March 19th, 2024 |
New Feature |
Quick Starts |
Introducing Quick Starts, in-app guided tutorials designed to help users kickstart their journey with the product. Access step-by-step instructions and resources directly within the 3scale UI, enabling smoother onboarding and rapid familiarization with key features. |
January 31, 2024 |
Enhancement |
Improved bot protection |
Strengthened security protocols with more advanced captcha systems for enhanced user experience and reduced intrusion on legitimate users. |
October 9th, 2023 |
Enhancement |
Require the current password on the user update form |
For security reasons, users are now required to enter their previous password when updating their personal details in the Developer Portal. (JIRA #6648). |
June 20th, 2023 |
Upgrade |
3scale APIs upgraded to OAS3 |
Update for 3scale APIs to use version 3 of the OpenAPI specification (OAS3). The user interface for the online API documentation has been renewed and shows a different look and feel and options. |
September 14th, 2023 |
Enhancement |
Prevent deletion of used metrics |
If a metric or method is currently used by the mapping rules set in the gateway configuration (either staging or production), the system will prevent it from being deleted and will show a message to the user (JIRA #7112). |
June 20th, 2023 |
Upgrade |
3scale APIs upgraded to OAS3 |
Update for 3scale APIs to use version 3 of the OpenAPI specification (OAS3). The user interface for the online API documentation has been renewed and shows a different look and feel and options. |
December 21st, 2022 |
APIcast Upgrade |
APIcast upgraded to v3.13 |
A new version of APIcast hosted has been released (APIcast v3.13). It provides general improvements and internal bug fixes. |
September 6th, 2022 |
APIcast Upgrade |
APIcast upgraded to v3.12 |
A new version of APIcast hosted has been released (APIcast v3.12). It incorporates two new policies: HTTP Response Code Overwrite and NGINX Filters. It also includes general improvements like additional functionality and options to the CORS Request Handling and the Maintenance Mode policies. |
June 14th, 2021 |
Enhancement |
Improved UI for creating Mapping Rules |
Renewed user interface for creating Mapping Rules. With the new form, it's easier to find the Methods and Metrics of the selected Product or Backend; especially when there is a large number of them. |
May 5th, 2021 |
Enhancement |
Improved UI for creating New Applications |
Renewed form for creating new Applications. Also added the ability to create new applications from the most relevant places of the UI: the global applications list (Audience>Applications), the list of applications in an account (Audience>Accounts>Account>Applications) and from the product applications list (Products > Product > Applications > Listing). |
April 20th, 2021 |
APIcast Upgrade |
APIcast upgraded to v3.10 |
A new version of APIcast hosted has been released (APIcast v3.10). It includes various improvements including support for PROXY protocol in IP Check Policy, extended features for the URL rewriting with captures policy and performance enhancements. |
October 20th, 2020 |
Enhancement |
Better scalability for large number of Products and Backends |
User Interface improvement with regard to managing many products and backends: 1. The dashboard displays the most recently updated products and backends. 2. New paginated and searchable pages display all products and all backends, directly accessible from the context switcher. |
September 22nd, 2020 |
APIcast Upgrade |
APIcast upgraded to v3.9 |
A new version of APIcast hosted has been released (APIcast v3.9). It includes various improvements including: Custom metrics and mutual TLS connections between APIcast and upstream APIs. |
August 17th, 2020 |
New Feature |
APIs as a Product |
Manage your APIs by separating your internal APIs (aka 'Backends') from your customer facing APIs (aka 'Products'). You can now : Expose any number of Backends as one Product, Re-use Backends in any Product, Get stats on Backend Usage. Check out this doc for a more in-depth overview. |
April 6th, 2020 |
APIcast Upgrade |
APIcast upgraded to v3.8 |
A new version of APIcast hosted has been released (APIcast v3.8). It includes various improvements including: Support for HTTP2 and gRPC connections (JIRA #3271) and support for WebSocket protocol connections to backend APIs (JIRA #4019). |
November 21st, 2019 |
APIcast Upgrade |
APIcast upgraded to v3.7 |
A new version of APIcast hosted has been released (APIcast v3.7). It includes a new Maintenance Mode policy to temporarily disable traffic (JIRA #3189) and the TLS Termination policy to configure a TLS Certificate per service (JIRA #2897). |
