AudienceView Unlimited 7 Release Notes

IMPROVED

Replace HTTP Protocols with HTTPS

To strengthen the security of all communication within AudienceView Unlimited, all HTTP protocols have been replaced with HTTPS (between the load balancer and the server).

•IIS now listens for HTTPS  traffic on port 443 rather than HTTP  traffic on port 80.

•NodeJS now listens for HTTPS traffic rather than HTTP, but the ports remain unchanged.

•The server automatically (GPO) receives a certificate generated by a trusted Certificate Authority.
This certificate is used for all HTTPS communication to IIS and NodeJS (if appropriate) on the server.

•The installer automatically applies the certificate to IIS and makes it available for NodeJS projects (new key "pfx" in default.json specifies the path of the certificate).

There is no impact to end users, these changes are completely transparent.

Configuration Changes

Configure the load balancer to send traffic to the servers using HTTPS, and to trust the Certificate Authority that issued the certificates.

Node only operates in HTTPS, so the option “isSecure” has been removed from default.json. Secure cookies will always be used.

Self Hosted Clients

A Certificate Authority must be registered with each server and the load balancer.

The Certificate Authority must generate a certificate for each server with the follow specifications:

   CN = fully qualified domain name

   Intended Purpose = Server Authentication

Firefox

Firefox does not accept certificates by non-public Certificate Authorities.  If you use Firefox on a server that uses one of these certificates (inside the CDE) then you will receive a certificate error. Using Firefox on the public URL will work as usual.

This can be resolved by exporting the certificate, and then importing it into Firefox (View Certificates).

Postman

Similar to Firefox, Postman does not accept certificates by non-public Certificate Authorities. If you use Postman on a server that uses one of these certificates (inside the CDE) then you will get a certificate error. Using Postman on the public URL will work as usual.

This can be resolved by exporting the certificate, and then importing it into Postman 7.x+ (File | Settings | Certificates).  

ENG-107

IMPROVED

Upgrade to Bootstrap Version 4.4.1

Bootstrap has been upgraded from Version 3.3.5 to Version 4.4.1

The feature changes have been kept to a minimum, you may notice some visual changes to the Desktop, online and POS.

ENG-71

IMPROVED

Upgrade hapi.js Server Version 18.4.

The hapi.js server has been upgraded from Version 16.5.1 to the more secure Version 18.4

There are no immediate functional changes as part of this upgrade; however, the way we rely on API calls within the servers has changed.

The framework has been rewritten to take advantage of async in the framework as opposed to callbacks and to improve error handling.

ENG-1

IMPROVED

Upgrade node.js to Version 12.16.1.

The underlying node.js has been upgraded from Version 8 to Version 12.16.1.

There are no functional changes as part of this upgrade, and AudienceView Unlimited continues to work as before.

ENG-26

IMPROVED

Upgrade jQuery Library to Version 3.4.1.

The jQuery library has been upgraded from Version 1.1 to Version 3.4.1.

There are no functional changes as part of this upgrade; however, it does improve front-end security.

ENG-68