Oathkeeper Versions Save

A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust white paper. Written in Go.

v0.38.17-beta.1

2 years ago

This release adds CVE scanners for Docker Images and updates several dependencies to resolve CVE issues.

Additionally, support for various tracers has been added, patches to caching and JWT audiences have been made, and more configuration options have been added for various rules.

Bug Fixes

  • Add config schema for tracing for jaeger (#830) (59871fc)

  • Add hiring notice to README (#884) (9dea379)

  • Add ory cli (df8a19b)

  • Allow forwarding query parameters to the session store (#817) (9375f92), closes #786 #786

  • Building docker image for docker-compose (#889) (adf0d1b)

  • Remote_json default configuration (#880) (18788d1), closes #797

  • Use NYT capitalistaion for all Swagger headlines (#859) (8c2da46), closes #503:

    Capitalised all the Swagger headlines for files found in /api.

Code Generation

  • Pin v0.38.17-beta.1 release commit (f16db10)

Documentation

  • Update authz.md (#879) (b6b5824)

  • Use correct casing (58b1d43), closes #900

  • Warn that gzip is unsupported (#835) (78e612e):

    Note to users that gzip responses are as of now unsupported for Cookie and Bearer authenticators. The result is that the subject and extra will not be filled in, and will fail silently.

Features

Unclassified

  • docs: declare s3, gs, and azblob access rule repositories in config schema (#829) (e2433f6), closes #829

Changelog

  • 1f1f03a autogen(docs): regenerate and update changelog
  • 0725820 autogen(docs): regenerate and update changelog
  • 6cb417c autogen(docs): regenerate and update changelog
  • 83cb5c0 autogen(docs): regenerate and update changelog
  • 0dcd1f5 autogen(docs): regenerate and update changelog
  • 38dfbcc autogen(docs): regenerate and update changelog
  • c89737b autogen(docs): regenerate and update changelog
  • 08324dd autogen(docs): regenerate and update changelog
  • 9636c96 autogen(docs): regenerate and update changelog
  • 667aeed autogen(docs): regenerate and update changelog
  • 057293f autogen(docs): regenerate and update changelog
  • e807863 autogen(docs): regenerate and update changelog
  • b131d94 autogen(docs): regenerate and update changelog
  • 255ad15 autogen(docs): regenerate and update changelog
  • 168086e autogen(docs): regenerate and update changelog
  • 317f874 autogen(docs): regenerate and update changelog
  • 133e8a5 autogen(docs): regenerate and update changelog
  • be93f1e autogen(docs): regenerate and update changelog
  • 8a51d52 autogen(docs): update milestone document
  • 7504e1e autogen(docs): update milestone document
  • e785140 autogen(docs): update milestone document
  • 19f2c68 autogen(docs): update milestone document
  • 511d4b7 autogen(docs): update milestone document
  • 9910160 autogen(openapi): Regenerate swagger spec and internal client
  • cf63dc5 autogen(openapi): Regenerate swagger spec and internal client
  • 8db79c9 autogen: add v0.38.15-beta.1 to version.schema.json
  • 737320f autogen: pin v0.38.16-beta.1 release commit
  • f16db10 autogen: pin v0.38.17-beta.1 release commit
  • 5cc648e chore(deps): bump github.com/tidwall/gjson from 1.6.7 to 1.9.3 (#873)
  • 65e53b6 chore: bump alpine version in dockerfiles (#837)
  • 9b41eed chore: remove old sdk generator (#842)
  • e49dbbd chore: update docusaurus template
  • 2d359d9 chore: update docusaurus template
  • a686910 chore: update docusaurus template
  • 3f4c2ed chore: update docusaurus template
  • 23e624d chore: update docusaurus template (#820)
  • 1f64342 chore: update docusaurus template (#821)
  • 9ca90e3 chore: update docusaurus template (#840)
  • 002a2a8 chore: update docusaurus template (#847)
  • 14dd31a chore: update docusaurus template (#866)
  • 1564e0c chore: update docusaurus template (#872)
  • 3381b6c chore: update docusaurus template (#875)
  • 2980573 chore: update docusaurus template (#891)
  • 9f29fc4 chore: update repository templates
  • da516f5 chore: update repository templates
  • 1553c14 chore: update repository templates
  • 9f6644a chore: update repository templates
  • 62ebb22 chore: update repository templates
  • bc70566 chore: update repository templates
  • ee210a3 chore: update repository templates
  • 9c80149 chore: update repository templates (#823)
  • be72846 chore: update repository templates (#825)
  • 80bc079 chore: update repository templates (#827)
  • 1da447d chore: update repository templates (#857)
  • 8f23209 chore: update repository templates (#858)
  • 497cd3c chore: update repository templates (#863)
  • 7cd7bca chore: update repository templates (#864)
  • ade680b chore: update repository templates to 8191b78131173cce8788143f6ad95119d9b813c5
  • b1e772e ci: bump goreleaser (#816)
  • 38d0883 ci: bump orbs (#815)
  • 30ff27f ci: resolve regression issues (#881)
  • e2433f6 docs: declare s3, gs, and azblob access rule repositories in config schema (#829)
  • b6b5824 docs: update authz.md (#879)
  • 58b1d43 docs: use correct casing
  • 78e612e docs: warn that gzip is unsupported (#835)
  • 301b673 feat(jwt): replace jwt module (#818)
  • ec926b0 feat: add retry and timeout support in authorizers (#883)
  • a8c9354 feat: add support for X-Forwarded-Proto header (#665)
  • 1897f31 feat: allow both string and []string in aud field (#822)
  • 1432e2c feat: introduce cve scanning (#839)
  • 5645605 feat: store oauth2 introspection result as bytes in cache (#811)
  • 2f2552d feat: support Zipkin tracer (#832)
  • 59871fc fix: add config schema for tracing for jaeger (#830)
  • 9dea379 fix: add hiring notice to README (#884)
  • df8a19b fix: add ory cli
  • 9375f92 fix: allow forwarding query parameters to the session store (#817)
  • adf0d1b fix: building docker image for docker-compose (#889)
  • 18788d1 fix: remote_json default configuration (#880)
  • 8c2da46 fix: use NYT capitalistaion for all Swagger headlines (#859)

