Release Notes
1 Administration
1.1 'externalUserGroup': Restricted login by external users
The new
externalUserGroupparameter, which can be used in the fs-server.conf file, can be used to restrict the login by users to specific groups.
If this parameter is enabled, only external users that are included in an external group that matches the specified value will be able to log in. The specified value must be a partial string of the complete group name.
Example:
externalUserGroup.1=CN=admin,OU=FIRSTspirit,OU=Projekte,DC=e-spirit,DC=deIf the external user is not included in the required groups to log in successfully, an entry will appear in the log as follows:
WARN 22.07.2022 13:29:38.101 (de.espirit.firstspirit.server.sessionmanagement.
SessionManagerImpl): login failed (authentication for 'xyz' successful but the user
is not a member of an allowed group)!1.2 Code signing certificate update
In the current FirstSpirit release, the content of FirstSpirit jar files is signed with a new certificate. An update of the FirstSpirit Server is not necessary.
Note on compatibility: If the update service (FirstSpirit ServerMonitoring / FirstSpirit / Control / Update, “Update server” box) is used to update the FirstSpirit server, it must first be updated to release 2022.8 and then to release 2022.9. A direct update from a version below 2022.8 (e.g. 2022.7) to 2022.9 is not possible for compatibility reasons.
1.3 Interface UrlFactory: Parameter "readOnlyRegistry"
The newly with FirstSpirit 2022.8 introduced readOnlyRegistry parameter of the UrlFactory interface enables the pure read-only use of the URLs that are stored in the registry. After this parameter has been set, no new URLs will be stored and deleted URLs will not be removed.
Originally, this parameter overwrote the useRegistry parameter (value: false), if it was set.
Because the configuration could lead to problems in very rare special cases, the behavior was changed with the latest release: to evaluate this parameter, the useRegistry parameter must now be set to true. If this is not the case, the readOnlyRegistry parameter is now no longer effective.
2 General
e-Spirit becomes Crownpeak
What we had already started in April 2021, is now also becoming visible, noticeable and perceptible to the outside world – not only for the market but also customers and partners: e-Spirit and Crownpeak have merged into a global enterprise and thereby appear as only one exclusive company: “Crownpeak”.
In this context, e-Spirit GmbH became Crownpeak Technology GmbH effective August 1, 2022.
Background
Our vision of becoming the leading DXP provider worldwide (with the FirstSpirit CMS as its core), who will accompany and provide significant support for not only medium-sized and large enterprises but also groups acting worldwide on their path of digital transformation can now be realized even more efficiently with our combined forces and strengths and the bundled knowledge of both companies and access to expanded resources. In addition to the solutions provided in the current e-Spirit product portfolio, customers and partners can now also resort to Crownpeak solutions, such as the Digital Quality Management to keep websites free of barriers.
As part of the merger, support is now provided via the support.crownpeak.com portal. The current help.e-spirit.com address is forwarded to the new portal. The new portal will continue to provide access to closed and open tickets.
Otherwise, nothing else will basically change for customers and partners: Crownpeak Technology GmbH remains a 100% German company. It operates with 100% DSGVO conformity and all data is hosted in Europe.
See also https://www.e-spirit.com/en/specialpages/landingpages/e-spirit-becomes-crownpeak.html.
The FirstSpirit start page, documentation and other documents were generally adjusted: “e-Spirit” was replaced by “Crownpeak” and the address of the new Support portal was introduced. Any incidents that have not yet been adjusted will be adjusted successively.
3 ContentCreator
Visualization of input components that cannot be edited
For some input components, the project developer can specify if they can be edited by the editor or not.
Otherwise, input components can also be in “Read-only mode” (if they are currently being edited by another user) and are then also “locked”.
To provide for better recognizability, these input components are now visualized in the FirstSpirit ContentCreator accordingly:

(Tooltip: “This input component cannot be edited.”)
