Commit Graph

Select branches

Hide Pull Requests

feat/oidcgate

fix-redirect-url-with-hash

improve-speed

main

release-0.7.2

release-0.7.6

test-pr-reviews

#1

#10

#100

#101

#102

#103

#104

#109

#111

#112

#113

#114

#117

#118

#119

#121

#126

#128

#130

#131

#136

#137

#138

#139

#140

#141

#142

#143

#144

#150

#153

#155

#157

#159

#161

#163

#164

#165

#18

#20

#22

#23

#24

#26

#28

#29

#31

#35

#36

#39

#40

#41

#43

#52

#54

#58

#59

#66

#68

#69

#70

#72

#73

#76

#78

#80

#83

#88

#9

#93

#96

#99

v0.3.1

v0.3.2

v0.3.3

v0.3.4

v0.3.5

v0.3.6

v0.3.7-rc1

v0.3.7-rc2

v0.3.7-rc3

v0.3.8

v0.3.9

v0.4.0

v0.4.1

v0.4.10

v0.4.2

v0.4.3-beta

v0.4.3-beta.2

v0.4.3-beta.3

v0.4.3-beta.4

v0.4.4

v0.4.5

v0.4.6

v0.4.7

v0.4.8

v0.4.9

v0.5.0

v0.5.11

v0.5.13

v0.5.15

v0.5.18

v0.5.20

v0.5.25

v0.5.27

v0.5.29

v0.5.3

v0.5.34

v0.5.36

v0.5.41

v0.5.44

v0.5.46

v0.5.48

v0.5.5

v0.5.50

v0.5.51-beta.1

v0.5.51-beta.2

v0.5.51-beta.3

v0.5.51-beta.4

v0.5.51-beta.5

v0.5.51-beta.6

v0.5.51-beta.7

v0.5.8

v0.6.0

v0.6.1

v0.6.2-beta10

v0.6.2-beta5

v0.6.2-beta6

v0.6.2-beta7

v0.6.2-beta8

v0.6.2-beta9

v0.7.0-beta1

v0.7.0-beta10

v0.7.0-beta11

v0.7.0-beta12

v0.7.0-beta14

v0.7.0-beta15

v0.7.0-beta16

v0.7.0-beta17

v0.7.0-beta2

v0.7.0-beta3

v0.7.0-beta4

v0.7.0-beta5

v0.7.0-beta6

v0.7.0-beta7

v0.7.0-beta8

v0.7.0-beta9

v0.7.0-rc.1

v0.7.0-rc.2

v0.7.0-rc.3

v0.7.0-rc.3-beta1

v0.7.0-rc.4

v0.7.0-rc.5

v0.7.1

v0.7.10

v0.7.2

v0.7.3

v0.7.4

v0.7.5

v0.7.5-rc.1

v0.7.5-rc.2

v0.7.6

v0.7.7

v0.7.8

v0.7.9

v0.8.0

v0.8.0-rc.1

v0.8.0-rc.2

v0.8.0-rc.3

v0.8.0-rc.4

v0.8.1

v0.8.10

v0.8.11

v0.8.13

v0.8.14

v0.8.15

v0.8.16

v0.8.17

v0.8.19

v0.8.20

v0.8.21

v0.8.22

v0.8.23

v0.8.24

v0.8.25

v0.8.26

v0.8.27

v0.8.4

v0.8.6

v0.8.7

v0.8.8

v0.8.9

v1.0.1

v1.0.10

v1.0.11

v1.0.12

v1.0.14

v1.0.15

v1.0.16

v1.0.17

v1.0.18

v1.0.19

v1.0.20

v1.0.21

v1.0.22

v1.0.23

v1.0.25

v1.0.26

v1.0.27

v1.0.28

v1.0.29

v1.0.3

v1.0.31

v1.0.32

v1.0.33

v1.0.34

v1.0.35

v1.0.36

v1.0.37

v1.0.41

v1.0.42

v1.0.44

v1.0.5

v1.0.7

v1.0.8

Mono Color

• 573c6b7496 chore(release): v1.0.44 v1.0.44 github-actions[bot] 2026-10-04 23:22:51 +00:00
• f0af6282dc feat(templates): add toJson helper for object claims (#165) main lukaszraczyloandGitHub 2026-10-05 00:20:01 +01:00
• 7c5a86f4e1 chore: remove dependabot config lukaszraczylo 2026-10-04 01:04:57 +01:00
• a533ae2ef7 chore(release): v1.0.42 v1.0.42 github-actions[bot] 2026-09-29 11:02:23 +00:00
• 94a8664403 perf(session): cut yaegi allocations on authenticated requests (#164) lukaszraczyloandGitHub 2026-09-29 11:59:31 +01:00
• 8dfab2a9fc chore(release): v1.0.41 v1.0.41 github-actions[bot] 2026-09-28 16:59:44 +00:00
