v0.38.18-beta.1

This release adds CVE scanners for Docker Images and updates several dependencies to resolve CVE issues.

Additionally, support for various tracers has been added, patches to caching and JWT audiences have been made, and more configuration options have been added for various rules.

Bug Fixes

• Add config schema for tracing for jaeger (#830) (59871fc)

• Add hiring notice to README (#884) (9dea379)

• Add ory cli (df8a19b)

• Allow forwarding query parameters to the session store (#817) (9375f92), closes #786 #786

• Building docker image for docker-compose (#889) (adf0d1b)

• Remote_json default configuration (#880) (18788d1), closes #797

• Use NYT capitalistaion for all Swagger headlines (#859) (8c2da46), closes #503:

  Capitalised all the Swagger headlines for files found in /api.

Code Generation

• Pin v0.38.18-beta.1 release commit (0bf4a98)

Documentation

• Update authz.md (#879) (b6b5824)

• Use correct casing (58b1d43), closes #900

• Warn that gzip is unsupported (#835) (78e612e):

  Note to users that gzip responses are as of now unsupported for Cookie and Bearer authenticators.
  The result is that the subject and extra will not be filled in, and will fail silently.

Features

• Add retry and timeout support in authorizers (#883) (ec926b0):

  Adds the ability to define HTTP timeouts for authorizers.

• Add support for X-Forwarded-Proto header (#665) (a8c9354), closes #153

• Allow both string and []string in aud field (#822) (1897f31), closes #491 #601 #792 #810

• Introduce cve scanning (#839) (1432e2c)

• jwt: Replace jwt module (#818) (301b673)

• Store oauth2 introspection result as bytes in cache (#811) (5645605)

• Support Zipkin tracer (#832) (2f2552d)

Tests

• Echo output in run.sh (871b3c6)
• Fix typo (1b21d81)
• Reintroduce -s -o (792477f)
• Verbose curl (5d86cd3)

Unclassified

• docs:� declare s3, gs, and azblob access rule repositories in config schema (#829) (e2433f6), closes #829

Changelog

• 08324dd autogen(docs): regenerate and update changelog
• a6afe42 autogen(docs): regenerate and update changelog
• 0725820 autogen(docs): regenerate and update changelog
• 6cb417c autogen(docs): regenerate and update changelog
• 0dcd1f5 autogen(docs): regenerate and update changelog
• 255ad15 autogen(docs): regenerate and update changelog
• c89737b autogen(docs): regenerate and update changelog
• 317f874 autogen(docs): regenerate and update changelog
• 133e8a5 autogen(docs): regenerate and update changelog
• 83cb5c0 autogen(docs): regenerate and update changelog
• 168086e autogen(docs): regenerate and update changelog
• 38dfbcc autogen(docs): regenerate and update changelog
• 9636c96 autogen(docs): regenerate and update changelog
• be93f1e autogen(docs): regenerate and update changelog
• 057293f autogen(docs): regenerate and update changelog
• 667aeed autogen(docs): regenerate and update changelog
• 1f1f03a autogen(docs): regenerate and update changelog
• b131d94 autogen(docs): regenerate and update changelog
• e807863 autogen(docs): regenerate and update changelog
• 511d4b7 autogen(docs): update milestone document
• 19f2c68 autogen(docs): update milestone document
• e785140 autogen(docs): update milestone document
• 8a51d52 autogen(docs): update milestone document
• 7504e1e autogen(docs): update milestone document
• 9910160 autogen(openapi): Regenerate swagger spec and internal client
• cf63dc5 autogen(openapi): Regenerate swagger spec and internal client
• 8db79c9 autogen: add v0.38.15-beta.1 to version.schema.json
• 737320f autogen: pin v0.38.16-beta.1 release commit
• f16db10 autogen: pin v0.38.17-beta.1 release commit
• 0bf4a98 autogen: pin v0.38.18-beta.1 release commit
• 5cc648e chore(deps): bump github.com/tidwall/gjson from 1.6.7 to 1.9.3 (#873)
• 65e53b6 chore: bump alpine version in dockerfiles (#837)
• 9b41eed chore: remove old sdk generator (#842)
• a686910 chore: update docusaurus template
• e49dbbd chore: update docusaurus template
• 2d359d9 chore: update docusaurus template
• 3f4c2ed chore: update docusaurus template
• 23e624d chore: update docusaurus template (#820)
• 1f64342 chore: update docusaurus template (#821)
• 9ca90e3 chore: update docusaurus template (#840)
• 002a2a8 chore: update docusaurus template (#847)
• 14dd31a chore: update docusaurus template (#866)
• 1564e0c chore: update docusaurus template (#872)
• 3381b6c chore: update docusaurus template (#875)
• 2980573 chore: update docusaurus template (#891)
• 1553c14 chore: update repository templates
• ee210a3 chore: update repository templates
• 9f6644a chore: update repository templates
• 62ebb22 chore: update repository templates
• 9f29fc4 chore: update repository templates
• da516f5 chore: update repository templates
• bc70566 chore: update repository templates
• 9c80149 chore: update repository templates (#823)
• be72846 chore: update repository templates (#825)
• 80bc079 chore: update repository templates (#827)
• 1da447d chore: update repository templates (#857)
• 8f23209 chore: update repository templates (#858)
• 497cd3c chore: update repository templates (#863)
• 7cd7bca chore: update repository templates (#864)
• ade680b chore: update repository templates to 8191b78131173cce8788143f6ad95119d9b813c5
• b1e772e ci: bump goreleaser (#816)
• 38d0883 ci: bump orbs (#815)
• 30ff27f ci: resolve regression issues (#881)
• e2433f6 docs:� declare s3, gs, and azblob access rule repositories in config schema (#829)
• b6b5824 docs: update authz.md (#879)
• 58b1d43 docs: use correct casing
• 78e612e docs: warn that gzip is unsupported (#835)
• 301b673 feat(jwt): replace jwt module (#818)
• ec926b0 feat: add retry and timeout support in authorizers (#883)
• a8c9354 feat: add support for X-Forwarded-Proto header (#665)
• 1897f31 feat: allow both string and []string in aud field (#822)
• 1432e2c feat: introduce cve scanning (#839)
• 5645605 feat: store oauth2 introspection result as bytes in cache (#811)
• 2f2552d feat: support Zipkin tracer (#832)
• 59871fc fix: add config schema for tracing for jaeger (#830)
• 9dea379 fix: add hiring notice to README (#884)
• df8a19b fix: add ory cli
• 9375f92 fix: allow forwarding query parameters to the session store (#817)
• adf0d1b fix: building docker image for docker-compose (#889)
• 18788d1 fix: remote_json default configuration (#880)
• 8c2da46 fix: use NYT capitalistaion for all Swagger headlines (#859)
• 871b3c6 test: echo output in run.sh
• 1b21d81 test: fix typo
• 792477f test: reintroduce -s -o
• 5d86cd3 test: verbose curl