August 5th, 2019 |
APIcast Upgrade |
APIcast upgraded to v3.6 |
A new version of APIcast hosted has been released (APIcast v3.6). It includes two new policies: one to configure retries (JIRA #2261), (see documentation), and another one for JWT claim check (JIRA #2265), (see documentation); ability to manage access to different HTTP methods based on RHSSO roles (JIRA #2236), (see documentation), and the ability to differentiate auth-failed and limit exceeded errors (JIRA #2752), (see documentation). |
July 18th, 2019 |
Enhancement |
All standard APIcast policies in the UI |
From now on, it is possible to see and configure all available standard policies in the system UI according to which APIcast deployment option is being used (hosted or self-managed). (JIRA #2698) |
July 15th, 2019 |
Enhancement |
Differentiate auth-failed and limit exceeded errors |
Now, APIcast returns a different message when a client reaches its rate limits for the requested endpoint (Originally, “403 - Authentication failed” was returned by default). There is now a new option in [Your_API_name] > Integration > edit APIcast configuration > Gateway response section to configure the “Usage limit exceeded” error returned by the gateway. (JIRA #2752) |
July 8th, 2019 |
Upgrade |
Braintree and Stripe integration upgrade |
Upgraded the internal integration with Braintree and Stripe payment gateways. This change was required to use updated and more secure methods offered by the payment gateway providers to comply with the latest security standard regulations. Note that with this change, we generate the pre-built UI components provided by Braintree and Stripe; no customization for the credit card form is possible at this moment. |
June 25th, 2019 |
Enhancement |
Redesign of the documentation library |
Red Hat 3scale API Management includes changes in the structure of the documentation. For more details, refer to Redesign of the 3scale Documentation Library. |
May 13th, 2019 |
APIcast Upgrade |
APIcast upgraded to v.3.5.1 |
Introduces the ability to disable server tokens (JIRA #1989), enables the no_body option with OpenID Connect when authorizing requests against the 3scale backend (JIRA #2006), and the ability to configure maximum client certificate chain length (JIRA #2383). Finally, it fixes the known issue about reusing the same HTTPS session for requests on different domains (JIRA #2205). |
March 20th, 2019 |
APIcast Upgrade |
APIcast upgraded to v.3.5.0 |
Introduces two new APIcast policies 1) Routing policy to modify the upstream (scheme, host, and port) of a request based on the request path, a header, a query argument, or a JWT claim JIRA #1709, documentation, 2) TLS Client Certification Validation policy JIRA #1671, documentation. |
March 7th, 2019 |
Enhancement |
Configure allowed OAuth flows per API |
Added the ability to configure the allowed OAuth flows per API. When the API gateway is configured to use OpenId Connect for authentication, the corresponding flows are enabled on the RHSSO client side. documentation - JIRA #774 |
March 3rd, 2019 |
New feature |
Stop processing mapping rules |
Introduced a new option to order mapping rules and added the ability to stop them once the first one is met. documentation - JIRA #1344 |
January 4th, 2019 |
New API Endpoint |
Create access tokens via API |
A new endpoint called 'Access token create' has been added to the Account Management API. Now it is possible to programmatically create an access token and to assign the scopes needed for a specific use case. JIRA #1112 |
December 19th, 2018 |
Enhancement |
HTTP Basic Authentication support |
Added a new “Basic Authentication” option in the configuration for the APIcast gateway. Now API credentials can be be passed in an HTTP Authorization header. To find this option, navigate from Admin Portal following this path “[Your_API_name] > Integration > Configuration > edit APIcast configuration > Authentication Settings”. JIRA #430 |
December 12th, 2018 |
New API Endpoint |
Read/Update user permissions via API |
Providers are now able to programmatically configure user access rights via API. Two new endpoints 'User Permissions Read' and 'User Permissions Update' have been added to the Account Management API. JIRA #484. For more information, please check this article. |
November 29th, 2018 |
APIcast Upgrade |
APIcast upgraded to v.3.4.0 |
APIcast has been upgraded to v.3.4.0. New additions are: 1) IP check policy JIRA #1353 and documentation, 2) 'Delete' operator in 'Headers' policy JIRA #1354 and documentation, 3) Return "retry-after" for quota JIRA #1380 and documentation. |
