v26.2.0 Bug Fixes Always retry curl invocations to surmount transient third-party failures (9a8bda2): Clean path while matching to prevent path traversal (8e00021): Context passing in jsonnetsecure (664432e): Correctly scan SQL NULL into go JSON types (9088f91): Down migrations in newer MySQL versions (c92bc2c): Drop all X-Forwarded-* headers when untrusted (36a676e): Fix benchmark test (5862cf6):…
This release brings internal improvements to configuration handling, observability, and repo management. It also aligns Oathkeeper more closely with the rest of the Ory ecosystem by migrating to vendored libraries, modernizing infrastructure, and improving CI/CD pipelines. Ory has moved to a new versioning scheme. Read about our new version scheme. Interested in self-hosting Ory with support, SLAs…
This is a maintanance release with small fixes and dependency updates. Bug Fixes Memory leak in id_token mutator cache (#1209) (363ac04) Code Generation Pin v0.40.9 release commit (05493f3) Changelog 7e9e856 autogen(docs): regenerate and update changelog 517f326 autogen(docs): regenerate and update changelog 7027d73 autogen(docs): regenerate and update changelog 8330ab4 autogen(docs): regenerate a…
This release consists of dependency updates and also includes some bug fixes. Bug Fixes Config schema $id (889c9ec) Improve caching configuration (2373057) metrics: Remove query string from collapsed path segment (#1159) (15ee438) Remote authorizers with request body (#1185) (62ca1e8) Set correct max cost for oauth2 introspection authn handler (#1176) (368c28a) Code Generation Pin v0.40.8 release…
This release includes new features and many improvements to the tracing instrumentations. Code Generation Pin v0.40.7 release commit (8fc9b7a): Bumps from v0.40.7-pre.0 Changelog 8fc9b7a autogen: pin v0.40.7 release commit Artifacts can be verified with cosign using this public key.
autogen: pin v0.40.7-pre.0 release commit Bug Fixes Ignore version.schema.json (prettier) (58690ae) Update alpine version (#1128) (5bf9b70) Code Generation Pin v0.40.7-pre.0 release commit (82282ce) Features Add headers option for remote_json authorizer (#1140) (1ee445d) Preserve_host feature for oauth2_introspect, better tracing, introspection prefixes (#1131) (b5d4d88): This patch additionally a…
Resolves an issue in how X-Forwarded headers were set. Bug Fixes Properly copy x-forwarded headers from upstream (#1121) (7088682) Code Generation Pin v0.40.6 release commit (75eb682) Changelog ee605eb autogen(docs): generate and bump docs 8fc3473 autogen: add v0.40.5 to version.schema.json 75eb682 autogen: pin v0.40.6 release commit 7088682 fix: properly copy x-forwarded headers from upstream (#1…
Ory Oathkeeper v0.44.4 uses the new Rewrite feature of Golang's reverse proxy. This will strip any X-Forwarded headers from upstream requests. This however is not always desirable which is why a new config flag serve.proxy.trust_forwarded_headers was introduced to optionally enable the forwarding of X-Forwarded headers. Code Generation Pin v0.40.5 release commit (ba1f90a) Features Flag to disable…
Added distroless image, fixed some bugs, and added support for JWKs key rotation in the ID token mutator. Bug Fixes Apk install issue (08b2bfb) Ensure logger uses config (#1104) (d9b0965) Noop mutator don't overwrite session headers (#1091) (3a716f2) Use Query.Get when fetching QueryParameter (#1106) (c520e50) Code Generation Pin v0.40.4 release commit (70d63f3) Features Add distroless images (#11…
This release fixes a low-severity security vulnerability. Bug Fixes Report 499, 502, or 504 (#1090) (360a03e) Sqa config values unified across projects (#1094) (9374d2f) Switch to httputil.ReverseProxy.Rewrite (#1098) (c5cc7f7) Code Generation Pin v0.40.3 release commit (2ab7687) Features Tracing for gRPC middleware (#1086) (c60e4ac) Changelog d15dfa2 autogen(docs): generate and bump docs 4768d05…