Release Notes FirstSpirit™ 2022.9

Release Notes

FirstSpirit™ 2022.9

1 Administration

1.1 'externalUserGroup': Restricted login by external users

The new

externalUserGroup

parameter, which can be used in the fs-server.conf file, can be used to restrict the login by users to specific groups.
If this parameter is enabled, only external users that are included in an external group that matches the specified value will be able to log in. The specified value must be a partial string of the complete group name.

Example:

externalUserGroup.1=CN=admin,OU=FIRSTspirit,OU=Projekte,DC=e-spirit,DC=de

If the external user is not included in the required groups to log in successfully, an entry will appear in the log as follows:

WARN  22.07.2022 13:29:38.101 (de.espirit.firstspirit.server.sessionmanagement.
SessionManagerImpl): login failed (authentication for 'xyz' successful but the user
is not a member of an allowed group)!

See also https://docs.e-spirit.com/odfs/edocs/admi/konfiguration-f/konfigurationsd/firstspirit-ser/bereich-server/index.html.

1.2 Code signing certificate update

In the current FirstSpirit release, the content of FirstSpirit jar files is signed with a new certificate. An update of the FirstSpirit Server is not necessary.

Note on compatibility: If the update service (FirstSpirit ServerMonitoring / FirstSpirit / Control / Update, “Update server” box) is used to update the FirstSpirit server, it must first be updated to release 2022.8 and then to release 2022.9. A direct update from a version below 2022.8 (e.g. 2022.7) to 2022.9 is not possible for compatibility reasons.

1.3 Interface UrlFactory: Parameter "readOnlyRegistry"

The newly with FirstSpirit 2022.8 introduced readOnlyRegistry parameter of the UrlFactory interface enables the pure read-only use of the URLs that are stored in the registry. After this parameter has been set, no new URLs will be stored and deleted URLs will not be removed.

Originally, this parameter overwrote the useRegistry parameter (value: false), if it was set.
Because the configuration could lead to problems in very rare special cases, the behavior was changed with the latest release: to evaluate this parameter, the useRegistry parameter must now be set to true. If this is not the case, the readOnlyRegistry parameter is now no longer effective.

2 General

e-Spirit becomes Crownpeak

What we had already started in April 2021, is now also becoming visible, noticeable and perceptible to the outside world – not only for the market but also customers and partners: e-Spirit and Crownpeak have merged into a global enterprise and thereby appear as only one exclusive company: “Crownpeak”.
In this context, e-Spirit GmbH became Crownpeak Technology GmbH effective August 1, 2022.

Background
Our vision of becoming the leading DXP provider worldwide (with the FirstSpirit CMS as its core), who will accompany and provide significant support for not only medium-sized and large enterprises but also groups acting worldwide on their path of digital transformation can now be realized even more efficiently with our combined forces and strengths and the bundled knowledge of both companies and access to expanded resources. In addition to the solutions provided in the current e-Spirit product portfolio, customers and partners can now also resort to Crownpeak solutions, such as the Digital Quality Management to keep websites free of barriers.

As part of the merger, support is now provided via the support.crownpeak.com portal. The current help.e-spirit.com address is forwarded to the new portal. The new portal will continue to provide access to closed and open tickets.

Otherwise, nothing else will basically change for customers and partners: Crownpeak Technology GmbH remains a 100% German company. It operates with 100% DSGVO conformity and all data is hosted in Europe.
See also https://www.e-spirit.com/en/specialpages/landingpages/e-spirit-becomes-crownpeak.html.

The FirstSpirit start page, documentation and other documents were generally adjusted: “e-Spirit” was replaced by “Crownpeak” and the address of the new Support portal was introduced. Any incidents that have not yet been adjusted will be adjusted successively.

3 ContentCreator

Visualization of input components that cannot be edited

For some input components, the project developer can specify if they can be edited by the editor or not.
Otherwise, input components can also be in “Read-only mode” (if they are currently being edited by another user) and are then also “locked”.
To provide for better recognizability, these input components are now visualized in the FirstSpirit ContentCreator accordingly:

UID=cc_eingabekomponente_editierbar

(Tooltip: “This input component cannot be edited.”)

