Commit Graph

Select branches

Hide Pull Requests

feat/oidcgate

fix-redirect-url-with-hash

fix/cookie-path-scoping

improve-speed

main

release-0.7.2

release-0.7.6

test-pr-reviews

#1

#10

#100

#101

#102

#103

#104

#109

#111

#112

#113

#114

#117

#118

#119

#121

#126

#128

#130

#131

#136

#137

#138

#139

#140

#141

#141

#142

#143

#143

#144

#18

#20

#22

#23

#24

#26

#28

#29

#31

#35

#36

#39

#40

#41

#43

#52

#54

#58

#59

#66

#68

#69

#70

#72

#73

#76

#78

#80

#83

#88

#9

#93

#96

#99

v0.3.1

v0.3.2

v0.3.3

v0.3.4

v0.3.5

v0.3.6

v0.3.7-rc1

v0.3.7-rc2

v0.3.7-rc3

v0.3.8

v0.3.9

v0.4.0

v0.4.1

v0.4.10

v0.4.2

v0.4.3-beta

v0.4.3-beta.2

v0.4.3-beta.3

v0.4.3-beta.4

v0.4.4

v0.4.5

v0.4.6

v0.4.7

v0.4.8

v0.4.9

v0.5.0

v0.5.11

v0.5.13

v0.5.15

v0.5.18

v0.5.20

v0.5.25

v0.5.27

v0.5.29

v0.5.3

v0.5.34

v0.5.36

v0.5.41

v0.5.44

v0.5.46

v0.5.48

v0.5.5

v0.5.50

v0.5.51-beta.1

v0.5.51-beta.2

v0.5.51-beta.3

v0.5.51-beta.4

v0.5.51-beta.5

v0.5.51-beta.6

v0.5.51-beta.7

v0.5.8

v0.6.0

v0.6.1

v0.6.2-beta10

v0.6.2-beta5

v0.6.2-beta6

v0.6.2-beta7

v0.6.2-beta8

v0.6.2-beta9

v0.7.0-beta1

v0.7.0-beta10

v0.7.0-beta11

v0.7.0-beta12

v0.7.0-beta14

v0.7.0-beta15

v0.7.0-beta16

v0.7.0-beta17

v0.7.0-beta2

v0.7.0-beta3

v0.7.0-beta4

v0.7.0-beta5

v0.7.0-beta6

v0.7.0-beta7

v0.7.0-beta8

v0.7.0-beta9

v0.7.0-rc.1

v0.7.0-rc.2

v0.7.0-rc.3

v0.7.0-rc.3-beta1

v0.7.0-rc.4

v0.7.0-rc.5

v0.7.1

v0.7.10

v0.7.2

v0.7.3

v0.7.4

v0.7.5

v0.7.5-rc.1

v0.7.5-rc.2

v0.7.6

v0.7.7

v0.7.8

v0.7.9

v0.8.0

v0.8.0-rc.1

v0.8.0-rc.2

v0.8.0-rc.3

v0.8.0-rc.4

v0.8.1

v0.8.10

v0.8.11

v0.8.13

v0.8.14

v0.8.15

v0.8.16

v0.8.17

v0.8.19

v0.8.20

v0.8.21

v0.8.22

v0.8.23

v0.8.24

v0.8.25

v0.8.26

v0.8.27

v0.8.4

v0.8.6

v0.8.7

v0.8.8

v0.8.9

v1.0.1

v1.0.10

v1.0.11

v1.0.12

v1.0.14

v1.0.15

v1.0.16

v1.0.17

v1.0.18

v1.0.19

v1.0.20

v1.0.21

v1.0.22

v1.0.23

v1.0.25

v1.0.26

v1.0.3

v1.0.5

v1.0.7

v1.0.8

Mono Color

• 8ffd80193a chore(release): v1.0.26 v1.0.26 github-actions[bot] 2026-05-30 13:13:08 +00:00
• 546ceb949c security: remediate audit findings (ranks 1–16 + 22 Lows) + yaegi load validation (#144) main lukaszraczylo 2026-05-30 14:10:32 +01:00
• bc02901972 chore(release): v1.0.25 v1.0.25 github-actions[bot] 2026-05-30 12:26:23 +00:00
• f75b2f20e0 fix: resolve cache eviction lock-up and migrate telemetry [patch-release] lukaszraczylo 2026-05-30 13:22:03 +01:00
• 227de89d33 feat: add cookiePath config to scope session cookies to subpath fix/cookie-path-scoping Hermes Agent 2026-05-27 21:42:28 +01:00
• cf6ed1da55 feat: feat: add extraAuthParams (extra authorization request parameters) (#139) v1.0.23 paiking1 2026-05-27 23:41:09 +03:00
• f821b8829b fix: remove write-lock convoy in getLocal + fix mutateState CAS bug v1.0.22 lukaszraczylo 2026-05-25 00:06:47 +01:00
