Tyk module 1.4.0

  • Add datadome_graphql_endpoint option to define the path(s) used to detect GraphQL requests (comma-separated list, defaults to graphql)
  • Add datadome_use_x_forwarded_host option to support host override via the X-Forwarded-Host header
  • Upgrade the DataDome Go module to v2.5.0
    • Add support for 301/302 redirections returned by the Protection API
    • Rely on Protection API response headers instead of hard-coded status codes, enabling seamless support for upcoming features
    • Collect the Sec-Fetch-Storage-Access header and the cookie list
    • Extend the default URL pattern exclusion
    • Detect GraphQL requests when Content-Type includes a charset
  • Route DataDome logs through the Tyk logger; datadome_debug now promotes DataDome debug output to the info level so it is visible at Tyk's default log level
  • Fix a 500 error returned on every request when the API definition has no config_data.datadome section (environment-variable-only configuration)
  • Accept non-string values in config_data.datadome (e.g. "datadome_timeout": 300) and log invalid values instead of silently falling back to the default