v0.38.15-beta.1

2 years ago

Changelog

29da249 autogen(docs): regenerate and update changelog 4265b9f autogen(docs): regenerate and update changelog a76d057 autogen(docs): regenerate and update changelog b79e1db autogen(docs): regenerate and update changelog a0a1329 autogen(docs): regenerate and update changelog d143d51 autogen(docs): regenerate and update changelog b848adc autogen(docs): regenerate and update changelog 74bc0ca autogen(openapi): Regenerate swagger spec and internal client d9b53ed autogen: add v0.38.14-beta.1 to version.schema.json 95185bb autogen: pin v0.38.15-beta.1 release commit 4a3dfed chore: adjust CODEOWNERS da391df chore: update docusaurus template 7ad4f56 chore: update docusaurus template cf1a568 chore: update docusaurus template f329818 chore: update docusaurus template 344ef00 chore: update repository templates 96dca28 chore: update repository templates 71b49f8 chore: use patched version of ory/x (#803) 57a9aa4 docs: naming e1cc575 feat: add preserve_host to session and bearer configs 390abe3 feat: add support for additional headers in check_session and bearer token 1f6c430 fix: do not modify original headers

Docker images

  • docker pull oryd/oathkeeper:v0
  • docker pull oryd/oathkeeper:v0.38
  • docker pull oryd/oathkeeper:v0.38.15
  • docker pull oryd/oathkeeper:v0.38.15-beta.1
  • docker pull oryd/oathkeeper:latest
  • docker pull oryd/oathkeeper:v0-alpine
  • docker pull oryd/oathkeeper:v0.38-alpine
  • docker pull oryd/oathkeeper:v0.38.15-alpine
  • docker pull oryd/oathkeeper:v0.38.15-beta.1-alpine
  • docker pull oryd/oathkeeper:latest-alpine

v0.38.14-beta.1

2 years ago

Ory Oathkeeper v0.38.14-beta.1 addresses a vunlerability in jwt-go by bumping the dependency to v3.2.4.

Bug Fixes

Code Generation

  • Pin v0.38.14-beta.1 release commit (4918be0)

Documentation

  • Fix erroneous sidebar commit (6e3e1a2)

Features

Reverts

  • Fix goreleaser/render-version-schema step (#789) (#790) (d33e3e1):

    This reverts commit d306aa61401b047c232352da47f189a5cd0d4f23.

Changelog

9bff69b autogen(docs): generate and format documentation 306e591 autogen(docs): generate and format documentation 4880c7e autogen(docs): regenerate and update changelog c6842f3 autogen(docs): regenerate and update changelog d52ad6a autogen(docs): regenerate and update changelog c6bcfb2 autogen(docs): regenerate and update changelog 4d4c540 autogen(docs): regenerate and update changelog d717e6c autogen(docs): regenerate and update changelog 62abbfe autogen(docs): regenerate and update changelog 1b29869 autogen(docs): regenerate and update changelog ab7fd18 autogen(docs): regenerate and update changelog 6ef590f autogen(docs): regenerate and update changelog 2cfc7ef autogen(docs): regenerate and update changelog a8cbd79 autogen(docs): regenerate and update changelog 3381815 autogen(docs): regenerate and update changelog d923e64 autogen(openapi): Regenerate swagger spec and internal client 5bbc5dc autogen: pin v0.38.13-beta.1 release commit 4918be0 autogen: pin v0.38.14-beta.1 release commit 199b7ee autogen: pin v0.38.14-beta.1.pre.1 release commit 0d9adbd autogen: pin v0.38.14-beta.1.pre.2 release commit 79459ca chore: bump jwt-go (#766) 017ca8a chore: update docusaurus template (#764) f67d936 chore: update docusaurus template (#769) ee66c46 chore: update docusaurus template (#772) b482431 chore: update docusaurus template (#774) 28596d5 chore: update docusaurus template (#776) 37d8d6a chore: update docusaurus template (#777) 2af2700 chore: update docusaurus template (#778) 02dbf09 chore: update docusaurus template (#780) 6ae63ae chore: update docusaurus template (#781) 9c9b2b4 chore: update docusaurus template (#783) 62048ad chore: update docusaurus template (#784) 443ef7c chore: update docusaurus template (#785) f7bfafd chore: update repository templates (#759) 029658d chore: update repository templates (#761) 4f3e67d chore: update repository templates (#762) aed0216 chore: update repository templates (#771) 13e1b40 chore: update repository templates (#788) d306aa6 ci: fix goreleaser/render-version-schema step (#789) c7860dd ci: fix goreleaser/render-version-schema step (#791) 6e3e1a2 docs: fix erroneous sidebar commit e0f3bd5 feat: add redoc doc generator (#782) 3d50ab4 fix: update docs deps d33e3e1 revert: fix goreleaser/render-version-schema step (#789) (#790)