Examples of input components that cannot be edited:
- Parameter
editable(“Form” tab)
for CMS_INPUT_COMBOBOX, CMS_INPUT_TEXT, CMS_INPUT_NUMBER - Property
EDITABLE(“Rules” tab) - Property
EDIT(“Rules” tab)
inner components of FS_CATALOG and FS_INDEX
4 FirstSpirit Content Experience Tools (CXT)
Latest module versions
FirstSpirit 2022.9 supports the following module versions for “FirstSpirit Content Experience Tools”.
| Module / file name | Version number |
FirstSpirit CXT Plattformplatform-[version].fsm | 2.5.7 |
FirstSpirit CXT DAP Bridgedataservice-[version].fsm | 1.44.8 |
FirstSpirit CXT FragmentCreatorfragment-creator-[version].fsm | 3.4.11 |
FirstSpirit Fragment DAPfragmentdap-[version].fsm | 1.40.12 |
FirstSpirit Media DAPmediadap-[version].fsm | 1.31.7* |
FirstSpirit PageRef DAPpagerefdap-[version].fsm | 1.9.7 |
FirstSpirit Markdown Editormarkdown-editor-[version].fsm | 1.29.6* |
FirstSpirit Tagging Editortagging-editor-[version].fsm | 1.29.6 |
FirstSpirit CXT FragmentCreator - CaaS Integrationcaas-integration-[version].fsm | 1.31.7 |
* These modules require FirstSpirit 2020-03 or higher from this version.
Overview
| ID | Description | Categories |
|---|---|---|
| CORE-13128 | A failure could occur when deleting a template with a breakpoint set for the template debugger. |
Template Debugger, Template Development |
| CORE-13936 | New |
FirstSpirit Administrator |
| CORE-13958 | An error has been rectified, which, in rare cases, could lead to that errors and/or warnings were output when archiving a project indicating that no revisions could be found (e.g., |
Archiving, FirstSpirit Administrator |
| CORE-14160 | An error has been eliminated that could lead to problems when indexing in the remote projects with cross-project database use (such as in certain Corporate Content scenarios). |
Corporate Content, Database, Developer, FirstSpirit Administrator |
| CORE-14210 | When adding a language in the project properties, the default encoding was changed to |
FirstSpirit Administrator, Languages |
| CORE-14273 | The behavior at the server start has been optimized: now, schedules will not start until the server start-up is complete (Runlevel 100). |
FirstSpirit Administrator, Tasks |
| CORE-14322 | When images are scaled, the metadata will now be retained (for image format types JPEG, PNG and WEBP). |
Developer, FirstSpirit Administrator, Media, Metadata |
| CORE-14462 | On August 1, 2022, e-Spirit GmbH became Crownpeak Technology GmbH. Further information can be found in chapter “General: e-Spirit becomes Crownpeak”. |
Developer, Editor, FirstSpirit Administrator |
| CORE-14484 | In the current FirstSpirit release, the content of FirstSpirit jar files is signed with a new certificate. An update of the FirstSpirit Server is not necessary. Further information can be found in chapter “Administration: Code signing certificate update”. |
Server Administrator, ServerManager, SiteArchitect |
| CORE-14521 | The security of the FirstSpirit Server has been improved by preventing brute-force attacks by increasing wait times for a repeated login starting from 5 consecutive failed attempts to log in. The user lands on a page with a 429 error code (“Too Many Requests”) and the remaining wait time (“...retry after xyz seconds”). |
Editor, FirstSpirit home page, Security |
| CORE-14532 | An error has been eliminated that, in very rare cases, could result in that a search index was damaged when exiting an order in a project in which the search index was calculated at the same time. |
FirstSpirit Administrator, Indexing, Tasks |
| CORE-14559 | Beim Laden von Modulen, die Nicht-Jar-Ressourcen definieren, wurden fälschlicherweise Legacy-Ressource erkannt (WARN-Meldung im Logging: |
FirstSpirit Administrator, Isolated mode |
| CORE-14561 | For an evaluation of the |
