REST API Changes
-
Security improvement: Hide exception details in API responses
API error responses should not include
exception
andclass
information, as this could reveal internal implementation details to an attacker.Turbonomic now disables the output details for security exceptions by default. The API caller can still understand the nature of an error by inspecting the
type
andmessage
fields. -
Removal of API parameters for the
/action/availablemodes
API callAPI Parameters
*entity_type
and*action_type
have been removed from the/action/availablemodes
API call.