Oqtane just released version 3.3.1. This is the last .net 6 release so we're getting ready to go full .net 7!
Focus on Bugfixes and WebApi Security
This latest release is primarily making it easier to configure custom security rules for WebAPIs and modules. For example, you can now add security attributes like this to WebApi controllers:
[Authorize(Policy = "User:Read:Registered Users")]
// or
[Authorize(Policy = "UserRole:Write:Administrators")]
// These can also be combined like this
[Authorize(Policy = "User:Read:Registered Users,UserRole:Write:Administrators")]
As you can see you can have many policies (separated by a comma) which can either just be a verb like "Edit" or a combination of these 3 parameters EntityName:PermissionName:DefaultRoles.
- EntityName: What kind of entity must be checked - typically the User or his roles
- PermissionName: The permission that this should have - so the user must have Read or Write permissions
- DefaultRoles: Roles the user must be in to automatically be allowed to use the API
The purpose of all this is to make permissions much more configurable. You can find out more in the post by Shaun Walker.
Prepare for Oqtane 4 and .net 7
After a few internal discussions where iJungleboy strongly urged to go forward and continue with .net 7, many of us including Shaun Walker and Michael Washington decided to take this leap of faith and move to .net 7.
This is because we believe that Oqtane is still meant for early adopters as of today, who love the latest technology and are not too worried about the 18 months of support in .net 7 (as opposed to the official Long-Term-Support on .net 6).
So the next version of Oqtane is expected to be a 4.0 and require .net 7.
Note that 2sxc will evaluate if it can support both .net 6 and 7 for a brief time, but will then move up the ladder together with Oqtane.
Possible Removal of Newtonsoft in Oqtane 4
In a clear commitment to keep Oqtane light and as near to the official standard of Microsoft, Oqtane has dropped its own dependency on Newtonsoft ca. v3.2. As of now it's still in the installation, but Oqtane doesn't use it any more.
So we will probably also see some clean up where Newtonsoft will not be bundled any more. For 2sxc this is not a problem, because it has dropped Newtonsoft in favor of System.Text.Json ca. v14.8.
Enjoy
Have fun!
iJungleboy