v0.38.17-beta.1

This release adds CVE scanners for Docker Images and updates several dependencies to resolve CVE issues.

Additionally, support for various tracers has been added, patches to caching and JWT audiences have been made, and more configuration options have been added for various rules.

Bug Fixes

• Add config schema for tracing for jaeger (#830) (59871fc)

• Add hiring notice to README (#884) (9dea379)

• Add ory cli (df8a19b)

• Allow forwarding query parameters to the session store (#817) (9375f92), closes #786 #786

• Building docker image for docker-compose (#889) (adf0d1b)

• Remote_json default configuration (#880) (18788d1), closes #797

• Use NYT capitalistaion for all Swagger headlines (#859) (8c2da46), closes #503:

  Capitalised all the Swagger headlines for files found in /api.

Code Generation

• Pin v0.38.17-beta.1 release commit (f16db10)

Documentation

• Update authz.md (#879) (b6b5824)

• Use correct casing (58b1d43), closes #900

• Warn that gzip is unsupported (#835) (78e612e):

  Note to users that gzip responses are as of now unsupported for Cookie and Bearer authenticators.
  The result is that the subject and extra will not be filled in, and will fail silently.

Features

• Add retry and timeout support in authorizers (#883) (ec926b0):

  Adds the ability to define HTTP timeouts for authorizers.

• Add support for X-Forwarded-Proto header (#665) (a8c9354), closes #153

• Allow both string and []string in aud field (#822) (1897f31), closes #491 #601 #792 #810

• Introduce cve scanning (#839) (1432e2c)

• jwt: Replace jwt module (#818) (301b673)

• Store oauth2 introspection result as bytes in cache (#811) (5645605)

• Support Zipkin tracer (#832) (2f2552d)

Unclassified

• docs:� declare s3, gs, and azblob access rule repositories in config schema (#829) (e2433f6), closes #829