Docker images

  • docker pull oryd/oathkeeper:v0
  • docker pull oryd/oathkeeper:v0.38
  • docker pull oryd/oathkeeper:v0.38.14
  • docker pull oryd/oathkeeper:v0.38.14-beta.1
  • docker pull oryd/oathkeeper:latest
  • docker pull oryd/oathkeeper:v0-alpine
  • docker pull oryd/oathkeeper:v0.38-alpine
  • docker pull oryd/oathkeeper:v0.38.14-alpine
  • docker pull oryd/oathkeeper:v0.38.14-beta.1-alpine
  • docker pull oryd/oathkeeper:latest-alpine

v0.38.12-beta.1

2 years ago

Changelog

1f9f625 Merge pull request from GHSA-qvp4-rpmr-xwrr f28e63e autogen(docs): generate and format documentation ae1b979 autogen(docs): generate and format documentation 28fdbb2 autogen(docs): generate and format documentation 283f892 autogen(docs): regenerate and update changelog 325e27f autogen(docs): regenerate and update changelog 0f067f2 autogen(docs): regenerate and update changelog c82660e autogen(docs): regenerate and update changelog 7406112 autogen(docs): regenerate and update changelog acea339 autogen(docs): regenerate and update changelog 4a25136 autogen(docs): regenerate and update changelog 6a31df1 autogen(docs): regenerate and update changelog 6442901 autogen(docs): regenerate and update changelog 9b07168 autogen(docs): regenerate and update changelog bca7d9d autogen(docs): regenerate and update changelog 3a72885 autogen(docs): regenerate and update changelog 03c6bd0 autogen(docs): regenerate and update changelog d4cb626 autogen(docs): regenerate and update changelog 57f62d5 autogen(openapi): Regenerate swagger spec and internal client ae23224 autogen: pin v0.38.12-beta.1 release commit 615a2df autogen: pin v0.38.12-beta.1.pre.0 release commit 853ad87 autogen: pin v0.38.12-beta.1.pre.1 release commit 5fbdabd chore: update README (#750) 4b69c53 chore: update docusaurus template (#739) 993b4d9 chore: update docusaurus template (#746) be4331b chore: update repository templates (#735) 9df136c chore: update repository templates (#738) 31fdb7d chore: update repository templates (#749) 5fc3c75 chore: update repository templates (#753) 64ac756 ci: add codeql b3d117b feat: Ability to Configure Remote Authorizers to set Headers in AuthenticationSession (#717) 22b0dbe feat: add request header in match context (#719) 5613f65 feat: improved JWT Authorizer JWKs fetching (#726) 52f1c7b fix: add docs/node_modules target 3a9ae1a fix: cache introspection pre-auth (#723) 2ccbb2f fix: ensure no vulnerable jwt-go deep dependency is being used (#745) 598d48c fix: makefile and sdk issues 83c5349 test: add improved preauth tests (#758) c444d46 test: resolve waiting forever regression (#755) e4e2263 test: resolve windows build failures (#754)

Docker images

  • docker pull oryd/oathkeeper:v0
  • docker pull oryd/oathkeeper:v0.38
  • docker pull oryd/oathkeeper:v0.38.12
  • docker pull oryd/oathkeeper:v0.38.12-beta.1
  • docker pull oryd/oathkeeper:latest
  • docker pull oryd/oathkeeper:v0-alpine
  • docker pull oryd/oathkeeper:v0.38-alpine
  • docker pull oryd/oathkeeper:v0.38.12-alpine
  • docker pull oryd/oathkeeper:v0.38.12-beta.1-alpine
  • docker pull oryd/oathkeeper:latest-alpine

v0.38.11-beta.1

3 years ago

This release primarily addresses issues in the SDK build pipeline.

0.38.11-beta.1 (2021-05-13)

Bug Fixes

Reverts

  • Init introspect http client once (#714) (#722) (c58cbd9):

    This reverts commit e203ad14ac0e78909e7d42aa214c47a708a7c136.

