v1.9.0

Commits

• c187c35: fix build and test action (Basha Mougamadou) #60
• 594c823: Bump golang.org/x/oauth2 from 0.21.0 to 0.22.0 (dependabot[bot]) #58
• 1ec6e51: Bump github.com/tidwall/gjson from 1.17.1 to 1.17.3 (dependabot[bot]) #57
• 81007d5: Bump github.com/coreos/go-oidc/v3 from 3.10.0 to 3.11.0 (dependabot[bot]) #56
• d1e3d03: Decomm travis (Basha Mougamadou) #61
• db73b1d: fix pkce implementation (Basha Mougamadou) #62

v1.8.0

Commits

• 9b7a59e: Fix a potential race: StaticOIDCClientsStore concurrent access (#45) (Dmitrii Ermakov) #45
• 8f05dde: Implement configurable OIDC claims extraction (#44) (Dmitrii Ermakov) #44

v1.7.1

Bug Fixes

• make client secret argument optional #55 (Basha Mougamadou)

v1.7.0

Features

• support PKCE #54 (Basha Mougamadou)

v1.6.0

Bug Fixes

• validate messages against all authenticators #51 (Basha Mougamadou)

Continuous Integration

• update check action v4 #51 (Basha Mougamadou)
• build on pull request #51 (Basha Mougamadou)

Commits

• 702d3ae: Bump go version to 1.22 + libraries to latest (Basha Mougamadou) #51

v1.5.0

Commits

• 8c77a99: Bump golang.org/x/oauth2 from 0.5.0 to 0.6.0 (#30) (dependabot[bot]) #30
• fb08c99: Migrate library haproxy-spoe-go (Basha Mougamadou) #43

v1.4.0

Commits

• 7e9eb29: Bump go version to 1.20 (Basha Mougamadou) #31
• 1681cce: Retrieve client information from spoe message (Basha Mougamadou) #33

v1.3.0

Commits

• eee0bbb: Create a dependabot config file (Manu Nicolas) #19
• 2511978: Bump github.com/spf13/viper from 1.8.1 to 1.14.0 (dependabot[bot]) #24
• b1371c5: Bump github.com/vmihailenco/msgpack/v5 from 5.3.4 to 5.3.5 (dependabot[bot]) #23
• cba6078: Bump github.com/sirupsen/logrus from 1.7.0 to 1.9.0 (dependabot[bot]) #21
• 3ff3c27: Bump github.com/coreos/go-oidc/v3 from 3.0.0 to 3.5.0 (dependabot[bot]) #20
• 64016b4: Bump golang.org/x/oauth2 from 0.3.0 to 0.4.0 (dependabot[bot]) #25
• 2e7b3e3: Bump github.com/spf13/viper from 1.14.0 to 1.15.0 (dependabot[bot]) #26
• ca87a1e: Bump golang.org/x/oauth2 from 0.4.0 to 0.5.0 (dependabot[bot]) #28
• 27a3c5d: Send back the logged in LDAP username to haproxy (#27) (Manu Nicolas) #27

v1.2.0

This is a breaking release

This version enables the option to use TLS secured LDAP servers, through the LDAPS protocol. To do that the previous ldap.hostname is removed and replaced by ldap.uri

Commits

• 6364fff: Bump ldap dependency and clean up (Manu Nicolas) #18
• 5d9fd80: Switch to the ldap.DialURL function and introduce an option for TLS verification (Manu Nicolas) #18
• b628e12: Switch to ldaps for tests (Manu Nicolas) #18

v1.1.0

Commits

• 285e521: Support group authorization for ldap (Basha Mougamadou) #17