November 28th, 2018 |
Enhancement |
New currencies available for billing |
CHF (Swiss Franc) and SAR (Saudi Riyal) are now supported and have been added to the available currencies for billing. This setting is configurable via the Admin Portal UI (Audience > Billing > Charging & Gateway). Enterprise only. JIRA #1594. |
October 30th, 2018 |
Enhancement |
Visual and navigational updates on the interface |
Introducing a new navigation and an improved experience for the 3scale Admin Portal. As part of the work for a unified experience across 3scale and other Red Hat products, we’re switching from horizontal to vertical menus. Together with this effort we’ve re-organized the navigation structure for a more intuitive and better navigation experience, especially for customers that manage many API’s. For more information, please check this article. |
October 16th, 2018 |
APIcast Upgrade |
APIcast upgraded to v.3.3.0 |
APIcast has been upgraded to v.3.3.0. It introduces new OOTB policies including: Liquid Context Debug, RH-SSO/Keycloak Role Check, Anonymous Access, URL Rewriting with Captures, and Referrer. See documentation. If you’re using APIcast self-managed, learn how to upgrade to the latest version of APIcast. Note: if you are using a dockerized version of APIcast, make sure you upgrade to the latest image version available. |
October 10th, 2018 |
Enhancement |
Weekly reports rescheduling |
Weekly reports are now sent every Monday at 0:00 UTC instead of the 1st, 8th, 15th and 22nd days of each month. |
October 4th, 2018 |
New Feature |
API switcher |
Newly branded header with a quick API switcher for accounts that manage many APIs. |
October 4th, 2018 |
New Feature |
API filter in the dashboard |
The dashboard now spots an API search box to quickly filter out the APIs. |
October 4th, 2018 |
Enhancement |
Pages reorganization |
Applications can now be directly found in the API submenu. The API alerts settings have been merged with the rest of the API settings. Account plans can now be found in the Settings section. |
October 4th, 2018 |
APIcast Upgrade |
APIcast dockerized image upgrade to v.3.3.0 |
A new version of APIcast has been released (APIcast v3.3). For more details on changes, please check out the APIcast changelog. The image can be downloaded from the Red Hat Container Catalog. |
July 18th, 2018 |
Enhancement |
Improved billing process |
Improved efficiency in the Red Hat 3scale billing processes. As a reminder, the following are the key invoice dates in a month: 1st day of the month: Calculation starts and the invoices are created. - 3rd or 4rd day of the month: The invoices are issued. - 5th or 6th day of the month: The invoices are charged. Dates are based on Coordinated Universal Time (UTC). Exact days may vary depending on user timezone and the system status. |
July 11th, 2018 |
New Feature |
Path based routing |
Add the ability to configure path based routing in APIcast using APICAST_PATH_ROUTING environment variable (Info) |
July 11th, 2018 |
Enhancement |
Billing fields in ‘Account read/update’ |
New fields have been added to the ‘Account read’ and ‘Account update’ Account Management API endpoints. Use these new fields to retrieve billing related information. JIRA #842 |
May 11th, 2018 |
New Feature |
APIcast out-of-the-box policies |
API providers can now customize the behavior of the gateway associated to a service by combining different policies. The policy chain is configurable via the Admin Portal UI (API > Integration > edit APIcast configuration). More info in our documentation site and in the upstream project |
April 25th, 2018 |
Enhancement |
TLS 1.2 and newer for developer portal |
Accept only TLS 1.2 and newer protocol for API Provider's developer portal website JIRA #817 |
April 6th, 2018 |
Enhancement |
reCAPTCHA upgraded to v2 |
reCAPTCHA used on the developer portal was upgraded to v2, as v1 was discontinued. |
March 13th, 2018 |
New Feature |
Configure SSO for admin portal via API |
New endpoints in the Account Management API to be able to configure SSO integration for the admin portal. JIRA #610 |
March 7th, 2018 |
New Feature |
Configure SSO for developer portal via API |
New endpoints to configure developer portal SSO integration (for Red Hat Single Sign-On, GitHub and Auth0) through the Account Management API. JIRA #609 |
January 17th, 2018 |
New API Endpoint |
Creating a credit card charge |
A new endpoint has been added to be able to create credit card charges via API. This endpoint requires account ID, invoice ID, and amount. JIRA #297 |
January 17th, 2018 |
Enhancement |