• 5f9c574f95 refactor: delete dead non-RS validators; tests use RS variants v1.0.21 lukaszraczylo 2026-05-23 13:04:26 +01:00
• 7c6f09fb20 feat(middleware): RS-aware token validators (kill ~21 RLocks/request) v1.0.20 lukaszraczylo 2026-05-23 12:38:42 +01:00
• 68e1c4319c feat(middleware): per-request context object (requestState) v1.0.19 lukaszraczylo 2026-05-23 12:22:51 +01:00
• 17e3f8ef62 fix: snapshot patterns for refresh-tracker and metadata URLs v1.0.18 lukaszraczylo 2026-05-23 11:31:51 +01:00
• 827926bc3a fix(refresh-coordinator): trim per-request mutex/map ops v1.0.17 lukaszraczylo 2026-05-23 11:23:16 +01:00
• abbfdb02a7 fix(jwk): replace JWKCache.mutex with singleflight pattern v1.0.16 lukaszraczylo 2026-05-23 11:05:24 +01:00
• 72e2b682bb fix: eliminate per-request global mutexes in Yaegi hot paths v1.0.15 lukaszraczylo 2026-05-23 10:47:21 +01:00
• 4fa579ccf4 test(oidcgate): integration test with real middleware against mock IdP (#142) feat/oidcgate lukaszraczylo 2026-05-23 03:12:17 +01:00
• ae4ccaa89d fix(refresh-coordinator): replace global RWMutex with sync.Map v1.0.14 lukaszraczylo 2026-05-23 02:34:49 +01:00
• 984fd1c08f docs: add Telemetry section linking to oss-telemetry opt-out docs lukaszraczylo 2026-05-21 04:07:19 +01:00
• 99bdd23986 feat: anonymous usage telemetry via inline oss-telemetry v1.0.12 lukaszraczylo 2026-05-21 03:19:03 +01:00
• 2af05701dc build(release): publish multi-arch oidcgate Docker image per release tag lukaszraczylo 2026-05-19 17:14:29 +01:00
• 03a755cb53 docs(oidcgate): expand user guide and cross-link lukaszraczylo 2026-05-19 16:59:15 +01:00
• dc0e7e0238 fix(oidcgate): gosec G304 — clean config path + native #nosec directive lukaszraczylo 2026-05-19 16:41:57 +01:00
• b2e79d8798 Merge remote-tracking branch 'origin/main' into conflict-resolve lukaszraczylo 2026-05-19 16:41:34 +01:00
• 52ef32ece7 fix(oidcgate): security hardening — sanitize XFU, guardrails, validations lukaszraczylo 2026-05-19 15:17:04 +01:00
• 3bf7c60ef4 chore: gofmt lukaszraczylo 2026-05-19 15:00:42 +01:00
• 775ca7afc3 docs(oidcgate): user-facing setup guide and nginx/Caddy/Traefik wiring lukaszraczylo 2026-05-19 14:25:38 +01:00
• a1273e6883 feat(oidcgate): main entrypoint with graceful shutdown lukaszraczylo 2026-05-19 14:22:46 +01:00
• 0bc0079a58 refactor(oidcgate): WriteTimeout for slowloris guard, nolint reason lukaszraczylo 2026-05-19 14:18:28 +01:00
• 20294f1339 feat(oidcgate): mux wiring and http.Server with graceful shutdown lukaszraczylo 2026-05-19 14:13:13 +01:00
• 43938ed8a8 feat(oidcgate): healthz and readyz endpoints lukaszraczylo 2026-05-19 14:08:53 +01:00
• 46679c82eb refactor(oidcgate): simplify cloneAndRewrite, flip ?rd precedence, assert XFU passthrough lukaszraczylo 2026-05-19 14:07:44 +01:00
