git.iko.soy/typeable/oauth2-proxy
on master help sign in
Update changelog ready for release v6.0.0
commit25154ede41dbac4f93aa8c7705c19a3ba67d6bdc authorJoel Speed <joel.speed@hotmail.co.uk> dateSat 27 Jun 2020, 12:05 (6 years ago) parentee5662e
5 files changed+27−7
compare with master
unifiedsplit
CHANGELOG.md+21−1 README.md+3−3 contrib/local-environment/docker-compose-keycloak.yaml+1−1 contrib/local-environment/docker-compose.yaml+1−1 docs/1_installation.md+1−1
CHANGELOG.md+21−1
@@ -4,6 +4,25 @@
44
55## Important Notes
66
7+## Breaking Changes
8+
9+## Changes since v6.0.0
10+
11+# v6.0.0
12+
13+## Release Highlights
14+
15+- Migrated to an independent GitHub organisation
16+- Added local test environment examples using docker-compose and kind
17+- Error pages will now be rendered when upstream connections fail
18+- Non-Existent options in config files will now return errors on startup
19+- Sessions are now always encrypted, independent of configuration
20+
21+## Important Notes
22+
23+- (Security) Fix for [open redirect vulnerability](https://github.com/oauth2-proxy/oauth2-proxy/security/advisories/GHSA-5m6c-jp6f-2vcv).
24+ - More invalid redirects that lead to open-redirects were reported
25+ - An extensive test suite has been added to prevent future regressions
726- [#453](https://github.com/oauth2-proxy/oauth2-proxy/pull/453) Responses to endpoints with a proxy prefix will now return headers for preventing browser caching.
827
928## Breaking Changes
@@ -60,6 +79,7 @@
6079
6180## Changes since v5.1.1
6281
82+- [GHSA-5m6c-jp6f-2vcv](https://github.com/oauth2-proxy/oauth2-proxy/security/advisories/GHSA-5m6c-jp6f-2vcv) New OpenRedirect cases have been found (@JoelSpeed)
6383- [#639](https://github.com/oauth2-proxy/oauth2-proxy/pull/639) Change how gitlab-group is parsed on options (@linuxgemini)
6484- [#615](https://github.com/oauth2-proxy/oauth2-proxy/pull/615) Kubernetes example based on Kind cluster and Nginx ingress (@EvgeniGordeev)
6585- [#596](https://github.com/oauth2-proxy/oauth2-proxy/pull/596) Validate Bearer IDTokens in headers with correct provider/extra JWT Verifier (@NickMeves)
@@ -85,7 +105,7 @@
85105- [#537](https://github.com/oauth2-proxy/oauth2-proxy/pull/537) Drop Fallback to Email if User not set (@JoelSpeed)
86106- [#535](https://github.com/oauth2-proxy/oauth2-proxy/pull/535) Drop support for pre v3.1 cookies (@JoelSpeed)
87107- [#533](https://github.com/oauth2-proxy/oauth2-proxy/pull/487) Set up code coverage within Travis for Code Climate (@JoelSpeed)
88−- [#514](https://github.com/oauth2-proxy/oauth2-proxy/pull/514) Add basic string functions to templates
108+- [#514](https://github.com/oauth2-proxy/oauth2-proxy/pull/514) Add basic string functions to templates (@n-i-x)
89109- [#524](https://github.com/oauth2-proxy/oauth2-proxy/pull/524) Sign cookies with SHA256 (@NickMeves)
90110- [#515](https://github.com/oauth2-proxy/oauth2-proxy/pull/515) Drop configure script in favour of native Makefile env and checks (@JoelSpeed)
91111- [#519](https://github.com/oauth2-proxy/oauth2-proxy/pull/519) Support context in providers (@johejo)
README.md+3−3
@@ -23,7 +23,7 @@ Going forward, all images shall be available at `quay.io/oauth2-proxy/oauth2-pro
2323
24241. Choose how to deploy:
2525
26− a. Download [Prebuilt Binary](https://github.com/oauth2-proxy/oauth2-proxy/releases) (current release is `v5.1.1`)
26+ a. Download [Prebuilt Binary](https://github.com/oauth2-proxy/oauth2-proxy/releases) (current release is `v6.0.0`)
2727
2828 b. Build with `$ go get github.com/oauth2-proxy/oauth2-proxy` which will put the binary in `$GOROOT/bin`
2929
@@ -43,8 +43,8 @@ oauth2-proxy-x.y.z.linux-amd64: OK
4343
4444## Security
4545
46−If you are running a version older than v5.1.0 we **strongly recommend you please update** to a current version.
47−See [open redirect vulnverability](https://github.com/oauth2-proxy/oauth2-proxy/security/advisories/GHSA-j7px-6hwj-hpjg) for details.
46+If you are running a version older than v6.0.0 we **strongly recommend you please update** to a current version.
47+See [open redirect vulnverability](https://github.com/oauth2-proxy/oauth2-proxy/security/advisories/GHSA-5m6c-jp6f-2vcv) for details.
4848
4949## Docs
5050
contrib/local-environment/docker-compose-keycloak.yaml+1−1
@@ -15,7 +15,7 @@ services:
1515
1616 oauth2-proxy:
1717 container_name: oauth2-proxy
18− image: quay.io/oauth2-proxy/oauth2-proxy:v5.1.1
18+ image: quay.io/oauth2-proxy/oauth2-proxy:v6.0.0
1919 command: --config /oauth2-proxy.cfg
2020 hostname: oauth2-proxy
2121 volumes:
contrib/local-environment/docker-compose.yaml+1−1
@@ -13,7 +13,7 @@ version: '3.0'
1313services:
1414 oauth2-proxy:
1515 container_name: oauth2-proxy
16− image: quay.io/oauth2-proxy/oauth2-proxy:v5.1.1
16+ image: quay.io/oauth2-proxy/oauth2-proxy:v6.0.0
1717 command: --config /oauth2-proxy.cfg
1818 ports:
1919 - 4180:4180/tcp
docs/1_installation.md+1−1
@@ -9,7 +9,7 @@ nav_order: 1
99
10101. Choose how to deploy:
1111
12− a. Download [Prebuilt Binary](https://github.com/oauth2-proxy/oauth2-proxy/releases) (current release is `v5.1.1`)
12+ a. Download [Prebuilt Binary](https://github.com/oauth2-proxy/oauth2-proxy/releases) (current release is `v6.0.0`)
1313
1414 b. Build with `$ go get github.com/oauth2-proxy/oauth2-proxy` which will put the binary in `$GOROOT/bin`
1515