New fields added to invoice creation |
The following invoice fields can now be added and saved as line items when creating invoices via admin or API: Application Id, Application Plan Id, and Contract-Type. Before this change, these were only present in system generated invoices. JIRA #438 |
January 17th, 2018 |
New API Endpoint |
Retrieving a list of service contract IDs |
This endpoint complements the ability to unsubscribe developers from a service via the Service Subscription Delete endpoint. JIRA #525 |
December 14th, 2017 |
New Feature |
Ability to access multiple services with one key |
API providers can now allow their developers to consume different API services using the same user key. Enterprise feature only. |
November 30th, 2017 |
New Feature |
APIcast integration with OIDC for RH-SSO |
New OpenID Connect integration to connect APIcast API Gateway with Red Hat Single Sign-On for API authentication. Documentation, Blog post, JIRA #418 |
November 30th, 2017 |
Enhancement |
New fields in ‘Account create / update’ |
Two new fields have been added to the ‘Account create’ and ‘Account update’ Account Management API endpoints. Use these new fields to retrieve information, such as date of most recent traffic, for a particular application. JIRA #220 |
November 3rd, 2017 |
Feature Request |
Ability to unsubscribe developers from a service |
API providers can now unsubscribe developers from any of their API services (either individually or in bulk) using the Admin Portal interface. JIRA #258 |
October 31st, 2017 |
Enhancement |
Ability to access id_token returned by the SSO provider |
A new liquid drop has been introduced so it’s possible to access the id_token returned by the SSO provider from the developer portal. This way API providers can offer simultaneous authentication both to the 3scale powered developer portal and to any other external apps. JIRA #259 |
October 9th, 2017 |
Enhancement |
Warning when changing status of a developer account |
A warning has been introduced to make it explicit that changing the status of a developer account doesn’t automatically change the status of their applications. JIRA #244 |
September 18th, 2017 |
New Feature |
Trial days left shown in developer portal |
It’s now possible to expose, in the developer portal, how many trial days a customer has left. This can be achieved via liquid tags, documentation can be found here (replace ‘DOMAIN’ with your own domain name) https://DOMAIN-admin.3scale.net/p/admin/liquid_docs |
September 14th, 2017 |
New API Endpoint |
Add / update invoices and invoice lines via API |
Admins are now able to programmatically add and update invoices and invoice lines via API. Enterprise only. You can read further on our ActiveDocs (the new endpoints are: Invoice Update, Create Line Item for an Invoice, and Delete Line Item of an Invoice, Invoice Create, ). JIRA #171 |
September 8th, 2017 |
New Feature |
New webhook to detect deleted applications |
A new webhook to detect when an application is deleted has been added to the existing list of available webhooks. To activate it go to Settings > Webhooks. JIRA #231 |
September 8th, 2017 |
ActiveDocs Upgrade |
Swagger UI upgrade to v. 2.2.10 in ActiveDocs |
We have upgraded our ActiveDocs to version 2.2.10 of Swagger UI in the Developer Portal. With this change a few known issues like ability to set the default view for the response class (Model or Model Schema), or request headers not shown, are now solved. JIRA #147 |
September 6th, 2017 |
Enhancement |
Support for 4-byte UTF-8 Unicode characters |
Added support for 4-byte UTF-8 Unicode characters in the CMS (Developer Portal) templates. |
August 31st, 2017 |
New Feature |
Ability to delete applications from the developer portal |
Providers can now allow their API consumers to delete applications from the developer portal (it was only possible via API until now). Applies to all provider accounts created after Aug. 31st, 2017. JIRA issue #153 |
August 21st, 2017 |
Enhancement |
UX / UI: navigate to individual apps from Analytics |
It’s now possible to navigate directly from the Analytics > Top Applications view to individual applications. Small fix, big time savings. JIRA issue #150 |
August 17th, 2017 |
Enhancement |
Ability to use same email address in admin and developer portal |
As an admin user you can now use the same email address to sign up in the Admin Portal and in the Developer Portal (within the same 3scale provider). Note that admin users won't be able to log in to the developer portal with their admin user credentials. But they can have a completely separate user account in the developer portal with the same email address. JIRA issue #152. |