• a46be72be5 feat(oidcgate): auth/start/callback/logout endpoint handlers lukaszraczylo 2026-05-19 13:59:20 +01:00
• 91966c1bec refactor(oidcgate): idempotent Finalize; document and test 307/308 intercept lukaszraczylo 2026-05-19 13:57:15 +01:00
• c465fc888b feat(oidcgate): response-writer interceptor converts 302->401 for /oauth2/auth lukaszraczylo 2026-05-19 13:50:03 +01:00
• 047fea3c75 refactor(oidcgate): drop unreachable lowercase prefix; add multi-value mirror test lukaszraczylo 2026-05-19 13:48:13 +01:00
• 0c092a5a22 feat(oidcgate): synthetic success handler mirrors X-* headers to response lukaszraczylo 2026-05-19 13:41:51 +01:00
• 8f458b4f6e fix(oidcgate): quality fixes — rune-safe snake-upper, drop dead import, listen validation, nested-struct test lukaszraczylo 2026-05-19 13:40:24 +01:00
• 17c28fd574 feat(oidcgate): YAML config loader with env-var overrides lukaszraczylo 2026-05-19 13:30:28 +01:00
• 21cc2ed747 refactor(lib): match codebase metadataMu lock pattern in Ready() lukaszraczylo 2026-05-19 13:25:13 +01:00
• ded90e5dc1 feat(lib): add (*TraefikOidc).Ready() metadata-discovery readiness accessor lukaszraczylo 2026-05-19 13:19:20 +01:00
• 46777d0510 fix(lib): also route X-Auth-Request-Redirect through originalRequestURI helper lukaszraczylo 2026-05-19 13:14:16 +01:00
• f990365cb8 feat(lib): add TrustForwardedURI to honor X-Forwarded-Uri for post-login redirect target lukaszraczylo 2026-05-19 13:07:35 +01:00
• 85eb9ecd16 docs: add oidcgate implementation plan lukaszraczylo 2026-05-19 13:00:56 +01:00
• 3495e70cbb docs: add oidcgate Tier 1 forward-auth daemon design lukaszraczylo 2026-05-19 12:51:41 +01:00
• a548665edb feat: opt-in M2M bearer-token authentication (supersedes #93) (#140) v1.0.11 lukaszraczylo 2026-05-18 17:35:37 +01:00
• fcb21a36e6 docs: harden bearer-auth spec with security review findings lukaszraczylo 2026-05-18 16:24:52 +01:00
• a6c38c0747 docs: bearer-token auth design spec lukaszraczylo 2026-05-18 15:35:12 +01:00
• 8c5df82dcf fix(azure): treat Microsoft proprietary access tokens as opaque (#134) (#138) v1.0.10 lukaszraczylo 2026-05-11 17:31:37 +01:00
• aa96e9dbee Add sponsorship lukaszraczylo 2026-05-10 21:25:26 +01:00
• 1e33bb0a4d feat(auth): support private_key_jwt and client_secret_basic (#137) v1.0.8 lukaszraczylo 2026-05-09 18:02:41 +01:00
• bfd702a447 fix(jwk): keep parsed JWKS in local cache only (#134) (#136) v1.0.7 lukaszraczylo 2026-05-08 13:35:23 +01:00
• 68c150eba4 fix(cache/redis): honor enableTLS for Redis backend (#133) v1.0.5 lukaszraczylo 2026-05-07 12:24:13 +01:00
• 9cbca4c4fb fix(refresh): honor userIdentifierClaim in token refresh path (#132) v1.0.3 lukaszraczylo 2026-05-07 00:44:39 +01:00
• 684a990f59 fix: reduce yaegi CPU footprint + require auth on SSE/WebSocket bypass v1.0.1 lukaszraczylo 2026-05-02 03:12:20 +01:00