• 74decb21c2 docs: note where streamingRefresh sends the WebSocket cookie lukaszraczylo 2026-09-28 17:28:01 +01:00
• 7ae75d2523 docs: add #162 changelog entry and rollback cookie note lukaszraczylo 2026-09-28 15:32:19 +01:00
• 937776516d feat(middleware): refresh expired sessions on SSE/WebSocket bypass lukaszraczylo 2026-09-28 15:31:18 +01:00
• c9844d0ff2 fix(middleware): forward configured headers on SSE/WebSocket bypass (#162) lukaszraczylo 2026-09-28 15:24:33 +01:00
• cb68df890a chore(release): v1.0.37 v1.0.37 github-actions[bot] 2026-09-28 11:58:40 +00:00
• 45e99551f9 Security & correctness hardening: auth flow, cache, recovery, DCR, docs (#155) 3 people 2026-09-28 12:55:10 +01:00
• 124601d559 chore(release): v1.0.36 v1.0.36 github-actions[bot] 2026-09-10 13:52:07 +00:00
• d3012d5169 feat: add RFC 8707 resource indicator via resource config (#161) Alex SedovandGitHub 2026-09-10 15:49:53 +02:00
• ce3c2e149d chore(release): v1.0.35 v1.0.35 github-actions[bot] 2026-09-02 15:45:15 +00:00
• 61e60733a5 fix: workaround for yaegi type checking using reflection (#159) Martin FreyandGitHub 2026-09-02 17:42:47 +02:00
• 8808901131 chore(release): v1.0.34 v1.0.34 github-actions[bot] 2026-08-27 23:50:13 +00:00
• 7e44725edc fix: avoid nil dereference in Close (#157) Martin FreyandGitHub 2026-08-28 01:47:30 +02:00
• d5bb035445 chore(release): v1.0.33 v1.0.33 github-actions[bot] 2026-08-19 16:52:19 +00:00
• 15dba0e8d3 feat: add cookiePath config to scope session cookies to subpath (#143) 4 people 2026-08-19 17:49:52 +01:00
• cd2226dc47 chore(release): v1.0.32 v1.0.32 github-actions[bot] 2026-08-09 01:02:16 +00:00
• f728f61777 fix(config): wire introspectionURL override and repair dead endpoint overrides (#152) lukaszraczylo 2026-08-09 01:59:47 +01:00
• bf092cb123 chore(release): v1.0.31 v1.0.31 github-actions[bot] 2026-08-08 23:50:22 +00:00
• 78b6f193b3 fix(security): allow loopback hosts for loopback providerURL (#154) lukaszraczylo 2026-08-09 00:47:25 +01:00
• edb7174cc8 docs: pin documented plugin version to v1.0.29 (#153) 3 people 2026-07-31 11:04:47 +02:00
• 473ae05982 chore(release): v1.0.29 v1.0.29 github-actions[bot] 2026-07-22 09:33:54 +00:00
• e51bd9cdbe fix(catalog): analyzer-valid testData and explicit New() error return lukaszraczylo 2026-07-22 10:22:18 +01:00
• 1449ef0494 chore(release): v1.0.28 v1.0.28 github-actions[bot] 2026-07-21 12:07:19 +00:00
• f320d0a316 fix(settings): repair #149 + AST-based header template validation + allowedClaims (#150) lukaszraczyloandGitHub 2026-07-21 13:04:39 +01:00
• 860d3c4a90 chore(release): v1.0.27 v1.0.27 github-actions[bot] 2026-06-26 10:52:29 +00:00
• 48a19e04f8 fix(settings): tolerate whitespace in header template delimiters (#148) lukaszraczylo 2026-06-26 11:49:31 +01:00