Changelog

99d09cb autogen(docs): generate and format documentation c36bf3a autogen(docs): regenerate and update changelog f30d1dc autogen(docs): regenerate and update changelog 1917072 autogen(docs): regenerate and update changelog f498ec5 autogen(docs): regenerate and update changelog 413393f autogen: pin v0.38.11-beta.1 release commit e203ad1 fix: init introspect http client once (#714) 766b071 fix: log credentials verifier error details (#713) c58cbd9 revert: init introspect http client once (#714) (#722)

Docker images

  • docker pull oryd/oathkeeper:v0
  • docker pull oryd/oathkeeper:v0.38
  • docker pull oryd/oathkeeper:v0.38.11
  • docker pull oryd/oathkeeper:v0.38.11-beta.1
  • docker pull oryd/oathkeeper:latest
  • docker pull oryd/oathkeeper:v0-alpine
  • docker pull oryd/oathkeeper:v0.38-alpine
  • docker pull oryd/oathkeeper:v0.38.11-alpine
  • docker pull oryd/oathkeeper:v0.38.11-beta.1-alpine
  • docker pull oryd/oathkeeper:latest-alpine

v0.38.10-beta.2

3 years ago

This release improves the health status manager, cache management, improves JSON Web Token debuggability, and resolves other issues.

0.38.10-beta.2 (2021-05-05)

Bug Fixes

  • Register makefile tasks (2832a77)
  • Resolve makefile issues (9df3b2a)
  • Set cost 1 when caching tokens with configurable max cost (#680) (8db0e9d)
  • Update shebangs to use bash from /usr/bin/env instead of /bin/ for better portability (#694) (e522062)

Code Refactoring

Documentation

  • Add dotnet sdk (#683) (05ae925):

    • docs: add dotnet sdk

    • docs: add dotnet sdk versioned

  • Change forum to discussions readme (#690) (d942c04)

  • Consistent authz headers (#699) (19948e1):

    Removes the "Authorizer" prefix from a few of the authorizers to make them all consistent.

  • Fix typo (#696) (eda83f1)

  • Point to deny authz (#701) (4f01963), closes #700

Features

  • Add health event manager and rules readiness probe (#674) (01d8588)

  • Add http method into session.MatchContext (#676) (e15a7a5), closes #625

  • Add support for requesting an audience to the OAuth2 Introspection pr… (#678) (2405810), closes #677

  • Additional JWT auth debug information (#681) (d08ab50), closes #668:

    JWT Claims added to error details field.

  • Adds audience into Extra at oAuth2 introspection (#480) (c9faecc)

  • Global docs sidebar and added cloud pages (#705) (f67241f)

Changelog

8a7177d autogen(docs): generate and format documentation 0dba0d0 autogen(docs): generate and format documentation fa4e630 autogen(docs): generate and format documentation c0f5276 autogen(docs): regenerate and update changelog a9646e4 autogen(docs): regenerate and update changelog 2f6d825 autogen(docs): regenerate and update changelog 852fbc1 autogen(docs): regenerate and update changelog 5f89a2d autogen(docs): regenerate and update changelog 9c8a382 autogen(docs): regenerate and update changelog 59d9652 autogen(docs): regenerate and update changelog c200545 autogen(docs): regenerate and update changelog 3df325e autogen(docs): regenerate and update changelog 5b1d37b autogen(docs): regenerate and update changelog 275d670 autogen(docs): regenerate and update changelog c8ebe55 autogen(docs): regenerate and update changelog e8efa64 autogen(docs): regenerate and update changelog 5e6a432 autogen(docs): update milestone document 945be65 autogen(openapi): Regenerate swagger spec and internal client 6d35551 autogen: add v0.38.9-beta.1 to version.schema.json 16e8e42 autogen: pin v0.38.10-beta.1 release commit 4b3403b autogen: pin v0.38.10-beta.2 release commit 15b5818 autogen: pin v0.38.10-beta.2.pre.1 release commit 4df7048 chore: add package-lock.json (#687) 2914a81 chore: add prettier (#688) a6d6365 chore: fix sdk links (#684) 44870bb chore: revert go mod changes dff8531 chore: update docusaurus template 3a80c53 chore: update docusaurus template 0913cfe chore: update docusaurus template 3d6254b chore: update docusaurus template (#666) 0823fe7 chore: update docusaurus template (#679) e444059 chore: update docusaurus template (#692) 27d8ca2 chore: update docusaurus template (#703) a423eed chore: update docusaurus template (#704) 3bc15a9 chore: update repository templates (#675) 621ef68 chore: update repository templates (#686) de190e1 chore: update repository templates (#702) 05ae925 docs: add dotnet sdk (#683) d942c04 docs: change forum to discussions readme (#690) 19948e1 docs: consistent authz headers (#699) eda83f1 docs: fix typo (#696) 4f01963 docs: point to deny authz (#701) 01d8588 feat: add health event manager and rules readiness probe (#674) e15a7a5 feat: add http method into session.MatchContext (#676) 2405810 feat: add support for requesting an audience to the OAuth2 Introspection pr… (#678) d08ab50 feat: additional JWT auth debug information (#681) c9faecc feat: adds audience into Extra at oAuth2 introspection (#480) f67241f feat: global docs sidebar and added cloud pages (#705) 2832a77 fix: register makefile tasks 9df3b2a fix: resolve makefile issues 8db0e9d fix: set cost 1 when caching tokens with configurable max cost (#680) e522062 fix: update shebangs to use bash from /usr/bin/env instead of /bin/ for better portability (#694) 7dc37fd refactor: move api.json