Examples of input components that cannot be edited:

  • Parameter editable (“Form” tab)
    for CMS_INPUT_COMBOBOX, CMS_INPUT_TEXT, CMS_INPUT_NUMBER
  • Property EDITABLE (“Rules” tab)
  • Property EDIT (“Rules” tab)
    inner components of FS_CATALOG and FS_INDEX

4 FirstSpirit Content Experience Tools (CXT)

Latest module versions

FirstSpirit 2022.9 supports the following module versions for “FirstSpirit Content Experience Tools”.

Module / file nameVersion number
FirstSpirit CXT Plattform
platform-[version].fsm
2.5.7
FirstSpirit CXT DAP Bridge
dataservice-[version].fsm
1.44.8
FirstSpirit CXT FragmentCreator
fragment-creator-[version].fsm
3.4.11
FirstSpirit Fragment DAP
fragmentdap-[version].fsm
1.40.12
FirstSpirit Media DAP
mediadap-[version].fsm
1.31.7*
FirstSpirit PageRef DAP
pagerefdap-[version].fsm
1.9.7
FirstSpirit Markdown Editor
markdown-editor-[version].fsm
1.29.6*
FirstSpirit Tagging Editor
tagging-editor-[version].fsm
1.29.6
FirstSpirit CXT FragmentCreator - CaaS Integration
caas-integration-[version].fsm
1.31.7

* These modules require FirstSpirit 2020-03 or higher from this version.

Overview

ID Description Categories
CORE-13128

A failure could occur when deleting a template with a breakpoint set for the template debugger.

Template Debugger, Template Development
CORE-13936

New externalUserGroup parameter.

Further information can be found in chapter “Administration: 'externalUserGroup': Restricted login by external users”.

FirstSpirit Administrator
CORE-13958

An error has been rectified, which, in rare cases, could lead to that errors and/or warnings were output when archiving a project indicating that no revisions could be found (e.g., ...java.lang.IllegalArgumentException: unknown revision id: 199, latest: 59544...).

Archiving, FirstSpirit Administrator
CORE-14160

An error has been eliminated that could lead to problems when indexing in the remote projects with cross-project database use (such as in certain Corporate Content scenarios).

Corporate Content, Database, Developer, FirstSpirit Administrator
CORE-14210

When adding a language in the project properties, the default encoding was changed to UTF-8.

FirstSpirit Administrator, Languages
CORE-14273

The behavior at the server start has been optimized: now, schedules will not start until the server start-up is complete (Runlevel 100).
If it is determined that a higher Runlevel will no longer be reached (such as because the roll-out of some web applications has failed), the schedules will be started after a timeout of 30 minutes.

FirstSpirit Administrator, Tasks
CORE-14322

When images are scaled, the metadata will now be retained (for image format types JPEG, PNG and WEBP).
If the image format type is changed during scaling, the XMP metadata will also be transferred as long as the source and target format is one of these three supported image format types.

Developer, FirstSpirit Administrator, Media, Metadata
CORE-14462

On August 1, 2022, e-Spirit GmbH became Crownpeak Technology GmbH.

Further information can be found in chapter “General: e-Spirit becomes Crownpeak”.

Developer, Editor, FirstSpirit Administrator
CORE-14484

In the current FirstSpirit release, the content of FirstSpirit jar files is signed with a new certificate. An update of the FirstSpirit Server is not necessary.

Further information can be found in chapter “Administration: Code signing certificate update”.

Server Administrator, ServerManager, SiteArchitect
CORE-14521

The security of the FirstSpirit Server has been improved by preventing brute-force attacks by increasing wait times for a repeated login starting from 5 consecutive failed attempts to log in.

The user lands on a page with a 429 error code (“Too Many Requests”) and the remaining wait time (“...retry after xyz seconds”).

Editor, FirstSpirit home page, Security
CORE-14532

An error has been eliminated that, in very rare cases, could result in that a search index was damaged when exiting an order in a project in which the search index was calculated at the same time.

FirstSpirit Administrator, Indexing, Tasks
CORE-14559

Beim Laden von Modulen, die Nicht-Jar-Ressourcen definieren, wurden fälschlicherweise Legacy-Ressource erkannt (WARN-Meldung im Logging: Legacy resource found in module 'myMod'). 

FirstSpirit Administrator, Isolated mode
CORE-14561

For an evaluation of the readOnlyRegistry parameter, the useRegistry parameter must now be set to true.

Further information can be found in chapter “Administration: Interface UrlFactory: Parameter "readOnlyRegistry"”.

