[ixpmanager] IXP Manager v7.1.0 using unsecured administrative functions internally

[Christopher Rössler]

Hi,

we have migrated to IXP Manager v7.1.0 successfully and are now migrating
over external integrations to the new admin prepended API endpoints.

While checking the logs, we found out, that some pages within IXP Manager
itself will result in "UNPREPENDED/DEPRECATED" logs.

So far we have identified the following two workflows creating these logs:

1. Provisioning a new port using "Virtual Interfaces / Create Interface
Wizard"
Selecting a VLAN and switch port will be logged as:
production.NOTICE: UNPREPENDED/DEPRECATED usage of API request
api/v4/vlan/<VLAND_ID>/ip-addresses from xxxx
production.NOTICE: UNPREPENDED/DEPRECATED usage of API request
api/v4/switch/<SWITCH_ID>/ports from xxxx

2. Editing a VLAN interface:
production.NOTICE: UNPREPENDED/DEPRECATED usage of API request
api/v4/vlan/<VLAN_ID>/ip-addresses from xxxx

Setting UNSECURED_API_ACCESS=0 in the .env file will break GUI elements
etc. and therefore break functionality.

We are aware of the commits in the git repo that are related to this but
have not tested them, as there wasn't a proper release yet.

In the meantime I would advise to not disable the old APIs prematurely.

Is there a release date for a v7.1.1 or v7.2 release in the pipeline?

Kind regards,

chris

-- 
Christopher Rössler, Network Engineer
christopher.roessler at bcix.de
+49 30 2332195 37

BCIX Management GmbH
Albrechtstr. 110
12103 Berlin
Germany

Geschäftsführer/Managing Directors: Jens Lietzmann, André Grüneberg
Handelsregister: Amtsgericht Charlottenburg, HRB 143581 B
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.inex.ie/pipermail/ixpmanager/attachments/20260416/297c2489/attachment.htm>