What's new in EzyPlatform 1.1.5?
This release introduces a major access-token architecture upgrade, expands admin management capabilities, enhances metadata handling, and adds new SDK utilities.
- Major access-token storage redesignThe access-token structure has been redesigned.
ezy_admin_access_tokensandezy_user_access_tokensnow usebigint auto_incrementas their primary key. Actual tokens are stored in a newtokencolumn, withezy_admin_access_tokens.tokenprotected by akey_tokenunique index. Legacy access-token metadata components such asAccessTokenMeta,AccessTokenMetaModel,SaveAccessTokenMetaModel, andAccessTokenMetaServicewere removed, along with a migration script:ezyplatform-alter-drop-access-token-meta.sql. - Expanded admin profile management capabilitiesAdministrators with
admin_managementpermission can now update avatars and cover images for other administrators through:PUT /api/v1/admins/{username}/update-avatarandPUT /api/v1/admins/{username}/update-cover-image. The admin profile UI was also updated to display edit actions only when the current user has sufficient permissions. - Improved login and password reset experienceThe password-reset page now displays the username currently being reset. Pressing Enter in password fields automatically submits the form. Usernames are stored in
localStorageafter password reset and automatically pre-filled on the login page for a smoother experience. - Enhanced access-token management and filteringAdded pagination and filtering services for both admin and user access tokens, including:
PaginationAdminAccessTokenService,PaginationUserAccessTokenService,AdminAccessTokenFilter, andUserAccessTokenFilter. Token queries now support sorting byID_DESC. Access-token repositories were also updated to operate directly on token values via methods such asfindByToken,deleteByToken,deleteByTokenAndAdminId, anddeleteByTokenAndUserId. New token statusLOGGED_OUT, token typeAPI_KEY, and helper methodAccessTokenType.equalsValueIgnoreCasewere added. - Extended authentication support for Web Management APIs
WebManagementAuthenticationInterceptornow supports reading admin access tokens fromAuthorization: Bearer <token>headers in addition to existing parameters and cookies. Integration tests were added for different token transmission methods, and login redirect handling was updated using theZEROconstant for token-cookie cleanup. - Expanded metadata services and query capabilities
AdminMetaService,UserMetaService, andDataMetaServicenow support saving metadata withmetaNumberValueandmetaTextValue. Services can retrieve metadata using owner information plusmetaKeyandmetaValue, prioritizing the latest record. Metadata deletion by owner and key was also added. Theezy_data_meta.meta_keycolumn length was increased fromvarchar(120)tovarchar(255). - Improved settings handling and SDK utilities
AdminSettingService.addNewSettingIfNotExistsnow supports lazy initialization viaEzySupplier<SaveSettingModel>, reducing unnecessary object creation. Additional SDK utilities include:Strings.containsControlCharacter,Strings.toStringOrNull,Uris.addQueryParameter,Uris.querySeparator, and new constants such asHTTP,TOKEN_TYPE_BEARER,ONE_HUNDRED_BIG_DECIMAL, andONE_HUNDRED_BIG_INTEGER.