News How KrakenD Solves API Gateway Security Vulnerabilities

Product Updates

2 min read

KrakenD 0.6 autumn release

by Albert Lombarte

post image

As if we were an agrarian society, our releases keep revolving around the weather calendar seasons. Autumn is around the corner (northern hemisphere), so our release is ready for a cool autumn.

TL;DR

This release adds two interesting components: the JOSE component responsible for the JWT signing and validation, and the Cross-origin resource sharing (CORS) component. There is also a Consul client available.

The Krakend Playground and the KrakenDesigner (UI) is also updated.

KrakenD framework

The KrakenD framework brings only a few changes:

  • Decoupled the HTTP server from the router packages
  • Add the Service name in the configuration
  • BUGFIX: Merge with incomplete responses

Link to 0.6.0 release notes

KrakenD API Gateway

The KrakenD API Gateway binary comes with all the framework updates and bundles more components listed in the krakend-contrib.

The summary of changes is:

  • Added JOSE component. Validation and signing of JWT tokens
  • Added the Bloomfilter component to facilitate decentralized revoke of tokens at a massive rate.
  • Added the Cross-origin resource sharing (CORS) component
  • Golang updated to 1.10.3
  • Updated Opencensus component, adding an exporter to AWS XRay

Link to 0.6.0 release notes

Middleware and other features

New middleware, changes and other components worth mentioning:

  • JOSE: JSON Object Signing and Encryption
  • CORS: Supports Cross-origin resource sharing
  • Bloomfilter including rotation and RPC
  • Consul client by Letgo
  • Opencensus including now exporters to Amazon’s XRay
  • Configuration watcher: A development tool that allows you to monitor the configuration file and reload the service automatically.

All the middleware is in our krakend-contrib repository.

We hope you enjoy KrakenD!

Categories: Product Updates
Scarf

Stay up to date with KrakenD releases and important updates