August 6th, 2017 |
Enhancement |
Update customer billing status via API |
It is now possible to programmatically update the billing status of a customer (fields 'monthly_billing_updated' and 'monthly_charging_enabled'). To do so, use the Account update' endpoint (Account management API). JIRA Issue #154. |
August 6th, 2017 |
New API Endpoint |
Update invoice status via API |
A new endpoint called 'Invoice' has been added to the 3scale billing API so providers can update the state of an invoice programmatically. JIRA issue #155. |
July 5th, 2017 |
Enhancement |
SSO for Admin Portal improvements |
Where Single Sign-On for the developer portal is mostly motivated by making signups easier for developers, when it comes to Single Sign-On for the admin portal an important consideration is centralized access management. That’s why it’s now possible to enforce SSO for the admin portal and thus completely disable password based sessions. Furthermore, it’s now possible and required to test an SSO integration from within the admin portal before publishing it on the sign in page. |
May 25th, 2017 |
New Feature |
New 3scale status page |
From now on, in addition to our 3scale status Twitter account, you can check 3scale system status updates here. You can also subscribe to email notifications from there if you wish to do so. |
May 24th, 2017 |
New Feature |
Single Sign-On (SSO) for Admin Portal |
Support for Single Sign-On for the admin portal- both for admins and members- using Red Hat Single Sign-On or Auth0. Enterprise only. |
May 17th, 2017 |
Enhancement |
Revamped application export file |
The application export file contains new fields matching all the information available in the UI: Account name, Service name, Paid or Free, and Last traffic on (date). |
May 17th, 2017 |
Enhancement |
Ability to edit developer accounts information |
Members can now edit developer accounts information. Note that developer accounts have a presence across services, so if a member with visibility into service A but not into service B makes changes, members with access to service B will also see those changes. |
May 16th, 2017 |
New API endpoint |
Manage roles and permissions via API |
Admins are now able to programmatically configure member service permissions via API (changing member_permission_service_ids[]). Enterprise only. You can read further on our documentation site. |
April 26th, 2017 |
APIcast Upgrade |
APIcast upgraded to v.3.1.0 |
APIcast hosted (up to 50k calls/day) has been upgraded to v.3.1.0. For more details on changes, please check out the APIcast changelog. This is an opt-in feature for existing users. If you’re using APIcast self-managed, learn how to upgrade to the latest version of APIcast. Note: if you are using a dockerized version of APIcast, make sure you upgrade to the latest image version available. |
March 31st, 2017 |
New API endpoint |
Update inbound email addresses via API |
A new endpoint called ‘Provider Account Update’ has been added to the Account Management API so providers can update email settings for inbound email addresses programmatically. |
March 29th, 2017 |
New API endpoint |
Update general settings via API |
A new endpoint called ‘Settings Update’ has been added to the Account Management API so providers can update general settings of their account programmatically. |
March 7th, 2017 |
Enhancement |
Easier navigation from Analytics to Applications |
A new link has been added from the Analytics > Limit violation notification view so it’s easier to navigate to specific applications from there. |
February 22nd, 2017 |
Support Configuration |
Plugins community supported only |
Our code plugin integrations are now a 100% community effort and as such no longer officially supported by Red Hat. This change should not affect the operation of your API(s) integration. For more information see the open source GitHub repositories. |
February 5th, 2017 |
Enhancement |
Better handling of SSL certificate issues (with RH-SSO) |
When using a RH-SSO instance without a valid SSL certificate, you now have the ability to disable SSL verification from 3scale in order to be able to continue with the integration. |
January 20th, 2017 |
New API endpoint |
Create ActiveDocs API |
A new endpoint called ‘ActiveDocs Spec Create’ has been added to the Account Management API so providers can create ActiveDocs programmatically. See API documentation at https://YOUR-DOMAIN-admin.3scale.net/p/admin/api_docs |
January 20th, 2017 |
New API endpoint |
Get a list of all ActiveDocs IDs API |