Changelog

• 1f1f03a autogen(docs): regenerate and update changelog
• 0725820 autogen(docs): regenerate and update changelog
• 6cb417c autogen(docs): regenerate and update changelog
• 83cb5c0 autogen(docs): regenerate and update changelog
• 0dcd1f5 autogen(docs): regenerate and update changelog
• 38dfbcc autogen(docs): regenerate and update changelog
• c89737b autogen(docs): regenerate and update changelog
• 08324dd autogen(docs): regenerate and update changelog
• 9636c96 autogen(docs): regenerate and update changelog
• 667aeed autogen(docs): regenerate and update changelog
• 057293f autogen(docs): regenerate and update changelog
• e807863 autogen(docs): regenerate and update changelog
• b131d94 autogen(docs): regenerate and update changelog
• 255ad15 autogen(docs): regenerate and update changelog
• 168086e autogen(docs): regenerate and update changelog
• 317f874 autogen(docs): regenerate and update changelog
• 133e8a5 autogen(docs): regenerate and update changelog
• be93f1e autogen(docs): regenerate and update changelog
• 8a51d52 autogen(docs): update milestone document
• 7504e1e autogen(docs): update milestone document
• e785140 autogen(docs): update milestone document
• 19f2c68 autogen(docs): update milestone document
• 511d4b7 autogen(docs): update milestone document
• 9910160 autogen(openapi): Regenerate swagger spec and internal client
• cf63dc5 autogen(openapi): Regenerate swagger spec and internal client
• 8db79c9 autogen: add v0.38.15-beta.1 to version.schema.json
• 737320f autogen: pin v0.38.16-beta.1 release commit
• f16db10 autogen: pin v0.38.17-beta.1 release commit
• 5cc648e chore(deps): bump github.com/tidwall/gjson from 1.6.7 to 1.9.3 (#873)
• 65e53b6 chore: bump alpine version in dockerfiles (#837)
• 9b41eed chore: remove old sdk generator (#842)
• e49dbbd chore: update docusaurus template
• 2d359d9 chore: update docusaurus template
• a686910 chore: update docusaurus template
• 3f4c2ed chore: update docusaurus template
• 23e624d chore: update docusaurus template (#820)
• 1f64342 chore: update docusaurus template (#821)
• 9ca90e3 chore: update docusaurus template (#840)
• 002a2a8 chore: update docusaurus template (#847)
• 14dd31a chore: update docusaurus template (#866)
• 1564e0c chore: update docusaurus template (#872)
• 3381b6c chore: update docusaurus template (#875)
• 2980573 chore: update docusaurus template (#891)
• 9f29fc4 chore: update repository templates
• da516f5 chore: update repository templates
• 1553c14 chore: update repository templates
• 9f6644a chore: update repository templates
• 62ebb22 chore: update repository templates
• bc70566 chore: update repository templates
• ee210a3 chore: update repository templates
• 9c80149 chore: update repository templates (#823)
• be72846 chore: update repository templates (#825)
• 80bc079 chore: update repository templates (#827)
• 1da447d chore: update repository templates (#857)
• 8f23209 chore: update repository templates (#858)
• 497cd3c chore: update repository templates (#863)
• 7cd7bca chore: update repository templates (#864)
• ade680b chore: update repository templates to 8191b78131173cce8788143f6ad95119d9b813c5
• b1e772e ci: bump goreleaser (#816)
• 38d0883 ci: bump orbs (#815)
• 30ff27f ci: resolve regression issues (#881)
• e2433f6 docs:� declare s3, gs, and azblob access rule repositories in config schema (#829)
• b6b5824 docs: update authz.md (#879)
• 58b1d43 docs: use correct casing
• 78e612e docs: warn that gzip is unsupported (#835)
• 301b673 feat(jwt): replace jwt module (#818)
• ec926b0 feat: add retry and timeout support in authorizers (#883)
• a8c9354 feat: add support for X-Forwarded-Proto header (#665)
• 1897f31 feat: allow both string and []string in aud field (#822)
• 1432e2c feat: introduce cve scanning (#839)
• 5645605 feat: store oauth2 introspection result as bytes in cache (#811)
• 2f2552d feat: support Zipkin tracer (#832)
• 59871fc fix: add config schema for tracing for jaeger (#830)
• 9dea379 fix: add hiring notice to README (#884)
• df8a19b fix: add ory cli
• 9375f92 fix: allow forwarding query parameters to the session store (#817)
• adf0d1b fix: building docker image for docker-compose (#889)
• 18788d1 fix: remote_json default configuration (#880)
• 8c2da46 fix: use NYT capitalistaion for all Swagger headlines (#859)

v0.38.15-beta.1

Changelog

29da249 autogen(docs): regenerate and update changelog
4265b9f autogen(docs): regenerate and update changelog
a76d057 autogen(docs): regenerate and update changelog
b79e1db autogen(docs): regenerate and update changelog
a0a1329 autogen(docs): regenerate and update changelog
d143d51 autogen(docs): regenerate and update changelog
b848adc autogen(docs): regenerate and update changelog
74bc0ca autogen(openapi): Regenerate swagger spec and internal client
d9b53ed autogen: add v0.38.14-beta.1 to version.schema.json
95185bb autogen: pin v0.38.15-beta.1 release commit
4a3dfed chore: adjust CODEOWNERS
da391df chore: update docusaurus template
7ad4f56 chore: update docusaurus template
cf1a568 chore: update docusaurus template
f329818 chore: update docusaurus template
344ef00 chore: update repository templates
96dca28 chore: update repository templates
71b49f8 chore: use patched version of ory/x (#803)
57a9aa4 docs: naming
e1cc575 feat: add preserve_host to session and bearer configs
390abe3 feat: add support for additional headers in check_session and bearer token
1f6c430 fix: do not modify original headers

Docker images

• docker pull oryd/oathkeeper:v0
• docker pull oryd/oathkeeper:v0.38
• docker pull oryd/oathkeeper:v0.38.15
• docker pull oryd/oathkeeper:v0.38.15-beta.1
• docker pull oryd/oathkeeper:latest
• docker pull oryd/oathkeeper:v0-alpine
• docker pull oryd/oathkeeper:v0.38-alpine
• docker pull oryd/oathkeeper:v0.38.15-alpine
• docker pull oryd/oathkeeper:v0.38.15-beta.1-alpine
• docker pull oryd/oathkeeper:latest-alpine

v0.38.14-beta.1

Ory Oathkeeper v0.38.14-beta.1 addresses a vunlerability in jwt-go by bumping the dependency to v3.2.4.

Bug Fixes

• Update docs deps (3d50ab4)

Code Generation

• Pin v0.38.14-beta.1 release commit (4918be0)

Documentation

• Fix erroneous sidebar commit (6e3e1a2)

Features

• Add redoc doc generator (#782) (e0f3bd5)

Reverts

• Fix goreleaser/render-version-schema step (#789) (#790) (d33e3e1):

  This reverts commit d306aa6.

