Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Added OpenID Connect session expiration changes for 1.21.0

...

  • Refactored OpenID Connect integration changed the Post Logout Redirect URI to avoid using relative paths
    • Previous Post Logout Redirect URI Path: /nifi-api/../nifi/logout-complete
    • New Post Logout Redirect URI Path: /nifi/logout-complete
    • OpenID Connect Identity Providers that support RP-Initiated Logout 1.0 may need to be updated with the new Post Logout Redirect URI
  • Refactored OpenID Connect integration changed application Bearer Token expiration to derive from the Access Token instead of the ID Token
    • Some Identity Providers return the same expiration for both Access Tokens and ID Tokens, but providers that support different values may need to be updated so that the Access Token reflects the expected application session expiration

Migrating to 1.19.0

  • This release deprecated support for Java 8. Java 11.0.16 is the minimum recommended version
  • For users of the apace/nifi* Docker images, note that the base image changed to eclipse-temurin:jre-11 from openjdk:8-jre. This could cause build issues if you were using the Apache NiFi docker image(s) as a base for custom images, or otherwise have functionality that requires packages from the base image and not NiFi itself. It is recommended to test in a dev environment prior to migrating to 1.19.0/latest image tags.

...