save. Allow nulls.
- Sub-submissions and validations for form components where the submissions are already not established.
- Mongoose depcrecation warnings.
- Allowed for the temp token hooks to be asynchronous.
- Return SQL Server query results from get action
- Datagrids with invalid rows will no longer remove those rows.
- Validation errors on PUT will now return 400 instead of 500.
- Required fields hidden with JSON logic will no longer throw validation errors.
- Issue with import routine crashing on undefined function router.post.
- A way to track the parent submission when viewing submissions submitted from multi-form workflows.
- Merging of columns removes width, offset, push and pull settings.
- The token generation for SSO tokens to not require erroneous parameters.
- An issue with the Reset password action not working with case insensitive emails.
- Data in a datagrid showing in email notifications.
- Ability to modify the current form based on submission data before validation.
start:devscript for npm with Nodemon support.
- An issue with custom validations with components within a datagrid were not working properly.
- CSV export for Resource component and Select component with data source Resource / URL / JSON.
- An issue where if you have clearOnHide not set, it would still clear out values for hidden fields.
- Issue with unit tests from extended libraries that introduce new properties.
- Issue with components still getting cleared even though clearOnHide is false.
- The ability to import a custom project.json during installation.
- Issue during installation where the paths would get all messed up.
- The ability to provide "full=true" query parameter to the form load and retrieve the full form, including form components.
- The possibility of the server crashing for reference fields.
- The body limit for form sizes to allow forms up to 16mb in size (JSON format).
- Method for having reference field types that can dynamically link to sub resources.
- Deprecated validation handler in the Roles model.
- 'Unknown resource' error on PUT of form which has multiple save actions to other resources
- Submission Resource Access are calculated on the server during submission instead of in the browser.
- Allow roles to have their own permissions apart from default owner permissions.
- Make sure to not run the temp token tests for customer docker deployment test runs.
- A tempToken hook system to allow external libraries to modify temp token payloads.
- The way that the debug flag was being checked for debugging purposes.
- Allow exported action machine names to be altered.
- Fixed debugger issues with the email threads, due to an issue with process forking using the parent process.
- Automatic generation of action machine names to be form:action.
- Don't attempt to set headers after response has been sent.
- Allow template export steps to be altered with templateExportSteps
- Allow default template to be modified.
- Change templateSteps to templateImportSteps
- Updating the default template for new email actions to use the submission macro, rather than email, to change the output of signature components to be Yes/No
- Revert project version back to 2.0.0 and use tag instead.
???
- Adding entity query hooks to the import entities.
- Changed export filename to include version.
- Changed export version to reference project version not export schema.
- Removed plan from export.
- Template import / export tests
- git pre commit hooks for linting
- External token hooks
- Template action imports could fail based on resources not existing at creation time.
- customPrivate validations now work for components nested inside of layout components.
- Removed old template schema translations on import.
- Added temporary auth token support. You can now generate new tokens using the
/token endpoint with the following headers.
- x-expire = The expiration of the token in seconds.
- x-allow = The paths to allow for the token in the format: GET:/path/[0-9a-z]+
- Make action handlers alterable.
- Add mongo indices to all entities.