2.0.0-rc1

Changelog

• 6b6a448 Add legacy /auth path prefix detection, realm extraction (#234)
• c300523 Keycloak 17+ compatibility changes (#232)
• ed6d2c4 Legacy discovery uri (#235)
• 316cae4 Update gocloak,text lib (#236)

1.8.1

What's Changed

• Fix missing env vars for OPA, update docs by @p53 in #226
• Fix strict-deny, to not loop in redirect by @p53 in #227
• Update logout docu by @p53 in #228
• Update docu for 1.8.1 by @p53 in #230

Full Changelog: 1.8.0...1.8.1

1.8.1-rc1

Changelog

• 6e699b5 Fix missing env vars for OPA, update docs (#226)
• 0c1820e Fix strict deny in redirect (#228)
• 0034b79 Fix strict-deny, to not loop in redirect (#227)

1.8.0

IMPORTANT

• please be aware that we remove previous non-consistent configuration possibility, before you were able to enable-default-deny and at the same time have resource blacklisted with /* resource, which resulted to turning off enable-default-deny in behind and using only user supplied rules, as it is quite non-transparent behaviour from this release it won't be allowed to have such combination, gatekeeper won't start, please check your configuration before upgrading

What's Changed

• Add OPA External Authorization #191 by @p53 in #213
• Remove non-transparent behaviour when default-deny and /* defined in … by @p53 in #215
• Default Deny strict was returning 401 in auth_code flow instead of re… by @p53 in #216
• Update docker/distribution dependency, security alert by @p53 in #217
• Update net/sys deps by @p53 in #218
• Fix responses after external authz by @p53 in #221

Full Changelog: 1.7.0...1.8.0

1.8.0-rc3

Fix responses after external authz (#221)

* Fix external authz responses, add test cases

* Lint checks

1.8.0-rc2

Net vulner dep update (#219)

* Update net/sys deps

* Update to version 1.18.6

* Raise version of golangci-lint due to issues with 1.18 go

* POST method string replacement with lib var

* Lint checks

1.7.0

What's Changed

• Add docu related to auth flows #206 by @p53 in #207
• No proxy and headers match by @p53 in #208
• log client_ip field with real ip value (#209) by @sk1m in #210
• Update docs for 1.7.0 by @p53 in #211
• Docs 1.7.0 by @p53 in #212

New Contributors

• @sk1m made their first contribution in #210

Full Changelog: 1.6.2...1.7.0

1.7.0-rc2

Changelog

• b4db9ed Update docs for 1.7.0 (#211)
• 5c13a19 log client_ip field with real ip value (#209) (#210)

1.7.0-rc1

Changelog

• 157f793 Add docu related to auth flows (#207)
• d152dee No proxy headers match (#208)

1.6.2

What's Changed

• Update dependencies with reported vulns by @p53 in #204

Full Changelog: 1.6.1...1.6.2