• 1b6c8616fd fix(refresh): coalesce refresh-token grants + bound goroutines + cache hot path (target v0.8.27) (#131) v0.8.27 lukaszraczylo 2026-04-30 18:52:39 +01:00
• 4d28fa01ab perf(jwk,cache): cache parsed public keys + RLock token cache reads v0.8.26 lukaszraczylo 2026-04-30 10:14:10 +01:00
• 2d1b04c637 review fixes apr 2026 (#130) v0.8.25 lukaszraczylo 2026-04-19 10:12:00 +01:00
• ccbb98b9dd fix-issue-122 (#128) v0.8.24 lukaszraczylo 2026-03-04 00:23:30 +00:00
• 1362cc0dac Improve debug logging around callback URL matching (#126) v0.8.23 Serhii Vasyliev 2026-02-23 11:36:37 +01:00
• 249dcad1b3 fix: prevent deadlock in SessionData.Clear method (#114) v0.8.22 Yuval Bar-On 2026-02-16 16:02:33 +01:00
• de4b4d7258 fix(cache): remove sync.Pool for Yaegi compatibility (#121) v0.8.21 lukaszraczylo 2026-01-19 17:52:31 +00:00
• 9d52f1b018 feat(core): refactor linters config and improve code quality (#119) v0.8.20 lukaszraczylo 2026-01-15 10:40:49 +00:00
• 57724918fe fix 116 (#118) v0.8.19 lukaszraczylo 2026-01-08 22:50:46 +00:00
• 775de2ada1 Fix cache serialisation (#117) lukaszraczylo 2026-01-08 22:06:19 +00:00
• 7816e05c98 fix issue with logout url (#112) v0.8.17 lukaszraczylo 2026-01-04 01:59:50 +00:00
• 8bf7998150 Fix for Hashicorp Vault - accept opaque access tokens with dot-characters (#113) v0.8.16 Dominik Chilla 2026-01-02 17:42:22 +01:00
• 22c4323fcb fix: set X-Forwarded-User header for SSE requests from existing session (#111) v0.8.15 muffn_ 2026-01-02 02:50:11 +00:00
• 06b219d1f8 feat(dcr): Add Redis storage support for multi-replica deployments (#109) v0.8.14 lukaszraczylo 2025-12-31 12:52:39 +00:00
• 413e4a1b7d LRU + cache conflicts prevention. (#104) v0.8.13 lukaszraczylo 2025-12-24 18:54:39 +00:00
• 69e0d98c67 fixup! Add signing of the plugin on release. lukaszraczylo 2025-12-24 12:33:33 +00:00
• 6d893df12b Add signing of the plugin on release. v0.8.11 lukaszraczylo 2025-12-15 00:38:35 +00:00
• 6efb78b7a8 Smarter approach to the cookies (#103) v0.8.10 lukaszraczylo 2025-12-12 18:35:06 +00:00
• d0b920c4f0 multiple realms fix (#102) v0.8.9 lukaszraczylo 2025-12-10 13:07:22 +00:00
• c474bbafd6 Cleanup [dec2025] (#101) v0.8.8 lukaszraczylo 2025-12-09 01:38:02 +00:00
• 9126c74723 December 2025 Improvements - Azure AD, Internal Networks, Startup Race Condition (#100) v0.8.7 lukaszraczylo 2025-12-08 14:21:17 +00:00
• a750c4f5b9 Size computation for allocation may overflow (#99) v0.8.6 lukaszraczylo 2025-12-08 11:22:28 +00:00
• 56051779ee Hotfix: goreleaser archive format. lukaszraczylo 2025-12-08 02:39:40 +00:00
• 3f126d50f3 Force the v in the release tags and name. v0.8.4 lukaszraczylo 2025-12-08 02:34:10 +00:00
• 91f0fc9ab8 Switch to go releaser lukaszraczylo 2025-12-08 02:32:46 +00:00
• 66b9ed0861 Reauthentication + redis fix v0.8.1 lukaszraczylo 2025-12-01 13:47:28 +00:00
• e64fc7f730 Add redis support for distributed caching (#83) v0.8.0 lukaszraczylo 2025-11-30 02:18:46 +00:00