Docker images

  • docker pull oryd/oathkeeper:v0
  • docker pull oryd/oathkeeper:v0.38
  • docker pull oryd/oathkeeper:v0.38.10
  • docker pull oryd/oathkeeper:v0.38.10-beta.2
  • docker pull oryd/oathkeeper:latest
  • docker pull oryd/oathkeeper:v0-alpine
  • docker pull oryd/oathkeeper:v0.38-alpine
  • docker pull oryd/oathkeeper:v0.38.10-alpine
  • docker pull oryd/oathkeeper:v0.38.10-beta.2-alpine
  • docker pull oryd/oathkeeper:latest-alpine

v0.38.9-beta.1

3 years ago

This release adds support for X-Forwarded-Proto, passes tracing contexts to downstream requests, bumps Go to 1.16, and resolves issues preventing the log level from being set to trace level. Additionally included are improvements to the overall tracing set up, a cookie authenticator bugfix, and a bugfix for glob pattern matching.

0.38.9-beta.1 (2021-03-17)

Bug Fixes

  • Accept lower and uppercase in bearer token handler (6e46d4a)

  • Add support for X-Forwarded-Proto header (#638) (6eb83fd), closes #153

  • Ignore cookie auth when no cookies set (c84d880)

  • Make glob patterns match only one path segment. (#664) (c711aac), closes #630:

    This makes / also a separator as well as the presumably default value of .. This allows using <*> for matching only one path segment.

  • Pass context through to external requests (#627) (ee25197):

    Enables proper tracing through Jaeger etc

  • Resolve goreleaser issues and bump golang (7291df9)

  • Update goreleaser config (9689f45)

  • Update log schema (78e654d)

Features

Unclassified

  • Add missing documentation for oauth2_introspection (#648) (34cf38c), closes #549
  • Formatting (546691b)
  • Add tracing to outbound oauth introspection requests (daf44cb)

Changelog

daf44cb Add tracing to outbound oauth introspection requests 546691b Formatting 4e1aed9 autogen(docs): generate and format documentation 2e85095 autogen(docs): generate and format documentation 460791f autogen(docs): generate and format documentation abe629c autogen(docs): generate and format documentation b897d06 autogen(docs): generate and format documentation f3561e6 autogen(docs): generate and format documentation fe013c2 autogen(docs): generate and format documentation c246e19 autogen(docs): generate and format documentation 94c9903 autogen(docs): regenerate and update changelog 7190ec7 autogen(docs): regenerate and update changelog ae5417d autogen(docs): regenerate and update changelog ef9153e autogen(docs): regenerate and update changelog e27cdab autogen(docs): regenerate and update changelog eb53de7 autogen(docs): regenerate and update changelog 10a9ba6 autogen(docs): regenerate and update changelog 2632da7 autogen(docs): regenerate and update changelog 6eafbbb autogen(docs): update milestone document ccab9eb autogen(openapi): Regenerate swagger spec and internal client 3b37928 autogen: pin v0.38.7-beta.1 release commit 2943e9a autogen: pin v0.38.8-beta.1 release commit 9ad41f0 autogen: pin v0.38.9-beta.1 release commit 7afdc40 autogen: pin v0.38.9-beta.1.pre.1 release commit 9695b77 autogen: pin v0.38.9-beta.1.pre.2 release commit 7725554 autogen: pin v0.38.9-beta.1.pre.3 release commit a8f4a7b autogen: pin v0.38.9-beta.1.pre.4 release commit 19fa7a5 chore: update repository templates (#637) f40a5ef chore: update repository templates (#639) 21be89b chore: update repository templates (#653) 82a80ef ci: add go orb d2ad33c ci: bump cci orbs 68889e7 ci: bump ci timeout cda6b00 ci: bump goreleaser orb 2a282e0 ci: bump orbs 1648f84 ci: bump orbs 1f10386 ci: disable changelog cache e00c10b ci: remove missing dependency 34cf38c doc: add missing documentation for oauth2_introspection (#648) e74d4a2 feat: bump to go 1.16 6a3f5d3 feat: resolve go mod issues 6e46d4a fix: accept lower and uppercase in bearer token handler 6eb83fd fix: add support for X-Forwarded-Proto header (#638) c84d880 fix: ignore cookie auth when no cookies set c711aac fix: make glob patterns match only one path segment. (#664) ee25197 fix: pass context through to external requests (#627) 7291df9 fix: resolve goreleaser issues and bump golang 9689f45 fix: update goreleaser config 78e654d fix: update log schema

