Releases · oracle/opengrok

add COBOL language analyzer
localhost is no longer exempted from API checks
- this means uploading the configuration at the end of the indexing via the -U indexer option will no longer work without authentication token
- setup the authentication token in the read-only configuration using the authenticationTokens tunable and use the Indexer --token option or set the indexerAuthenticationToken option in the read-only configuration.
  - for the Python tools, use the -H option to supply the Bearer token in the Authorization header.
  - optionally set the allowInsecureTokens boolean option to allow the token to be passed over plaintext HTTP (handy for localhost only communication)
  - the argument of the --token option allows for the value to be read from a file if prefixed with @
- Docker will automatically create and use the token
- read-only configuration example:

<java version="11.0.8" class="java.beans.XMLDecoder">
    <object class="org.opengrok.indexer.configuration.Configuration">
        <void property="allowInsecureTokens">
            <boolean>true</boolean>
        </void>
        <void property="authenticationTokens">
            <void method="add">
                <string>INSERT_TOKEN_HERE</string>
            </void>
        </void>
        <void property="indexerAuthenticationToken">
            <string>INSERT_TOKEN_HERE</string>
        </void>
    </object>
</java>

bump Tomcat in Docker
add Content-Type header for the /metrics API endpoint so that recent versions of Prometheus can scrape it
align /search API results with the UI