Advanced URL, Developer, FirstSpirit Administrator, Generation
CORE-14570

Invalid modules (e.g., due to resources with a file name that is invalid for the operating system of the server) previously prevented the server from starting. This may have resulted, for example, in an InvalidPathException.

With the latest release, the starter will still start in this case and such invalid modules will be indicated during the server start in the log, e.g., ERROR 04.08.2022 10:55:43.435 (de.espirit.firstspirit.server.module.ModuleHandlerImpl): Unable to extract module 'CORE-14570': Illegal char <<> at index 13: lib/malformed<ressource.jar.

Debugging, Developer, FirstSpirit Administrator, Module development
CORE-14606

FirstSpirit Content Experience Tools: Latest module versions

Further information can be found in chapter “FirstSpirit Content Experience Tools (CXT): Latest module versions”.

Developer, FirstSpirit Administrator, FirstSpirit Content Experience Tools (CXT), FragmentCreator, Modules
CXT-1661

Input components that cannot be edited in the ContentCreator are now visualized accordingly.

Further information can be found in chapter “ContentCreator: Visualization of input components that cannot be edited”.

ContentCreator, Editor, Input Components
CXT-2641

External preview applications are now allowed to access the Clipboard API of the browser in order to write content to the clipboard.

ContentCreator
CXT-2645

In some cases, the selection of the current page in the navigation area was not updated correctly in an external preview.

ContentCreator, Omnichannel Manager / Third Party Preview
CXT-2648

In the translation help, single entries from a language-dependent FS_INDEX component could not be taken over.

ContentCreator
CXT-2663

Added a hint text when editing sections that are used on multiple pages via section references: “This section is used on multiple pages.”

ContentCreator

Deprecations

Functionality Deprecated as of Will be removed / Was removed as of
Input component CMS_INPUT_CONTENTAREALIST 5.2R3
Input component CMS_INPUT_CONTENTLIST 5.2R3
Input component CMS_INPUT_FILE 5.2R3
Input component CMS_INPUT_LINKLIST 5.2R3
Input component CMS_INPUT_OBJECTCHOOSER 5.2R3
Input component CMS_INPUT_PAGEREF 5.2R3
Input component CMS_INPUT_PICTURE 5.2R3
Input component CMS_INPUT_TABLIST 5.2R3
FirstSpirit Access API: de.espirit.firstspirit.agency.GroupsAgent 5.2R15
FirstSpirit Access API: delete (de.espirit.firstspirit.access.AccessUtil) 5.2R18
FirstSpirit Access API: release (de.espirit.firstspirit.access.AccessUtil) 2018-06
FirstSpirit Access API: getLastLoginAsDate (de.espirit.firstspirit.agency.UserStatisticsAgent) 2018-07
FirstSpirit Access API: remainingDurationOfCurrentStageInMillis (de.espirit.firstspirit.server.MaintenanceModeInfo) 2018-07 2025-13
FirstSpirit Access API: getStartingTimeOfStageAsDate (de.espirit.firstspirit.server.MaintenanceModeInfo) 2018-07 2025-13
FirstSpirit Access API: getSelectedWebserverConfiguration (de.espirit.firstspirit.access.serverConfiguration) 2018-10 2025-13
FirstSpirit Access API: setSelectedWebserverConfiguration (de.espirit.firstspirit.access.serverConfiguration) 2018-10 2025-13
FirstSpirit Access API: getSelectedWebServer (de.espirit.firstspirit.access.project.Project) 2018-10 2025-13
FirstSpirit Access API: setSelectedWebServer (de.espirit.firstspirit.access.project.Project) 2018-10 2025-13
FirstSpirit Access API: getLostAndFoundStoreNodes(); (de.espirit.firstspirit.feature.FeatureInstallResult) 2018-10
FirstSpirit Access API: getDeletedStoreNodes(); (de.espirit.firstspirit.feature.FeatureInstallResult) 2018-10
FirstSpirit Access API: de.espirit.firstspirit.access.store.Previewable 2019-01
WebSphere Application Server support for FirstSpirit 2019-05
Database layer for Oracle Database 11g/12c 2020-12 2025-05
FirstSpirit Access API: redirectTemplateLogToDefaultLog() (Interface RenderingAgent.Renderer) 2021-05
Support for Log4j 1 2022-05 2024-06