Changelog

9bff69b autogen(docs): generate and format documentation
306e591 autogen(docs): generate and format documentation
4880c7e autogen(docs): regenerate and update changelog
c6842f3 autogen(docs): regenerate and update changelog
d52ad6a autogen(docs): regenerate and update changelog
c6bcfb2 autogen(docs): regenerate and update changelog
4d4c540 autogen(docs): regenerate and update changelog
d717e6c autogen(docs): regenerate and update changelog
62abbfe autogen(docs): regenerate and update changelog
1b29869 autogen(docs): regenerate and update changelog
ab7fd18 autogen(docs): regenerate and update changelog
6ef590f autogen(docs): regenerate and update changelog
2cfc7ef autogen(docs): regenerate and update changelog
a8cbd79 autogen(docs): regenerate and update changelog
3381815 autogen(docs): regenerate and update changelog
d923e64 autogen(openapi): Regenerate swagger spec and internal client
5bbc5dc autogen: pin v0.38.13-beta.1 release commit
4918be0 autogen: pin v0.38.14-beta.1 release commit
199b7ee autogen: pin v0.38.14-beta.1.pre.1 release commit
0d9adbd autogen: pin v0.38.14-beta.1.pre.2 release commit
79459ca chore: bump jwt-go (#766)
017ca8a chore: update docusaurus template (#764)
f67d936 chore: update docusaurus template (#769)
ee66c46 chore: update docusaurus template (#772)
b482431 chore: update docusaurus template (#774)
28596d5 chore: update docusaurus template (#776)
37d8d6a chore: update docusaurus template (#777)
2af2700 chore: update docusaurus template (#778)
02dbf09 chore: update docusaurus template (#780)
6ae63ae chore: update docusaurus template (#781)
9c9b2b4 chore: update docusaurus template (#783)
62048ad chore: update docusaurus template (#784)
443ef7c chore: update docusaurus template (#785)
f7bfafd chore: update repository templates (#759)
029658d chore: update repository templates (#761)
4f3e67d chore: update repository templates (#762)
aed0216 chore: update repository templates (#771)
13e1b40 chore: update repository templates (#788)
d306aa6 ci: fix goreleaser/render-version-schema step (#789)
c7860dd ci: fix goreleaser/render-version-schema step (#791)
6e3e1a2 docs: fix erroneous sidebar commit
e0f3bd5 feat: add redoc doc generator (#782)
3d50ab4 fix: update docs deps
d33e3e1 revert: fix goreleaser/render-version-schema step (#789) (#790)

Docker images

• docker pull oryd/oathkeeper:v0
• docker pull oryd/oathkeeper:v0.38
• docker pull oryd/oathkeeper:v0.38.14
• docker pull oryd/oathkeeper:v0.38.14-beta.1
• docker pull oryd/oathkeeper:latest
• docker pull oryd/oathkeeper:v0-alpine
• docker pull oryd/oathkeeper:v0.38-alpine
• docker pull oryd/oathkeeper:v0.38.14-alpine
• docker pull oryd/oathkeeper:v0.38.14-beta.1-alpine
• docker pull oryd/oathkeeper:latest-alpine

v0.38.12-beta.1

Changelog

1f9f625 Merge pull request from GHSA-qvp4-rpmr-xwrr
f28e63e autogen(docs): generate and format documentation
ae1b979 autogen(docs): generate and format documentation
28fdbb2 autogen(docs): generate and format documentation
283f892 autogen(docs): regenerate and update changelog
325e27f autogen(docs): regenerate and update changelog
0f067f2 autogen(docs): regenerate and update changelog
c82660e autogen(docs): regenerate and update changelog
7406112 autogen(docs): regenerate and update changelog
acea339 autogen(docs): regenerate and update changelog
4a25136 autogen(docs): regenerate and update changelog
6a31df1 autogen(docs): regenerate and update changelog
6442901 autogen(docs): regenerate and update changelog
9b07168 autogen(docs): regenerate and update changelog
bca7d9d autogen(docs): regenerate and update changelog
3a72885 autogen(docs): regenerate and update changelog
03c6bd0 autogen(docs): regenerate and update changelog
d4cb626 autogen(docs): regenerate and update changelog
57f62d5 autogen(openapi): Regenerate swagger spec and internal client
ae23224 autogen: pin v0.38.12-beta.1 release commit
615a2df autogen: pin v0.38.12-beta.1.pre.0 release commit
853ad87 autogen: pin v0.38.12-beta.1.pre.1 release commit
5fbdabd chore: update README (#750)
4b69c53 chore: update docusaurus template (#739)
993b4d9 chore: update docusaurus template (#746)
be4331b chore: update repository templates (#735)
9df136c chore: update repository templates (#738)
31fdb7d chore: update repository templates (#749)
5fc3c75 chore: update repository templates (#753)
64ac756 ci: add codeql
b3d117b feat: Ability to Configure Remote Authorizers to set Headers in AuthenticationSession (#717)
22b0dbe feat: add request header in match context (#719)
5613f65 feat: improved JWT Authorizer JWKs fetching (#726)
52f1c7b fix: add docs/node_modules target
3a9ae1a fix: cache introspection pre-auth (#723)
2ccbb2f fix: ensure no vulnerable jwt-go deep dependency is being used (#745)
598d48c fix: makefile and sdk issues
83c5349 test: add improved preauth tests (#758)
c444d46 test: resolve waiting forever regression (#755)
e4e2263 test: resolve windows build failures (#754)