• 8ffd80193a chore(release): v1.0.26 v1.0.26 github-actions[bot] 2026-05-30 13:13:08 +00:00
• 546ceb949c security: remediate audit findings (ranks 1–16 + 22 Lows) + yaegi load validation (#144) lukaszraczyloandGitHub 2026-05-30 14:10:32 +01:00
• bc02901972 chore(release): v1.0.25 v1.0.25 github-actions[bot] 2026-05-30 12:26:23 +00:00
• f75b2f20e0 fix: resolve cache eviction lock-up and migrate telemetry [patch-release] lukaszraczylo 2026-05-30 13:22:03 +01:00
• cf6ed1da55 feat: feat: add extraAuthParams (extra authorization request parameters) (#139) v1.0.23 paiking1andGitHub 2026-05-27 23:41:09 +03:00
• f821b8829b fix: remove write-lock convoy in getLocal + fix mutateState CAS bug v1.0.22 lukaszraczylo 2026-05-25 00:06:47 +01:00
• 5f9c574f95 refactor: delete dead non-RS validators; tests use RS variants v1.0.21 lukaszraczylo 2026-05-23 13:04:26 +01:00
• 7c6f09fb20 feat(middleware): RS-aware token validators (kill ~21 RLocks/request) v1.0.20 lukaszraczylo 2026-05-23 12:38:42 +01:00
• 68e1c4319c feat(middleware): per-request context object (requestState) v1.0.19 lukaszraczylo 2026-05-23 12:22:51 +01:00
• 17e3f8ef62 fix: snapshot patterns for refresh-tracker and metadata URLs v1.0.18 lukaszraczylo 2026-05-23 11:31:51 +01:00
• 827926bc3a fix(refresh-coordinator): trim per-request mutex/map ops v1.0.17 lukaszraczylo 2026-05-23 11:23:16 +01:00
• abbfdb02a7 fix(jwk): replace JWKCache.mutex with singleflight pattern v1.0.16 lukaszraczylo 2026-05-23 11:05:24 +01:00
• 72e2b682bb fix: eliminate per-request global mutexes in Yaegi hot paths v1.0.15 lukaszraczylo 2026-05-23 10:47:21 +01:00
• 4fa579ccf4 test(oidcgate): integration test with real middleware against mock IdP (#142) feat/oidcgate lukaszraczyloandGitHub 2026-05-23 03:12:17 +01:00
• ae4ccaa89d fix(refresh-coordinator): replace global RWMutex with sync.Map v1.0.14 lukaszraczylo 2026-05-23 02:34:49 +01:00
• 984fd1c08f docs: add Telemetry section linking to oss-telemetry opt-out docs lukaszraczylo 2026-05-21 04:07:19 +01:00
• 99bdd23986 feat: anonymous usage telemetry via inline oss-telemetry v1.0.12 lukaszraczylo 2026-05-21 03:19:03 +01:00
• 2af05701dc build(release): publish multi-arch oidcgate Docker image per release tag lukaszraczylo 2026-05-19 17:14:29 +01:00
• 03a755cb53 docs(oidcgate): expand user guide and cross-link lukaszraczylo 2026-05-19 16:59:15 +01:00
• dc0e7e0238 fix(oidcgate): gosec G304 — clean config path + native #nosec directive lukaszraczylo 2026-05-19 16:41:57 +01:00
• b2e79d8798 Merge remote-tracking branch 'origin/main' into conflict-resolve lukaszraczylo 2026-05-19 16:41:34 +01:00
• 52ef32ece7 fix(oidcgate): security hardening — sanitize XFU, guardrails, validations lukaszraczylo 2026-05-19 15:17:04 +01:00
• 3bf7c60ef4 chore: gofmt lukaszraczylo 2026-05-19 15:00:42 +01:00