A new endpoint called ‘ActiveDocs Spec List’ has been added to the Account Management API so providers can get a list of all their ActiveDocs programmatically. See API documentation at https://YOUR-DOMAIN-admin.3scale.net/p/admin/api_docs |
January 5th, 2017 |
APIcast Upgrade |
APIcast dockerized image upgrade to v.2.0 |
For more details on changes, please check out the APIcast changelog. The image can be downloaded from the Red Hat Container Catalog. Read more about this in the Red Hat Middleware Blog. |
December 1st, 2016 |
New Feature |
Deleting services from the UI |
From now on if you’re on a plan that lets you create multiple API services, you’ll also be able to delete them. The only restriction is that you always need to keep at least one service under your account. Note: If you signed up before Dec. 1st, you’ll be able to delete any service but the very first one that was created. |
October 13th, 2016 |
Enhancement |
SSO for invitations in the developer portal |
No matter if you are using RH-SSO, GitHub, or Auth0 to allow your developers to use SSO to login into your developer portal, with this change, invited developers (and not only the ones that sign up directly) will also be able to take advantage of it. |
October 13th, 2016 |
Enhancement |
Only admins have access to account info |
In order to make it possible to providers to restrict access for members to certain sensitive areas of the Admin Portal, from now onwards only admin users will be able to access the ‘Account’ section. This means that member users will no longer be able to see the account-wide API key (they should use personal access tokens instead), export account data, or perform other actions at the account level. |
October 11th, 2016 |
Enhancement |
SSO developer portal transparent signup |
A couple of months ago we introduced the ability to integrate with RH-SSO for a more flexible developer portal authentication configuration. Now you can offer an even better signup experience to your developers by creating their 3scale account on behalf of them in cases where all the information needed is provided by the IdP. |
October 3rd, 2016 |
Enhancement |
New access tokens |
Introducing a new, more secure way to authenticate against all the 3scale APIs: 3scale tokens. See Documentation. |
September 30th, 2016 |
Enhancement |
Analytics view enhancements |
Visualize traffic by metrics (new view) and keep filter selection when switching from one view to another. These changes are part of a broader revamp of the Analytics UI. |
August 19th, 2016 |
Upgrade |
Upgrade to Liquid v.3.0.0 |
Upgrades Liquid to version to 3.0.0, see documentation. Liquid can be used to include developers information both in your Developer Portal and in emails sent to developers. |
August 17th, 2016 |
Enhancement |
Integration with RH-SSO for the developer portal |
Use Red Hat Single Sign-On (RH-SSO) to authenticate users on the Developer Portal. This will allow you to enable SSO with social logins (Twitter, Facebook, LinkedIn, Google etc.) as well as connecting with existing user databases (AD/ LDAP). See documentation. Read blog post published in the Red Hat Middleware Blog. |
August 11th, 2016 |
Enhancement |
New notification system |
No more noise in your inbox! The new notification system for providers allows admins and members under the same 3scale account to subscribe to notifications independently. Notifications will show in your dashboard, and you can decide which ones to receive by email as well. See documentation. |
August 9th, 2016 |
Enhancement |
Ease of roll-back gateway configuration |
Adds ‘updated at’ information to JSON endpoint so it’s possible to roll-back the gateway configuration in an automated deployment scenario. Undocumented. |
July 21st, 2016 |
Enhancement |
Ease of use in API definition |
New ‘API Definition’ page to centralize creation of methods and metrics. These will then be available both under Integration > Mapping rule and under Applications Plans to define rate limits and pricing rules. See documentation. |
June 16th, 2016 |
New Feature |
Roles and rights by service |
From now on different API teams under the same 3scale account can have independent access to different services. Admins can invite and give permissions to members from the Admin Portal. Enterprise only. See documentation. |
May 16th, 2016 |
New Feature |
Adyen - New payment gateway integration |
In addition to the already available gateway integrations such as Stripe or Authorize.net, Adyen has now been added. The Adyen platform is recommended for monetize large volumes of API transactions across continents, currencies, and payment methods. See documentation. |
Comments