Docker images

  • docker pull oryd/oathkeeper:v0
  • docker pull oryd/oathkeeper:v0.38
  • docker pull oryd/oathkeeper:v0.38.9
  • docker pull oryd/oathkeeper:v0.38.9-beta.1
  • docker pull oryd/oathkeeper:latest
  • docker pull oryd/oathkeeper:v0-alpine
  • docker pull oryd/oathkeeper:v0.38-alpine
  • docker pull oryd/oathkeeper:v0.38.9-alpine
  • docker pull oryd/oathkeeper:v0.38.9-beta.1-alpine
  • docker pull oryd/oathkeeper:latest-alpine

v0.38.6-beta.1

3 years ago

We are happy to announce Dart and Rust SDKs for Ory Oathkeeper! Additionally, a new bearer_token authenticator has been added.

0.38.6-beta.1 (2021-01-27)

Documentation

  • Add Rust and Dart SDKs (1524fed):

    We now support for Rust and Dart SDKs!

  • Fix js npm links (#634) (c339fee)

  • Rename index documents (7de0ac3)

Features

  • Add bearer_token authenticator (#613) (b623ae7):

    Adds a new authenticator to work with Kratos' new API token. Works the same as the cookie_session authenticator but checks for a bearer token in the Authorization header (unless overwritten by token_from)

Changelog

9c1b0cd autogen(docs): generate and format documentation b0924e5 autogen(docs): generate and format documentation ccd6f40 autogen(docs): regenerate and update changelog 0116e70 autogen(docs): regenerate and update changelog e316eda autogen(docs): regenerate and update changelog fe669b4 autogen(docs): regenerate and update changelog 0769ae3 autogen(docs): regenerate and update changelog 033f543 autogen(docs): regenerate and update changelog 53bb137 autogen(docs): regenerate and update changelog 83cf923 autogen(openapi): Regenerate swagger spec and internal client d4723b4 autogen: add v0.38.5-beta.1 to version.schema.json a0c4d7f autogen: pin v0.38.6-beta.1 release commit 4596f0d chore(modules): update dependencies to mitigate security issues (#635) bf53018 chore: bump gjson (#632) a8da3e9 chore: update docusaurus template (#617) 86170df chore: update repository templates (#616) f0b99d7 chore: update repository templates (#622) 1524fed docs: add Rust and Dart SDKs c339fee docs: fix js npm links (#634) 7de0ac3 docs: rename index documents b623ae7 feat: add bearer_token authenticator (#613) 0e0c1f5 style: format

Docker images

  • docker pull oryd/oathkeeper:v0
  • docker pull oryd/oathkeeper:v0.38
  • docker pull oryd/oathkeeper:v0.38.6
  • docker pull oryd/oathkeeper:v0.38.6-beta.1
  • docker pull oryd/oathkeeper:latest
  • docker pull oryd/oathkeeper:v0-alpine
  • docker pull oryd/oathkeeper:v0.38-alpine
  • docker pull oryd/oathkeeper:v0.38.6-alpine
  • docker pull oryd/oathkeeper:v0.38.6-beta.1-alpine
  • docker pull oryd/oathkeeper:latest-alpine

v0.38.5-beta.1

3 years ago

The ORY Community is proud to present you the next iteration of ORY Oathkeeper. In this release, we focused on improving production stability and resolved several pesky bugs!

0.38.5-beta.1 (2020-12-10)

Bug Fixes

  • Check content-length header in lowercase (#530) (a68fc8a):

    Issue #422 didn't fix the problem with the requests' Content-Length being copied in the responses because the check was case-sensitive and unit tests didn't cover it.

  • Never construct id token claim templates in parallel (#552) (4f504d9), closes #551

  • Remove token_type validation from introspection handler (#556) (b18d90a), closes #553

  • Support windows file paths (#557) (6a05682), closes #514 #332

  • Update dd-trace to fix build (2e571fa)

Documentation

Features

  • Forward original authorization header when using remote (json) authorizer (#554) (f4f781e), closes #528
  • Use google/go-cloud to fetch rules and credentials from object storage (#562) (666b951), closes #518 #518