Docker images

• docker pull oryd/oathkeeper:v0
• docker pull oryd/oathkeeper:v0.38
• docker pull oryd/oathkeeper:v0.38.12
• docker pull oryd/oathkeeper:v0.38.12-beta.1
• docker pull oryd/oathkeeper:latest
• docker pull oryd/oathkeeper:v0-alpine
• docker pull oryd/oathkeeper:v0.38-alpine
• docker pull oryd/oathkeeper:v0.38.12-alpine
• docker pull oryd/oathkeeper:v0.38.12-beta.1-alpine
• docker pull oryd/oathkeeper:latest-alpine

v0.38.11-beta.1

This release primarily addresses issues in the SDK build pipeline.

0.38.11-beta.1 (2021-05-13)

Bug Fixes

• Init introspect http client once (#714) (e203ad1), closes #712
• Log credentials verifier error details (#713) (766b071), closes #467

Reverts

• Init introspect http client once (#714) (#722) (c58cbd9):

  This reverts commit e203ad1.

Changelog

99d09cb autogen(docs): generate and format documentation
c36bf3a autogen(docs): regenerate and update changelog
f30d1dc autogen(docs): regenerate and update changelog
1917072 autogen(docs): regenerate and update changelog
f498ec5 autogen(docs): regenerate and update changelog
413393f autogen: pin v0.38.11-beta.1 release commit
e203ad1 fix: init introspect http client once (#714)
766b071 fix: log credentials verifier error details (#713)
c58cbd9 revert: init introspect http client once (#714) (#722)

Docker images

• docker pull oryd/oathkeeper:v0
• docker pull oryd/oathkeeper:v0.38
• docker pull oryd/oathkeeper:v0.38.11
• docker pull oryd/oathkeeper:v0.38.11-beta.1
• docker pull oryd/oathkeeper:latest
• docker pull oryd/oathkeeper:v0-alpine
• docker pull oryd/oathkeeper:v0.38-alpine
• docker pull oryd/oathkeeper:v0.38.11-alpine
• docker pull oryd/oathkeeper:v0.38.11-beta.1-alpine
• docker pull oryd/oathkeeper:latest-alpine

v0.38.10-beta.2

This release improves the health status manager, cache management, improves JSON Web Token debuggability, and resolves other issues.

0.38.10-beta.2 (2021-05-05)

Bug Fixes

• Register makefile tasks (2832a77)
• Resolve makefile issues (9df3b2a)
• Set cost 1 when caching tokens with configurable max cost (#680) (8db0e9d)
• Update shebangs to use bash from /usr/bin/env instead of /bin/ for better portability (#694) (e522062)

Code Refactoring

• Move api.json (7dc37fd)

Documentation

• Add dotnet sdk (#683) (05ae925):

  • docs: add dotnet sdk

  • docs: add dotnet sdk versioned

• Change forum to discussions readme (#690) (d942c04)

• Consistent authz headers (#699) (19948e1):

  Removes the "Authorizer" prefix from a few of the authorizers to make them all consistent.

• Fix typo (#696) (eda83f1)

• Point to deny authz (#701) (4f01963), closes #700

Features

• Add health event manager and rules readiness probe (#674) (01d8588)

• Add http method into session.MatchContext (#676) (e15a7a5), closes #625

• Add support for requesting an audience to the OAuth2 Introspection pr… (#678) (2405810), closes #677

• Additional JWT auth debug information (#681) (d08ab50), closes #668:

  JWT Claims added to error details field.

• Adds audience into Extra at oAuth2 introspection (#480) (c9faecc)

• Global docs sidebar and added cloud pages (#705) (f67241f)

Changelog

8a7177d autogen(docs): generate and format documentation
0dba0d0 autogen(docs): generate and format documentation
fa4e630 autogen(docs): generate and format documentation
c0f5276 autogen(docs): regenerate and update changelog
a9646e4 autogen(docs): regenerate and update changelog
2f6d825 autogen(docs): regenerate and update changelog
852fbc1 autogen(docs): regenerate and update changelog
5f89a2d autogen(docs): regenerate and update changelog
9c8a382 autogen(docs): regenerate and update changelog
59d9652 autogen(docs): regenerate and update changelog
c200545 autogen(docs): regenerate and update changelog
3df325e autogen(docs): regenerate and update changelog
5b1d37b autogen(docs): regenerate and update changelog
275d670 autogen(docs): regenerate and update changelog
c8ebe55 autogen(docs): regenerate and update changelog
e8efa64 autogen(docs): regenerate and update changelog
5e6a432 autogen(docs): update milestone document
945be65 autogen(openapi): Regenerate swagger spec and internal client
6d35551 autogen: add v0.38.9-beta.1 to version.schema.json
16e8e42 autogen: pin v0.38.10-beta.1 release commit
4b3403b autogen: pin v0.38.10-beta.2 release commit
15b5818 autogen: pin v0.38.10-beta.2.pre.1 release commit
4df7048 chore: add package-lock.json (#687)
2914a81 chore: add prettier (#688)
a6d6365 chore: fix sdk links (#684)
44870bb chore: revert go mod changes
dff8531 chore: update docusaurus template
3a80c53 chore: update docusaurus template
0913cfe chore: update docusaurus template
3d6254b chore: update docusaurus template (#666)
0823fe7 chore: update docusaurus template (#679)
e444059 chore: update docusaurus template (#692)
27d8ca2 chore: update docusaurus template (#703)
a423eed chore: update docusaurus template (#704)
3bc15a9 chore: update repository templates (#675)
621ef68 chore: update repository templates (#686)
de190e1 chore: update repository templates (#702)
05ae925 docs: add dotnet sdk (#683)
d942c04 docs: change forum to discussions readme (#690)
19948e1 docs: consistent authz headers (#699)
eda83f1 docs: fix typo (#696)
4f01963 docs: point to deny authz (#701)
01d8588 feat: add health event manager and rules readiness probe (#674)
e15a7a5 feat: add http method into session.MatchContext (#676)
2405810 feat: add support for requesting an audience to the OAuth2 Introspection pr… (#678)
d08ab50 feat: additional JWT auth debug information (#681)
c9faecc feat: adds audience into Extra at oAuth2 introspection (#480)
f67241f feat: global docs sidebar and added cloud pages (#705)
2832a77 fix: register makefile tasks
9df3b2a fix: resolve makefile issues
8db0e9d fix: set cost 1 when caching tokens with configurable max cost (#680)
e522062 fix: update shebangs to use bash from /usr/bin/env instead of /bin/ for better portability (#694)
7dc37fd refactor: move api.json

