v0.5.2

Changelog

• a747f61 Add OIDC client secret support to policy server

v0.5.1

Changelog

• a60ce7d Add two-tier discovery: public bootstrap and authenticated endpoints
• 18f0773 Learn bootstrap URL from policy server Link header

v0.5.0

Changelog

• 0a35fd5
• 69951f5 Add --discovery-base-url flag to policy server

v0.4.0

Changelog

• 0a35fd5
• 69951f5 Add --discovery-base-url flag to policy server

v0.3.5

Changelog

• ed83619
• 3cdad58 Add discovery URL redirect pattern for HTTP caching
• 901c1bb Cleaning up tasks
• a2e1937 Remove arbitrary time.Sleep waits from broker tests

v0.3.4

Changelog

• 2c99173 Fix discovery handler to decode base64url tokens

v0.3.3

Changelog

• 724a02c Add DEBUG level logging for all HTTP requests
• 4849e06 Add test for brace expansion pattern matching
• f62ab78 Policy server: require host pattern match before defaults apply
• 1a0e659 Switch host pattern matching to doublestar for brace expansion
• 2a41f5a cleanup deps
• 47df486 reuire user match at least one host to do a HELLO

v0.3.2

Changelog

• d88bf2d Fix TestAuth_Run_BinaryTokenPreservation on Linux CI

v0.3.1

Changelog

• 6ecb061 discovery end to end I think

v0.3.0

Changelog

• cfb60d8 Add 422 Unprocessable Content handling for CA/policy server
• f89891c Add Hello() method for token validation
• c34a31a Add config-doc command
• 0ad8c23 CA client: Link header parsing and GetDiscovery
• e8f0ee4 CA server: Pass through Link header from policy server
• 5df82b7 Cleanup multi-ca
• 4252210 Cleanup tasks whch are done
• 3e7f879 Discovery protocol design: Add bt tasks for CA/broker/policy server changes
• c75a178 Discovery protocol design: Add packed trie (DAWG) exploration task
• b9bf433 Fix token encoding: base64url encode at broker, decode at policy server
• d6937f6 Move tokens and signatures to Authorization headers; add hello requests
• b28b76e Policy server: Add Discovery Link header
• c65455b Policy server: Add discovery endpoint and separate auth from authz
• 58862c7 WIP on discovery handling
• f409cb7 adding metric tasks and some task cleanup
• c4f3ba0 bt -> yatl
• f7cca30 caclient: Cache discovery URL to short-circuit pattern checks
• bcc4697 clean up complete task
• 25114a4 clean up task names
• 1522063 clean up tasks
• 41929ce initial multi-ca
• a7797d9 more design work to get efficient match
• 8d7eac1 more protocol work
• 97e40f9 need to switch broker control socket protocol
• c87dceb remove old plan file
• 7e37faf task to clean up ssh block