Unclassified

Changelog

646e1fc autogen(docs): generate and format documentation a5fc47d autogen(docs): generate and format documentation 9a37e73 autogen(docs): generate and format documentation fba62b4 autogen(docs): generate and format documentation 44e65c7 autogen(docs): generate and format documentation 4da8cef autogen(docs): generate and format documentation 381927c autogen(docs): regenerate and update changelog 89947a7 autogen(docs): regenerate and update changelog 93e39f7 autogen(docs): regenerate and update changelog 23b3539 autogen(docs): regenerate and update changelog eca4dbf autogen(docs): regenerate and update changelog cac465b autogen(docs): regenerate and update changelog 35e0f6d autogen(docs): regenerate and update changelog ad382a6 autogen(docs): regenerate and update changelog 5aa70eb autogen(docs): regenerate and update changelog e36ae92 autogen(docs): regenerate and update changelog 3926efa autogen(docs): regenerate and update changelog 8c26683 autogen(docs): regenerate and update changelog f5be0f4 autogen(docs): regenerate and update changelog 606d0da autogen(docs): regenerate and update changelog 45d5914 autogen(docs): regenerate and update changelog 32df8f1 autogen(docs): regenerate and update changelog 624f7d6 autogen(docs): regenerate and update changelog 212615d autogen(docs): regenerate and update changelog 6940ca9 autogen(docs): regenerate and update changelog 7627230 autogen(docs): regenerate and update changelog 8be8542 autogen(docs): regenerate and update changelog 5501e17 autogen(docs): regenerate and update changelog 408e9f2 autogen(docs): update milestone document 4cb3691 autogen(docs): update milestone document a9f8630 autogen(docs): update milestone document 5794b23 autogen(docs): update milestone document a598b1c autogen(docs): update milestone document 1dd8fe9 autogen(docs): update milestone document dbe1987 autogen(docs): update milestone document 244b781 autogen(docs): update milestone document 85df0e1 autogen(docs): update milestone document 9b9ce0c autogen(docs): update milestone document aa7b080 autogen(openapi): Regenerate swagger spec and internal client d1ed570 autogen: add v0.38.4-beta.1 to version.schema.json f4a04da autogen: pin v0.38.5-beta.1 release commit 497ef9c autogen: pin v0.38.5-beta.1.pre.0 release commit 0e2bc45 autogen: pin v0.38.5-beta.1.pre.1 release commit d29a0b1 chore: update docusaurus template c2e1841 chore: update docusaurus template (#540) 8a22fcf chore: update docusaurus template (#547) ea88254 chore: update docusaurus template (#559) aa19fad chore: update docusaurus template (#561) 648c34b chore: update docusaurus template (#567) cd9dab9 chore: update docusaurus template (#573) 55733a3 chore: update docusaurus template (#577) 292933a chore: update docusaurus template (#583) 764209e chore: update docusaurus template (#585) 5c211fd chore: update docusaurus template (#588) 742a072 chore: update docusaurus template (#589) 00dee96 chore: update docusaurus template (#590) d0a0ecd chore: update docusaurus template (#592) 47b1e17 chore: update docusaurus template (#596) 306e830 chore: update docusaurus template (#598) af0cfa8 chore: update docusaurus template (#607) 780e9ce chore: update docusaurus template (#608) 9d1dbde chore: update docusaurus template (#610) 44b80e2 chore: update docusaurus template (#611) 5d7c05a chore: update docusaurus template (#612) a34e30a chore: update repository templates (#546) 8085fe0 chore: update repository templates (#571) e02af30 chore: update repository templates (#581) 181a4a1 chore: update repository templates (#584) 2b0df6a chore: update repository templates (#586) d1e4153 chore: update sprig to v3 and bump Golang (#548) 335189f docs. fix typo in list a3c9584 docs: add contributing to sidebar (#595) 3c02e22 docs: add newsletter to config 34e2077 docs: correct sidebar.json (#524) 393af92 docs: fix typo 6a30ce2 docs: fix typo in API access rules and improve layout (#599) 5d04c6b docs: fix typo in pipeline/error.md (#568) 1c2241c docs: resolve list in main docs 82008b2 docs: resolve regression issues f4f781e feat: forward original authorization header when using remote (json) authorizer (#554) 666b951 feat: use google/go-cloud to fetch rules and credentials from object storage (#562) a68fc8a fix: check content-length header in lowercase (#530) 4f504d9 fix: never construct id token claim templates in parallel (#552) b18d90a fix: remove token_type validation from introspection handler (#556) 6a05682 fix: support windows file paths (#557) 2e571fa fix: update dd-trace to fix build

Docker images

  • docker pull oryd/oathkeeper:v0
  • docker pull oryd/oathkeeper:v0.38
  • docker pull oryd/oathkeeper:v0.38.5
  • docker pull oryd/oathkeeper:v0.38.5-beta.1
  • docker pull oryd/oathkeeper:latest
  • docker pull oryd/oathkeeper:v0-alpine
  • docker pull oryd/oathkeeper:v0.38-alpine
  • docker pull oryd/oathkeeper:v0.38.5-alpine
  • docker pull oryd/oathkeeper:v0.38.5-beta.1-alpine
  • docker pull oryd/oathkeeper:latest-alpine

v0.38.4-beta.1

3 years ago

This release stabilizes several features and resolves a couple of bugs.

0.38.4-beta.1 (2020-09-28)

Bug Fixes

  • Add tests in error_redirect_test.go (#522) (24bdd9b):

    Increased tests coverage to cover for all the three valid scenarios - http absolute, https absolute, relative. Explicitly checked Location path to ensure that correct uri scheme was returned

  • Deprecated key in goreleaser config (2a4f901)

  • Ignore x/net false positives (bc8a32c)

  • Misleading HTTP status code for oauth2_client_credentials authenticator (#504) (0f65631), closes #496

Documentation

  • Fix broken links (dd3bfbe)

  • Fix OAuth2 Introspect Authn Config Documentation (#498) (7612e20):

    Switch the definitions for the pre-authorisation fields 'scope' and 'token endpoint' in the documentation.