• f88886a5df Merge main into 0.8.0-redis: resolve conflicts v0.8.0-rc.4 lukaszraczylo 2025-11-30 02:00:48 +00:00
• 5fcbd54955 Add sharded cache and prevention of CPU spikes / locks (#96) v0.8.0-rc.3 lukaszraczylo 2025-11-30 01:41:12 +00:00
• e70cd1907c Create CNAME lukaszraczylo 2025-11-30 01:28:07 +00:00
• e56e90f40b Potential fix for code scanning alert no. 10: Size computation for allocation may overflow lukaszraczylo 2025-11-13 00:11:18 +00:00
• e453a15922 Add ability to set cookie max age - issue #91 v0.8.0-rc.2 lukaszraczylo 2025-11-12 12:46:41 +00:00
• ccc6f76b0e fixup! Add ability to set cookie prefix for session cookies ( #87 ) lukaszraczylo 2025-11-12 12:30:04 +00:00
• 16a93b5ca8 Add ability to set cookie prefix for session cookies ( #87 ) lukaszraczylo 2025-11-12 12:27:53 +00:00
• 4db17ce24a Remove redundant validation in auth middleware ( issue #89 ) v0.8.0-rc.1 lukaszraczylo 2025-11-12 11:17:05 +00:00
• bc53d4ef15 Resolve issue #85 by adding ability to set custom claims in JWT tokens lukaszraczylo 2025-10-22 20:18:02 +01:00
• ad3c85c6b6 fixup! fixup! fixup! ... and another all nighter. lukaszraczylo 2025-10-22 16:33:13 +01:00
• 26b592f547 fixup! fixup! ... and another all nighter. lukaszraczylo 2025-10-22 16:16:54 +01:00
• ae6c315824 fixup! ... and another all nighter. lukaszraczylo 2025-10-22 10:50:21 +01:00
• c05932cf8a ... and another all nighter. lukaszraczylo 2025-10-22 10:46:12 +01:00
• c16b94a9c2 fixup! fixup! fixup! fixup! fixup! Move towards the self-provided Redis connection pool and RESP protocol implementation. Official redis client library won't work with yaegi. lukaszraczylo 2025-10-20 02:26:20 +01:00
• 5a30eff192 fixup! fixup! fixup! fixup! Move towards the self-provided Redis connection pool and RESP protocol implementation. Official redis client library won't work with yaegi. lukaszraczylo 2025-10-20 00:52:08 +01:00
• fdde481925 fixup! fixup! fixup! Move towards the self-provided Redis connection pool and RESP protocol implementation. Official redis client library won't work with yaegi. lukaszraczylo 2025-10-19 13:30:08 +01:00
• 0fbd6a3ffc fixup! fixup! Move towards the self-provided Redis connection pool and RESP protocol implementation. Official redis client library won't work with yaegi. lukaszraczylo 2025-10-19 13:20:16 +01:00
• 2d5c788e29 fixup! Move towards the self-provided Redis connection pool and RESP protocol implementation. Official redis client library won't work with yaegi. lukaszraczylo 2025-10-19 13:12:40 +01:00
• 868503fd7e Move towards the self-provided Redis connection pool and RESP protocol implementation. Official redis client library won't work with yaegi. lukaszraczylo 2025-10-19 12:57:11 +01:00
• 92a058da83 Add redis support for distributed caching lukaszraczylo 2025-10-19 01:05:41 +01:00