Strapi Release: 4.4.0

TL;DR

Strapi v4.4.0 introduces two major features: Custom Fields and API Tokens v2. Custom Fields allow developers to create reusable custom input types for the Strapi admin panel, with a Color Picker field included out of the box. API Tokens v2 brings significant improvements to the token management system with granular permissions, token types, and better security controls. The release also adds Te Reo Māori locale support.

Highlight of the Release

• Introduction of Custom Fields API allowing developers to create reusable custom input types
• New Color Picker custom field included out of the box
• Completely revamped API Tokens system with granular permissions and improved security
• Addition of Te Reo Māori locale support

Migration Guide

Custom Fields

To start using custom fields:

1. Create a new custom field by following the Custom Fields documentation
2. Use the Color Picker field by selecting it when creating or editing content types

API Tokens v2

The new API token system is available automatically after upgrading. Existing tokens will continue to work, but to take advantage of the new features:

1. Navigate to Settings > API Tokens
2. Create new tokens with the desired type and permissions
3. For custom tokens, configure granular permissions for content types and admin actions

No specific migration steps are required as this is a new feature that enhances existing functionality without breaking changes.

Upgrade Recommendations

This is a feature release that introduces significant new capabilities without breaking changes. It is recommended for all users to upgrade to take advantage of the new Custom Fields API and improved API Tokens system.

Steps to upgrade:

1. Make a backup of your project and database
2. Update your Strapi version to 4.4.0:

   npm install [email protected]
   # or
   yarn upgrade [email protected]
   

3. Run the build command:

   npm run build
   # or
   yarn build
   

4. Restart your Strapi application

The upgrade should be smooth as there are no breaking changes reported in this release.

Bug Fixes

No specific bug fixes were highlighted in this release. The focus was on introducing new features and enhancements to the platform.

New Features

Custom Fields

Strapi now allows developers to create custom field types that can be used in the Content-Type Builder. This powerful extension capability enables the creation of specialized input types tailored to specific needs:

• Custom Fields API: A new API for registering custom field types in Strapi
• Color Picker Field: Included as the first built-in custom field
• TypeScript Support: Added TypeScript generators for custom fields
• Dynamic Zone Integration: Custom fields work within dynamic zones with proper Suspense boundaries

API Tokens v2

The API token system has been completely revamped with significant improvements:

• Token Types: Predefined token types (read-only, full-access) and custom tokens with granular permissions
• Granular Permissions: Fine-grained control over content-type operations and admin actions
• Token Regeneration: Ability to regenerate tokens while preserving permissions and configurations
• Activity Tracking: Last activity information for each token
• Improved Security: Better validation, expiration controls, and permission checks
• Permission Synchronization: Automatic cleanup and synchronization of permissions when content types change

Security Updates

No specific security fixes were mentioned in the release notes. However, the API Tokens v2 feature includes several security enhancements:

• Improved validation for token permissions
• Better expiration date checks and controls
• Prevention of duplicate permissions
• Automatic synchronization and cleanup of permissions in the database
• Validation to prevent unknown permissions

Performance Improvements

No specific performance improvements were highlighted in this release. The focus was on introducing new features and enhancing functionality rather than performance optimizations.

Impact Summary

Strapi v4.4.0 represents a significant enhancement to the platform's extensibility and security capabilities.

The introduction of the Custom Fields API opens up new possibilities for developers to create specialized input types, making Strapi more adaptable to specific business needs. This feature addresses a long-standing request from the community and positions Strapi as a more flexible CMS solution.

The API Tokens v2 system dramatically improves how API access is managed and secured. With granular permissions, token types, and better security controls, organizations can now implement more precise access control policies for their Strapi instances. This is particularly valuable for teams that need to provide limited API access to external systems or developers.

The addition of Te Reo Māori locale continues Strapi's commitment to internationalization and accessibility, making the platform more inclusive for Māori-speaking users.

Overall, this release enhances Strapi's position as an enterprise-ready, extensible headless CMS with improved developer experience and security capabilities.

Full Release Notes