• 775ca7afc3 docs(oidcgate): user-facing setup guide and nginx/Caddy/Traefik wiring lukaszraczylo 2026-05-19 14:25:38 +01:00
• a1273e6883 feat(oidcgate): main entrypoint with graceful shutdown lukaszraczylo 2026-05-19 14:22:46 +01:00
• 0bc0079a58 refactor(oidcgate): WriteTimeout for slowloris guard, nolint reason lukaszraczylo 2026-05-19 14:18:28 +01:00
• 20294f1339 feat(oidcgate): mux wiring and http.Server with graceful shutdown lukaszraczylo 2026-05-19 14:13:13 +01:00
• 43938ed8a8 feat(oidcgate): healthz and readyz endpoints lukaszraczylo 2026-05-19 14:08:53 +01:00
• 46679c82eb refactor(oidcgate): simplify cloneAndRewrite, flip ?rd precedence, assert XFU passthrough lukaszraczylo 2026-05-19 14:07:44 +01:00
• a46be72be5 feat(oidcgate): auth/start/callback/logout endpoint handlers lukaszraczylo 2026-05-19 13:59:20 +01:00
• 91966c1bec refactor(oidcgate): idempotent Finalize; document and test 307/308 intercept lukaszraczylo 2026-05-19 13:57:15 +01:00
• c465fc888b feat(oidcgate): response-writer interceptor converts 302->401 for /oauth2/auth lukaszraczylo 2026-05-19 13:50:03 +01:00
• 047fea3c75 refactor(oidcgate): drop unreachable lowercase prefix; add multi-value mirror test lukaszraczylo 2026-05-19 13:48:13 +01:00
• 0c092a5a22 feat(oidcgate): synthetic success handler mirrors X-* headers to response lukaszraczylo 2026-05-19 13:41:51 +01:00
• 8f458b4f6e fix(oidcgate): quality fixes — rune-safe snake-upper, drop dead import, listen validation, nested-struct test lukaszraczylo 2026-05-19 13:40:24 +01:00
• 17c28fd574 feat(oidcgate): YAML config loader with env-var overrides lukaszraczylo 2026-05-19 13:30:28 +01:00
• 21cc2ed747 refactor(lib): match codebase metadataMu lock pattern in Ready() lukaszraczylo 2026-05-19 13:25:13 +01:00
• ded90e5dc1 feat(lib): add (*TraefikOidc).Ready() metadata-discovery readiness accessor lukaszraczylo 2026-05-19 13:19:20 +01:00
• 46777d0510 fix(lib): also route X-Auth-Request-Redirect through originalRequestURI helper lukaszraczylo 2026-05-19 13:14:16 +01:00
• f990365cb8 feat(lib): add TrustForwardedURI to honor X-Forwarded-Uri for post-login redirect target lukaszraczylo 2026-05-19 13:07:35 +01:00
• 85eb9ecd16 docs: add oidcgate implementation plan lukaszraczylo 2026-05-19 13:00:56 +01:00
• 3495e70cbb docs: add oidcgate Tier 1 forward-auth daemon design lukaszraczylo 2026-05-19 12:51:41 +01:00
• a548665edb feat: opt-in M2M bearer-token authentication (supersedes #93) (#140) v1.0.11 lukaszraczyloandGitHub 2026-05-18 17:35:37 +01:00
• fcb21a36e6 docs: harden bearer-auth spec with security review findings lukaszraczylo 2026-05-18 16:24:52 +01:00
• a6c38c0747 docs: bearer-token auth design spec lukaszraczylo 2026-05-18 15:35:12 +01:00
• 8c5df82dcf fix(azure): treat Microsoft proprietary access tokens as opaque (#134) (#138) v1.0.10 lukaszraczyloandGitHub 2026-05-11 17:31:37 +01:00