Docker images

• docker pull oryd/oathkeeper:v0
• docker pull oryd/oathkeeper:v0.38
• docker pull oryd/oathkeeper:v0.38.10
• docker pull oryd/oathkeeper:v0.38.10-beta.2
• docker pull oryd/oathkeeper:latest
• docker pull oryd/oathkeeper:v0-alpine
• docker pull oryd/oathkeeper:v0.38-alpine
• docker pull oryd/oathkeeper:v0.38.10-alpine
• docker pull oryd/oathkeeper:v0.38.10-beta.2-alpine
• docker pull oryd/oathkeeper:latest-alpine

v0.38.9-beta.1

This release adds support for X-Forwarded-Proto, passes tracing contexts to downstream requests, bumps Go to 1.16, and resolves issues preventing the log level from being set to trace level. Additionally included are improvements to the overall tracing set up, a cookie authenticator bugfix, and a bugfix for glob pattern matching.

0.38.9-beta.1 (2021-03-17)

Bug Fixes

• Accept lower and uppercase in bearer token handler (6e46d4a)

• Add support for X-Forwarded-Proto header (#638) (6eb83fd), closes #153

• Ignore cookie auth when no cookies set (c84d880)

• Make glob patterns match only one path segment. (#664) (c711aac), closes #630:

  This makes / also a separator as well as the presumably default value of .. This allows using <*> for matching only one path segment.

• Pass context through to external requests (#627) (ee25197):

  Enables proper tracing through Jaeger etc

• Resolve goreleaser issues and bump golang (7291df9)

• Update goreleaser config (9689f45)

• Update log schema (78e654d)

Features

• Bump to go 1.16 (e74d4a2)
• Resolve go mod issues (6a3f5d3)

Unclassified

• Add missing documentation for oauth2_introspection (#648) (34cf38c), closes #549
• Formatting (546691b)
• Add tracing to outbound oauth introspection requests (daf44cb)

Changelog

daf44cb Add tracing to outbound oauth introspection requests
546691b Formatting
4e1aed9 autogen(docs): generate and format documentation
2e85095 autogen(docs): generate and format documentation
460791f autogen(docs): generate and format documentation
abe629c autogen(docs): generate and format documentation
b897d06 autogen(docs): generate and format documentation
f3561e6 autogen(docs): generate and format documentation
fe013c2 autogen(docs): generate and format documentation
c246e19 autogen(docs): generate and format documentation
94c9903 autogen(docs): regenerate and update changelog
7190ec7 autogen(docs): regenerate and update changelog
ae5417d autogen(docs): regenerate and update changelog
ef9153e autogen(docs): regenerate and update changelog
e27cdab autogen(docs): regenerate and update changelog
eb53de7 autogen(docs): regenerate and update changelog
10a9ba6 autogen(docs): regenerate and update changelog
2632da7 autogen(docs): regenerate and update changelog
6eafbbb autogen(docs): update milestone document
ccab9eb autogen(openapi): Regenerate swagger spec and internal client
3b37928 autogen: pin v0.38.7-beta.1 release commit
2943e9a autogen: pin v0.38.8-beta.1 release commit
9ad41f0 autogen: pin v0.38.9-beta.1 release commit
7afdc40 autogen: pin v0.38.9-beta.1.pre.1 release commit
9695b77 autogen: pin v0.38.9-beta.1.pre.2 release commit
7725554 autogen: pin v0.38.9-beta.1.pre.3 release commit
a8f4a7b autogen: pin v0.38.9-beta.1.pre.4 release commit
19fa7a5 chore: update repository templates (#637)
f40a5ef chore: update repository templates (#639)
21be89b chore: update repository templates (#653)
82a80ef ci: add go orb
d2ad33c ci: bump cci orbs
68889e7 ci: bump ci timeout
cda6b00 ci: bump goreleaser orb
2a282e0 ci: bump orbs
1648f84 ci: bump orbs
1f10386 ci: disable changelog cache
e00c10b ci: remove missing dependency
34cf38c doc: add missing documentation for oauth2_introspection (#648)
e74d4a2 feat: bump to go 1.16
6a3f5d3 feat: resolve go mod issues
6e46d4a fix: accept lower and uppercase in bearer token handler
6eb83fd fix: add support for X-Forwarded-Proto header (#638)
c84d880 fix: ignore cookie auth when no cookies set
c711aac fix: make glob patterns match only one path segment. (#664)
ee25197 fix: pass context through to external requests (#627)
7291df9 fix: resolve goreleaser issues and bump golang
9689f45 fix: update goreleaser config
78e654d fix: update log schema

