Repository navigation
Apps API Version #1238
Description
Activity
conparable to Androids API Level?
Yes similar
The only problem I see here is how we accomplish to run app code in level 1 together at the same time with an app in level 2 ... we then would need for example two different middleware systems -> sounds like a nice idea but could cause heavy headaches once we want to implement this.
There was a discussion on IRC which basically boiled down to.
- No API levels since we are to small to maintain it properly.
- New controllers that do all kinds of fancy stuff. Deprecate old ones. Then the middleware can just check for the controller type
Reacted by Morris JobkeAnother thing we came up with was annotations.
But all in all we will most likely end up with
- Announce new way + explain why
- Start logging deprecation warnings
- At some point switch over and break (after the 3 year dep period most likely).
Altough I must admit I'm still not entirely happy about this.
As it basically makes a lot of security/performance things opt in for a long time. But probabaly not much we can do there right now.
This is my braindump of a conversation between @LukasReschke and myself.
It often happens that we want to introduce new behaviour. This can be for performance benefits or security considerations. However chaning the default behaviour would kill a lot of apps and is thus unacceptable.
Take for example #1127 we could enforce that already with our CSP policy. But that would kill a lot of apps out there. While it is a very good security measure that should be opt-out (if at all) and not opt-in.
So we came up with the idea of an AppAPI (or AAPI). Like we assume the current state AAPIv1. Now if we introduce a breaking change (and lets face it sometimes we have to). We have to create a new AAPI, v2. An app can then declare itself AAPIv2 compatible in the info.xml and we can enable additional secutiry and performance enhancements.
This approach gives us the ability to introduce new default behaviour that overall benefit the App Eco System while not having a hard break point. We will maintain the default deprecation period of 3 years to fase out a deprecated AAPI version.
Toughts? @nickvergessen @icewind1991 @blizzz @MorrisJobke @BernhardPosselt