• aa96e9dbee Add sponsorship lukaszraczyloandGitHub 2026-05-10 21:25:26 +01:00
• 1e33bb0a4d feat(auth): support private_key_jwt and client_secret_basic (#137) v1.0.8 lukaszraczyloandGitHub 2026-05-09 18:02:41 +01:00
• bfd702a447 fix(jwk): keep parsed JWKS in local cache only (#134) (#136) v1.0.7 lukaszraczyloandGitHub 2026-05-08 13:35:23 +01:00
• 68c150eba4 fix(cache/redis): honor enableTLS for Redis backend (#133) v1.0.5 lukaszraczylo 2026-05-07 12:24:13 +01:00
• 9cbca4c4fb fix(refresh): honor userIdentifierClaim in token refresh path (#132) v1.0.3 lukaszraczylo 2026-05-07 00:44:39 +01:00
• 684a990f59 fix: reduce yaegi CPU footprint + require auth on SSE/WebSocket bypass v1.0.1 lukaszraczylo 2026-05-02 03:12:20 +01:00
• 1b6c8616fd fix(refresh): coalesce refresh-token grants + bound goroutines + cache hot path (target v0.8.27) (#131) v0.8.27 lukaszraczyloandGitHub 2026-04-30 18:52:39 +01:00
• 4d28fa01ab perf(jwk,cache): cache parsed public keys + RLock token cache reads v0.8.26 lukaszraczylo 2026-04-30 10:14:10 +01:00
• 2d1b04c637 review fixes apr 2026 (#130) v0.8.25 lukaszraczyloandGitHub 2026-04-19 10:12:00 +01:00
• ccbb98b9dd fix-issue-122 (#128) v0.8.24 lukaszraczyloandGitHub 2026-03-04 00:23:30 +00:00
• 1362cc0dac Improve debug logging around callback URL matching (#126) v0.8.23 Serhii VasylievandGitHub 2026-02-23 11:36:37 +01:00
• 249dcad1b3 fix: prevent deadlock in SessionData.Clear method (#114) v0.8.22 3 people 2026-02-16 16:02:33 +01:00
• de4b4d7258 fix(cache): remove sync.Pool for Yaegi compatibility (#121) v0.8.21 lukaszraczyloandGitHub 2026-01-19 17:52:31 +00:00
• 9d52f1b018 feat(core): refactor linters config and improve code quality (#119) v0.8.20 lukaszraczyloandGitHub 2026-01-15 10:40:49 +00:00
• 57724918fe fix 116 (#118) v0.8.19 lukaszraczyloandGitHub 2026-01-08 22:50:46 +00:00
• 775de2ada1 Fix cache serialisation (#117) lukaszraczyloandGitHub 2026-01-08 22:06:19 +00:00
• 7816e05c98 fix issue with logout url (#112) v0.8.17 lukaszraczyloandGitHub 2026-01-04 01:59:50 +00:00
• 8bf7998150 Fix for Hashicorp Vault - accept opaque access tokens with dot-characters (#113) v0.8.16 Dominik ChillaandGitHub 2026-01-02 17:42:22 +01:00
• 22c4323fcb fix: set X-Forwarded-User header for SSE requests from existing session (#111) v0.8.15 3 people 2026-01-02 02:50:11 +00:00
• 06b219d1f8 feat(dcr): Add Redis storage support for multi-replica deployments (#109) v0.8.14 lukaszraczyloandGitHub 2025-12-31 12:52:39 +00:00
• 413e4a1b7d LRU + cache conflicts prevention. (#104) v0.8.13 lukaszraczyloandGitHub 2025-12-24 18:54:39 +00:00
• 69e0d98c67 fixup! Add signing of the plugin on release. lukaszraczylo 2025-12-24 12:33:33 +00:00
• 6d893df12b Add signing of the plugin on release. v0.8.11 lukaszraczylo 2025-12-15 00:38:35 +00:00