Docker images

• docker pull oryd/oathkeeper:v0
• docker pull oryd/oathkeeper:v0.38
• docker pull oryd/oathkeeper:v0.38.9
• docker pull oryd/oathkeeper:v0.38.9-beta.1
• docker pull oryd/oathkeeper:latest
• docker pull oryd/oathkeeper:v0-alpine
• docker pull oryd/oathkeeper:v0.38-alpine
• docker pull oryd/oathkeeper:v0.38.9-alpine
• docker pull oryd/oathkeeper:v0.38.9-beta.1-alpine
• docker pull oryd/oathkeeper:latest-alpine

v0.38.6-beta.1

We are happy to announce Dart and Rust SDKs for Ory Oathkeeper! Additionally, a new bearer_token authenticator has been added.

0.38.6-beta.1 (2021-01-27)

Documentation

• Add Rust and Dart SDKs (1524fed):

  We now support for Rust and Dart SDKs!

• Fix js npm links (#634) (c339fee)

• Rename index documents (7de0ac3)

Features

• Add bearer_token authenticator (#613) (b623ae7):

  Adds a new authenticator to work with Kratos' new API token.
  Works the same as the cookie_session authenticator but checks for a
  bearer token in the Authorization header (unless overwritten by
  token_from)

Changelog

9c1b0cd autogen(docs): generate and format documentation
b0924e5 autogen(docs): generate and format documentation
ccd6f40 autogen(docs): regenerate and update changelog
0116e70 autogen(docs): regenerate and update changelog
e316eda autogen(docs): regenerate and update changelog
fe669b4 autogen(docs): regenerate and update changelog
0769ae3 autogen(docs): regenerate and update changelog
033f543 autogen(docs): regenerate and update changelog
53bb137 autogen(docs): regenerate and update changelog
83cf923 autogen(openapi): Regenerate swagger spec and internal client
d4723b4 autogen: add v0.38.5-beta.1 to version.schema.json
a0c4d7f autogen: pin v0.38.6-beta.1 release commit
4596f0d chore(modules): update dependencies to mitigate security issues (#635)
bf53018 chore: bump gjson (#632)
a8da3e9 chore: update docusaurus template (#617)
86170df chore: update repository templates (#616)
f0b99d7 chore: update repository templates (#622)
1524fed docs: add Rust and Dart SDKs
c339fee docs: fix js npm links (#634)
7de0ac3 docs: rename index documents
b623ae7 feat: add bearer_token authenticator (#613)
0e0c1f5 style: format

Docker images

• docker pull oryd/oathkeeper:v0
• docker pull oryd/oathkeeper:v0.38
• docker pull oryd/oathkeeper:v0.38.6
• docker pull oryd/oathkeeper:v0.38.6-beta.1
• docker pull oryd/oathkeeper:latest
• docker pull oryd/oathkeeper:v0-alpine
• docker pull oryd/oathkeeper:v0.38-alpine
• docker pull oryd/oathkeeper:v0.38.6-alpine
• docker pull oryd/oathkeeper:v0.38.6-beta.1-alpine
• docker pull oryd/oathkeeper:latest-alpine

v0.38.5-beta.1

The ORY Community is proud to present you the next iteration of ORY Oathkeeper. In this release, we focused on improving production stability and resolved several pesky bugs!

0.38.5-beta.1 (2020-12-10)

Bug Fixes

• Check content-length header in lowercase (#530) (a68fc8a):

  Issue #422 didn't fix the problem with the requests' Content-Length
  being copied in the responses because the check was case-sensitive and
  unit tests didn't cover it.

• Never construct id token claim templates in parallel (#552) (4f504d9), closes #551

• Remove token_type validation from introspection handler (#556) (b18d90a), closes #553

• Support windows file paths (#557) (6a05682), closes #514 #332

• Update dd-trace to fix build (2e571fa)

Documentation

• Add contributing to sidebar (#595) (a3c9584):

  The same change as in ory/hydra#2209

• Add newsletter to config (3c02e22)

• Correct sidebar.json (#524) (34e2077)

• Fix typo (393af92)

• Fix typo in API access rules and improve layout (#599) (6a30ce2)

• Fix typo in pipeline/error.md (#568) (5d04c6b)

• Resolve list in main docs (1c2241c), closes #602

• Resolve regression issues (82008b2)

Features

• Forward original authorization header when using remote (json) authorizer (#554) (f4f781e), closes #528
• Use google/go-cloud to fetch rules and credentials from object storage (#562) (666b951), closes #518 #518

Unclassified

• docs. fix typo in list (335189f)