  • Fix sidebar (28247fc)

  • Guide for integrating with ORY Hydra (#497) (e1b1751)

  • Move development section (582a4d0)

  • Move to json sidebar (b67230d)

  • Remove duplicate template (01550b4)

  • Update repository templates (2aaf766)

  • Update repository templates (#506) (cb53d79)

Features

  • Add and automate version schema (7ab4012)

  • Add url_param config option to redirect error handler. (#520) (b5bb3bc), closes #511:

    This change introduces a url_param config option for redirect error handler. If it contains a url paramter name, the redirect url will have this parameter set, containing the current url (from which Oathkeeper has redirected the user).

    This can be useful in passing the return_to url to Kratos, so user can be redirected to the page they initially wanted to access after a successfull sign in.

  • Log invalid credentials on info level instead of error/warning (#517) (a372b5f), closes #505

  • Use uri-reference for errors redirect to allow relative urls (#516) (0d39674)

Unclassified

Changelog

067059b autogen(docs): generate and format documentation b35f815 autogen(docs): regenerate and update changelog 438549a autogen(docs): regenerate and update changelog 4048486 autogen(docs): regenerate and update changelog 95bda99 autogen(docs): regenerate and update changelog d0f0e6a autogen(docs): regenerate and update changelog 3652a77 autogen(docs): regenerate and update changelog e09bffc autogen(docs): regenerate and update changelog 12ea280 autogen(docs): regenerate and update changelog 2b11885 autogen(docs): regenerate and update changelog cd04902 autogen(docs): regenerate and update changelog b6c74d9 autogen(docs): regenerate and update changelog 41bed19 autogen(docs): regenerate and update changelog 5ce14a3 autogen(docs): regenerate and update changelog 208a04e autogen(docs): regenerate and update changelog 8f03af8 autogen(docs): regenerate and update changelog 9a6fdc7 autogen(docs): regenerate and update changelog 5520ccb autogen(docs): regenerate and update changelog c43dab8 autogen(docs): regenerate and update changelog 79cd67d autogen(docs): regenerate and update changelog f77bfe3 autogen(docs): update milestone document 26f1861 autogen(docs): update milestone document 5848da5 autogen(docs): update milestone document 8bcca22 autogen(docs): update milestone document 54dba1e autogen(docs): update milestone document 4580ab1 autogen(docs): update milestone document aff4a37 autogen(docs): update milestone document 1c997b2 autogen: pin v0.38.4-beta.1 release commit 85a36e8 autogen: pin v0.38.4-beta.1 release commit 19257be chore: update docusaurus template 124725f chore: update docusaurus template 6197043 chore: update docusaurus template 50f0c73 chore: update docusaurus template a25b59a chore: update docusaurus template (#519) 7f42386 chore: update repository templates (#523) 78afdb1 ci: add labels 44eebdc ci: add labels action 82f838b ci: add milestone action c7183f0 ci: add stale bot 6c5bd0b ci: bump milestone-action 4c25369 ci: bump milestone-action b7998b1 ci: bump ory/goreleaser orb dependency 48ebb50 ci: ignore etcd CVEs f3d01d6 ci: re-add milestone fc8da80 ci: run docs action as cronjob 908c9e5 ci: update milestone action b6d5d7f ci: use v0 for milestone 7612e20 docs: fix OAuth2 Introspect Authn Config Documentation (#498) dd3bfbe docs: fix broken links 28247fc docs: fix sidebar e1b1751 docs: guide for integrating with ORY Hydra (#497) 582a4d0 docs: move development section b67230d docs: move to json sidebar 01550b4 docs: remove duplicate template 2aaf766 docs: update repository templates cb53d79 docs: update repository templates (#506) 7ab4012 feat: add and automate version schema b5bb3bc feat: add url_param config option to redirect error handler. (#520) a372b5f feat: log invalid credentials on info level instead of error/warning (#517) 0d39674 feat: use uri-reference for errors redirect to allow relative urls (#516) 24bdd9b fix: add tests in error_redirect_test.go (#522) 2a4f901 fix: deprecated key in goreleaser config bc8a32c fix: ignore x/net false positives 0f65631 fix: misleading HTTP status code for oauth2_client_credentials authenticator (#504) 2c25a2a styles: run go format

Docker images

  • docker pull oryd/oathkeeper:v0
  • docker pull oryd/oathkeeper:v0.38
  • docker pull oryd/oathkeeper:v0.38.4
  • docker pull oryd/oathkeeper:v0.38.4-beta.1
  • docker pull oryd/oathkeeper:latest
  • docker pull oryd/oathkeeper:v0-alpine
  • docker pull oryd/oathkeeper:v0.38-alpine
  • docker pull oryd/oathkeeper:v0.38.4-alpine
  • docker pull oryd/oathkeeper:v0.38.4-beta.1-alpine
  • docker pull oryd/oathkeeper:latest-alpine