Advanced URL, Developer, FirstSpirit Administrator, Generation |
| CORE-14570 | Invalid modules (e.g., due to resources with a file name that is invalid for the operating system of the server) previously prevented the server from starting. This may have resulted, for example, in an With the latest release, the starter will still start in this case and such invalid modules will be indicated during the server start in the log, e.g., |
Debugging, Developer, FirstSpirit Administrator, Module development |
| CORE-14606 | FirstSpirit Content Experience Tools: Latest module versions |
Developer, FirstSpirit Administrator, FirstSpirit Content Experience Tools (CXT), FragmentCreator, Modules |
| CXT-1661 | Input components that cannot be edited in the ContentCreator are now visualized accordingly. |
ContentCreator, Editor, Input Components |
| CXT-2641 | External preview applications are now allowed to access the Clipboard API of the browser in order to write content to the clipboard. |
ContentCreator |
| CXT-2645 | In some cases, the selection of the current page in the navigation area was not updated correctly in an external preview. |
ContentCreator, Omnichannel Manager / Third Party Preview |
| CXT-2648 | In the translation help, single entries from a language-dependent FS_INDEX component could not be taken over. |
ContentCreator |
| CXT-2663 | Added a hint text when editing sections that are used on multiple pages via section references: “This section is used on multiple pages.” |
ContentCreator |
Deprecations
| Functionality | Deprecated as of | Will be removed / Was removed as of |
|---|---|---|
| Input component CMS_INPUT_CONTENTAREALIST | 5.2R3 | |
| Input component CMS_INPUT_CONTENTLIST | 5.2R3 | |
| Input component CMS_INPUT_FILE | 5.2R3 | |
| Input component CMS_INPUT_LINKLIST | 5.2R3 | |
| Input component CMS_INPUT_OBJECTCHOOSER | 5.2R3 | |
| Input component CMS_INPUT_PAGEREF | 5.2R3 | |
| Input component CMS_INPUT_PICTURE | 5.2R3 | |
| Input component CMS_INPUT_TABLIST | 5.2R3 | |
| FirstSpirit Access API: de.espirit.firstspirit.agency.GroupsAgent | 5.2R15 | |
| FirstSpirit Access API: delete (de.espirit.firstspirit.access.AccessUtil) | 5.2R18 | |
| FirstSpirit Access API: release (de.espirit.firstspirit.access.AccessUtil) | 2018-06 | |
| FirstSpirit Access API: getLastLoginAsDate (de.espirit.firstspirit.agency.UserStatisticsAgent) | 2018-07 | |
| FirstSpirit Access API: remainingDurationOfCurrentStageInMillis (de.espirit.firstspirit.server.MaintenanceModeInfo) | 2018-07 | 2025-13 |
| FirstSpirit Access API: getStartingTimeOfStageAsDate (de.espirit.firstspirit.server.MaintenanceModeInfo) | 2018-07 | 2025-13 |
| FirstSpirit Access API: getSelectedWebserverConfiguration (de.espirit.firstspirit.access.serverConfiguration) | 2018-10 | 2025-13 |
| FirstSpirit Access API: setSelectedWebserverConfiguration (de.espirit.firstspirit.access.serverConfiguration) | 2018-10 | 2025-13 |
| FirstSpirit Access API: getSelectedWebServer (de.espirit.firstspirit.access.project.Project) | 2018-10 | 2025-13 |
| FirstSpirit Access API: setSelectedWebServer (de.espirit.firstspirit.access.project.Project) | 2018-10 | 2025-13 |
| FirstSpirit Access API: getLostAndFoundStoreNodes(); (de.espirit.firstspirit.feature.FeatureInstallResult) | 2018-10 | |
| FirstSpirit Access API: getDeletedStoreNodes(); (de.espirit.firstspirit.feature.FeatureInstallResult) | 2018-10 | |
| FirstSpirit Access API: de.espirit.firstspirit.access.store.Previewable | 2019-01 | |
| WebSphere Application Server support for FirstSpirit | 2019-05 | |
| Database layer for Oracle Database 11g/12c | 2020-12 | 2025-05 |
| FirstSpirit Access API: redirectTemplateLogToDefaultLog() (Interface RenderingAgent.Renderer) | 2021-05 | |
| Support for Log4j 1 | 2022-05 | 2024-06 |