Add ServersTransport for MediaService WebSocket connections
Add media-websocket-transport ServersTransport resource to disable HTTP/2 for backend connections to MediaService. This is required for proper WebSocket upgrade...
Add media-websocket-upgrade middleware to force Upgrade header
- Add Upgrade: websocket header for WebSocket paths to fix HTTP/2 Extended CONNECT conversion - This ensures HTTP/2 WebSocket upgrade requests are properly conv...
Add media-cors middleware for media domain CORS support
- Add media-cors middleware matching theme-cors configuration - Allows CORS headers to be set for media.{domain} requests
Add detailed error logging for MediaService session creation
- Log MediaService URL being called - Log response headers - Enhanced error logging with full error details - Include URL in error response for debugging
Add 'media' subdomain to auto-cert SUBDOMAINS for MediaService
- Add 'media' to SUBDOMAINS list in auto-cert-service.yaml - Enables automatic SSL certificate generation for media.{domain} subdomains - Required for MediaServ...
Add direct MediaService routes via media.{domain} for WebSocket support
- Create new /api/media/* routes that forward directly to media.{domain} - These routes bypass APIService to allow secure WebSocket connections - MediaService r...
Add logging for subscription request to backend
- Log when subscription request is sent to /app/chat/subscribe - Helps verify if subscription requests are reaching the backend
Add detailed logging for subscribe function
- Log when subscribe() is called and current connection state - Log client existence and connection status - Helps diagnose why subscriptions aren't being creat...
Add detailed logging for WebSocket subscription requests
- Added logging to trace when subscribeToSession is called - Logs payload and sessionGuid extraction - Logs database lookup for session verification - Helps dia...
Add detailed WebSocket connection logging
- Enhanced logging for WebSocket connection success/failure - Log connection frame details on successful connection - Log detailed STOMP error information - Hel...
Load 100 message history on chat open and determine message author correctly
Support two-member chat sessions and message pagination (default 100 messages)
Add pagination support for message history and findOrCreateChatSession for two-member chats
Make chat boxes reposition when Team Members panel opens/closes, add retry logic for session creation
Migrate chat functionality from ChatSideBar to Team Members - add chat button to MemberItem, preserve member IDs, remove duplicate ChatSideBar
Add findByOrganizationId method to MemberRepository
Access Level dropdown with icons and titles from ImageAccessLevelType
Pre-consume X-OTK via filter to avoid expiry on large uploads; use pre-auth session in ImagingController
Expose endpoints under /api/security/imaging to match gateway
Enable server.shutdown=graceful, spring.lifecycle timeout; add shutdown-aware TaskScheduler/TaskExecutor
Support X-OTK and *** via Redis (KSessionService) to synthesize KToken
Finalize end-to-end imaging flow (session forward, hashing align, UX wiring)
Add imaging API routes and UI integration; wire into DocManager; update KToken and user-info; add ImageAccessLevelType; update package.json
Add imaging endpoints and beans; integrate session; update application.yml and k8s configmap
Migrate to MinIO-backed imaging; remove legacy storage model; add MinIOConfig, imaging services/exceptions, ImageAccessLevelType; update **************** update pom deps
Use TLSStore for dynamic cert management (survives CI/CD deployments)
Certificate export/import with locking for true multi-cluster cert sharing
Enable JSON access logging in Traefik for auto-cert domain detection
Add cert-manager and Let's Encrypt ClusterIssuer to deployment workflow
Add MinIO public/internal bucket routes to Traefik deployment
Add auto-cert service with MinIO-synced shared storage
Migrate to CockroachDB with unique_rowid() for all entities
Migrate CockroachDB to secure mode with TLS certificates
Implement comprehensive AG Grid document imaging system with 50+ fields, advanced filtering, sorting, grouping, export, custom renderers, and interactive features
Implement god mode toggle in NavTop
Backend changes (app/api/user-info/route.ts): - Read GD field from Redis session data - Map to isGod in API response Frontend changes (app/hooks/useUserInfo.ts...
Implement god mode permission in sessions
Changes to SecurityController: - Query is_god field from users table during login - Pass isGod to kSessionService.createSession Changes to KSessionService: - A...
Add isGod field to User.java for god mode permission
- Add is_god column with database default false - Field indicates if user can access god mode toggle in UI - Used in SecurityService session creation to populat...
Add titleShort to organization API response
- Added titleShort field to /org/domain/{domain} endpoint response - Enables frontend to display organization's short name in UI - Used in session expiration wa...
Dynamically show org short name in session warning
- Added titleShort property to Organization class - Updated SessionExpirationWarning to use organization's short name - Changed text from 'Kamo applications' to...
Double-check Redis before showing session warning
- Always verify Redis TTL right before showing expiration warning - Prevents false warnings if another Kamo app extended the session - Ensures warning popup onl...
Implement sliding session expiration - CRITICAL SESSION FIX
- Refresh Redis TTL on every session access (sliding expiration) - Sessions now stay alive as long as user is active in ANY Kamo app - Change Redis key prefix f...
Like what you see shipping?
All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.