20.04.06 - Apigee Edge for Public Cloud release notes

You're viewing Apigee Edge documentation.
Go to the Apigee X documentation. info

On the following dates, we began releasing component updates to Apigee Edge for Public Cloud:

• Message Processor: Friday, May 1, 2020
• API Management: Monday, April 20, 2020
• Monetization Management: Monday, April 20, 2020
• API Management Patch Release: Monday, June 22, 2020
• Monetization Management Patch Release: Monday, July 6, 2020
• Management Server Security Update: Monday, August 24, 2020
• Message Processor Patch Release with bug fixes: Thursday, September 24, 2020
• Message Processor Patch Release with bug fixes: Monday, October 26, 2020
• Message Processor Patch Release with bug fixes: Monday, February 1, 2021

New features and updates

Following are the new features and updates in this release.

JWT policies

• JWT encryption

  The JWT policies let you generate, verify, and decode encrypted tokens. New elements on policies include:

  • <Type> - Lets you set whether the tokens are signed or encrypted.
  • <EncryptionAlgorithms> - Lets you set <Key> and <Content> encryption algorithms.

  (67165581)

• Support for PSS algorithms in signed tokens

  The policies for generating and verifying JWT and JWS now support PS256, PS384, and PS512 algorithms, as described in IETF RFC 7518. (119856499)

• GenerateJWT relative start time for token

  When generating a JWT with the GenerateJWT policy, the <NotBefore> element lets you specify a relative time between when a token is generated and it becomes valid. For example, a <NotBefore> value of 2h means a token isn't valid until 2 hours after it's generated. You can set <NotBefore> time in milliseconds (ms), seconds (s), minutes (m), hours (h), days (d), or weeks (w). (126261970)

• Reference PublicKey/Certificate in VerifyJWT

  In the VerifyJWT policy, a <PublicKey> / <Certificate> element lets you reference the PEM-formatted certificate with which to verify incoming JWT signatures. For example:

  <PublicKey>
    <Certificate ref='public.certificate_pem'/>
  </PublicKey>

  (132918033)

Message template functions

Following are new message template functions available with this release:

• firstnonull - Returns the value of the first (left-most) non-null argument. (139698514)
• xpath - Lets you apply an XML Path (XPath) expression to parse XML variables. (123246424)

AssignMessage policy: AssignVariable lets you reference a message template

In the AssignMessage policy, the <AssignVariable> / <Template> element allows a ref attribute, letting you inject a predefined template at runtime that can change without having to modify the policy. (118396082)

Multiple certificate aliases

When configuring TLS and using multiple certificates in a keystore, each with a different alias, Edge lets you reference specific certificate aliases in your <SSLInfo><KeyAlias> configuration. To enable this updated behavior, set a new HTTPClient.choose.alias.by.keyalias property to true in the http.properties file on message processors. Edge for Public Cloud users must contact Support to add this property. (142141620)

JSONtoXML policy: Omit the XML declaration, indent output

Two new boolean options in the JSONtoXML policy give you more control over the XML output.

• <Options> <OmitXmlDeclaration> - When set to true (the default is false), the <OmitXmlDeclaration> element omits the default <?xml version="1.0" encoding="UTF-8"?> XML declaration generated by the policy.

• <Options> <Indent> - When set to true (the default is false), the <Indent> element indents the XML output. For example, instead of this output:

  <Array><n>1</n><n>2</n><n>3</n></Array>

  The Indent element produces this:

  <Array>
   <n>1</n>
   <n>2</n>
   <n>3</n>
  </Array>

(65142394)

Responses for virtual host scanning

If a request was made to an Apigee endpoint's IP address (no virtual host specified), Edge returned an HTTP 200 response and a blank HTML document from the default Apigee virtual host associated with that IP address. To avoid the incorrect impression that such a response might represent a potential vulnerability that could be exploited, the connection is dropped and no response is returned. (140005396)

Target server properties in Trace to help with troubleshooting

The following new trace properties help troubleshoot target connection issues by showing whether the HTTPClient for the target server has been cached: isHttpClientCached and isFromClientPool. (140574604)

MessageLogging policy: Syslog message

In the MessageLogging policy, a new <Syslog> / <PayloadOnly> element (boolean) lets you determine whether anything is automatically prepended to the <Message> you define. If you set <PayloadOnly> to true, nothing is prepended to your message definition (regardless of the <FormatMessage> setting). If set to false (the default), the <FormatMessage> setting determines what is prepended to the log message. (68722102)

Cache policies expiration

A new <TimeoutInSeconds> expiry element on the ResponseCache policy and PopulateCache policy behaves the way the existing <TimeoutInSecs> element was originally intended to work. Please use the new element. The deprecated <TimeoutInSecs> element still exists for backwards compatibility. If both the <TimeoutInSecs> and <TimeoutInSeconds> elements are configured, Edge uses <TimeoutInSeconds>. (119172893)

virtualhost.aliases.values flow variable

A new read-only virtualhost.aliases.values message flow variable returns a JSON-formatted array of all aliases assigned to the virtual host that was called on the inbound request. (128453178)

New parameter to ensure proxy revision deletion

A new force query parameter has been added to the delete API proxy revision. In cases where the revision is listed in the List API Proxies API but can not actually be queried, this parameter ensures that the proxy revision is deleted. (111691721)

For example:

DELETE /v1/organizations/myorg/apis/myproxy/revisions/2?force=true

New flow variable for virtualhost alias values

A new read-only virtualhost.aliases.values message flow variable returns a JSON-formatted array of all aliases assigned to the virtual host that was called on the inbound request. (128453178)

Bugs fixed

The following bugs are fixed in this release. This list is primarily for users checking to see if their support tickets have been fixed. It's not designed to provide detailed information for all users.