Changelog

646e1fc autogen(docs): generate and format documentation
a5fc47d autogen(docs): generate and format documentation
9a37e73 autogen(docs): generate and format documentation
fba62b4 autogen(docs): generate and format documentation
44e65c7 autogen(docs): generate and format documentation
4da8cef autogen(docs): generate and format documentation
381927c autogen(docs): regenerate and update changelog
89947a7 autogen(docs): regenerate and update changelog
93e39f7 autogen(docs): regenerate and update changelog
23b3539 autogen(docs): regenerate and update changelog
eca4dbf autogen(docs): regenerate and update changelog
cac465b autogen(docs): regenerate and update changelog
35e0f6d autogen(docs): regenerate and update changelog
ad382a6 autogen(docs): regenerate and update changelog
5aa70eb autogen(docs): regenerate and update changelog
e36ae92 autogen(docs): regenerate and update changelog
3926efa autogen(docs): regenerate and update changelog
8c26683 autogen(docs): regenerate and update changelog
f5be0f4 autogen(docs): regenerate and update changelog
606d0da autogen(docs): regenerate and update changelog
45d5914 autogen(docs): regenerate and update changelog
32df8f1 autogen(docs): regenerate and update changelog
624f7d6 autogen(docs): regenerate and update changelog
212615d autogen(docs): regenerate and update changelog
6940ca9 autogen(docs): regenerate and update changelog
7627230 autogen(docs): regenerate and update changelog
8be8542 autogen(docs): regenerate and update changelog
5501e17 autogen(docs): regenerate and update changelog
408e9f2 autogen(docs): update milestone document
4cb3691 autogen(docs): update milestone document
a9f8630 autogen(docs): update milestone document
5794b23 autogen(docs): update milestone document
a598b1c autogen(docs): update milestone document
1dd8fe9 autogen(docs): update milestone document
dbe1987 autogen(docs): update milestone document
244b781 autogen(docs): update milestone document
85df0e1 autogen(docs): update milestone document
9b9ce0c autogen(docs): update milestone document
aa7b080 autogen(openapi): Regenerate swagger spec and internal client
d1ed570 autogen: add v0.38.4-beta.1 to version.schema.json
f4a04da autogen: pin v0.38.5-beta.1 release commit
497ef9c autogen: pin v0.38.5-beta.1.pre.0 release commit
0e2bc45 autogen: pin v0.38.5-beta.1.pre.1 release commit
d29a0b1 chore: update docusaurus template
c2e1841 chore: update docusaurus template (#540)
8a22fcf chore: update docusaurus template (#547)
ea88254 chore: update docusaurus template (#559)
aa19fad chore: update docusaurus template (#561)
648c34b chore: update docusaurus template (#567)
cd9dab9 chore: update docusaurus template (#573)
55733a3 chore: update docusaurus template (#577)
292933a chore: update docusaurus template (#583)
764209e chore: update docusaurus template (#585)
5c211fd chore: update docusaurus template (#588)
742a072 chore: update docusaurus template (#589)
00dee96 chore: update docusaurus template (#590)
d0a0ecd chore: update docusaurus template (#592)
47b1e17 chore: update docusaurus template (#596)
306e830 chore: update docusaurus template (#598)
af0cfa8 chore: update docusaurus template (#607)
780e9ce chore: update docusaurus template (#608)
9d1dbde chore: update docusaurus template (#610)
44b80e2 chore: update docusaurus template (#611)
5d7c05a chore: update docusaurus template (#612)
a34e30a chore: update repository templates (#546)
8085fe0 chore: update repository templates (#571)
e02af30 chore: update repository templates (#581)
181a4a1 chore: update repository templates (#584)
2b0df6a chore: update repository templates (#586)
d1e4153 chore: update sprig to v3 and bump Golang (#548)
335189f docs. fix typo in list
a3c9584 docs: add contributing to sidebar (#595)
3c02e22 docs: add newsletter to config
34e2077 docs: correct sidebar.json (#524)
393af92 docs: fix typo
6a30ce2 docs: fix typo in API access rules and improve layout (#599)
5d04c6b docs: fix typo in pipeline/error.md (#568)
1c2241c docs: resolve list in main docs
82008b2 docs: resolve regression issues
f4f781e feat: forward original authorization header when using remote (json) authorizer (#554)
666b951 feat: use google/go-cloud to fetch rules and credentials from object storage (#562)
a68fc8a fix: check content-length header in lowercase (#530)
4f504d9 fix: never construct id token claim templates in parallel (#552)
b18d90a fix: remove token_type validation from introspection handler (#556)
6a05682 fix: support windows file paths (#557)
2e571fa fix: update dd-trace to fix build

Docker images

• docker pull oryd/oathkeeper:v0
• docker pull oryd/oathkeeper:v0.38
• docker pull oryd/oathkeeper:v0.38.5
• docker pull oryd/oathkeeper:v0.38.5-beta.1
• docker pull oryd/oathkeeper:latest
• docker pull oryd/oathkeeper:v0-alpine
• docker pull oryd/oathkeeper:v0.38-alpine
• docker pull oryd/oathkeeper:v0.38.5-alpine
• docker pull oryd/oathkeeper:v0.38.5-beta.1-alpine
• docker pull oryd/oathkeeper:latest-alpine