8d3de2d · typeable/oauth2-proxy

git.iko.soy/typeable/oauth2-proxy

Tidy changelog and update releases to v5.1.1 (#526)

commit8d3de2dc756bbdad86af55aba61a775c3868212a authorJoel Speed <Joel.speed@hotmail.co.uk> dateWed 6 May 2020, 19:00 (6 years ago) parent0d5fa21

3 files changed+37−17

compare with master

unifiedsplit

CHANGELOG.md+33−14 README.md+3−2 docs/1_installation.md+1−1

CHANGELOG.md+33−14

@@ -1,6 +1,6 @@

11# Vx.x.x (Pre-release)

3−## Release Hightlights

3+## Release Highlights

55## Important Notes

@@ -8,26 +8,26 @@

99## Breaking Changes

1010

11−- Migration from Pusher to independent org may have introduced breaking changes for your environment.

11+- [#464](https://github.com/oauth2-proxy/oauth2-proxy/pull/464) Migration from Pusher to independent org may have introduced breaking changes for your environment.

1212 - See the changes listed below for PR [#464](https://github.com/oauth2-proxy/oauth2-proxy/pull/464) for full details

1313 - Binaries renamed from `oauth2_proxy` to `oauth2-proxy`

14−- [#440](https://github.com/oauth2-proxy/oauth2-proxy/pull/440) Switch Azure AD Graph API to Microsoft Graph API (@johejo)

14+- [#440](https://github.com/oauth2-proxy/oauth2-proxy/pull/440) Switch Azure AD Graph API to Microsoft Graph API

1515 - The Azure AD Graph API has been [deprecated](https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-graph-api) and is being replaced by the Microsoft Graph API.

16− If your application relies on the access token being passed to it to access the Azure AD Graph API, you should migrate your application to use the Microsoft Graph API.

17− Existing behaviour can be retained by setting `-resource=https://graph.windows.net`.

16+ If your application relies on the access token being passed to it to access the Azure AD Graph API, you should migrate your application to use the Microsoft Graph API.

17+ Existing behaviour can be retained by setting `-resource=https://graph.windows.net`.

1818- [#484](https://github.com/oauth2-proxy/oauth2-proxy/pull/484) Configuration loading has been replaced with Viper and PFlag

1919 - Flags now require a `--` prefix before the option

2020 - Previously flags allowed either `-` or `--` to prefix the option name

2121 - Eg `-provider` must now be `--provider`

22−- - [#487](https://github.com/oauth2-proxy/oauth2-proxy/pull/487) Switch flags to StringSlice instead of StringArray

22+- [#487](https://github.com/oauth2-proxy/oauth2-proxy/pull/487) Switch flags to StringSlice instead of StringArray

2323 - Options that take multiple arguments now split strings on commas if present

2424 - Eg `--foo=a,b,c,d` would result in the values `a`, `b`, `c` and `d` instead of a single `a,b,c,d` value as before

2525

26−## Changes since v5.1.0

26+## Changes since v5.1.1

2727

2828- [#487](https://github.com/oauth2-proxy/oauth2-proxy/pull/487) Switch flags to PFlag to remove StringArray (@JoelSpeed)

2929- [#484](https://github.com/oauth2-proxy/oauth2-proxy/pull/484) Replace configuration loading with Viper (@JoelSpeed)

30−- [#499](https://github.com/oauth2-proxy/oauth2-proxy/pull/469) Add `-user-id-claim` to support generic claims in addition to email

30+- [#499](https://github.com/oauth2-proxy/oauth2-proxy/pull/499) Add `-user-id-claim` to support generic claims in addition to email (@holyjak)

3131- [#486](https://github.com/oauth2-proxy/oauth2-proxy/pull/486) Add new linters (@johejo)

3232- [#440](https://github.com/oauth2-proxy/oauth2-proxy/pull/440) Switch Azure AD Graph API to Microsoft Graph API (@johejo)

3333- [#453](https://github.com/oauth2-proxy/oauth2-proxy/pull/453) Prevent browser caching during auth flow (@johejo)

@@ -43,16 +43,35 @@

4343 - Binaries renamed from `oauth2_proxy` to `oauth2-proxy`

4444- [#432](https://github.com/oauth2-proxy/oauth2-proxy/pull/432) Update ruby dependencies for documentation (@theobarberbany)

4545- [#471](https://github.com/oauth2-proxy/oauth2-proxy/pull/471) Add logging in case of invalid redirects (@gargath)

46−- [#462](https://github.com/oauth2-proxy/oauth2-proxy/pull/462) Allow HTML in banner message (@eritikass).

47−- [#412](https://github.com/pusher/oauth2_proxy/pull/412) Allow multiple cookie domains to be specified (@edahlseng)

48−- [#413](https://github.com/oauth2-proxy/oauth2-proxy/pull/413) Add -set-basic-auth param to set the Basic Authorization header for upstreams (@morarucostel).

46+- [#462](https://github.com/oauth2-proxy/oauth2-proxy/pull/462) Allow HTML in banner message (@eritikass)

47+- [#412](https://github.com/oauth2-proxy/oauth2-proxy/pull/412) Allow multiple cookie domains to be specified (@edahlseng)

48+- [#413](https://github.com/oauth2-proxy/oauth2-proxy/pull/413) Add -set-basic-auth param to set the Basic Authorization header for upstreams (@morarucostel)

4949- [#483](https://github.com/oauth2-proxy/oauth2-proxy/pull/483) Warn users when session cookies are split (@JoelSpeed)

5050- [#488](https://github.com/oauth2-proxy/oauth2-proxy/pull/488) Set-Basic-Auth should default to false (@JoelSpeed)

51−- [#494](https://github.com/oauth2-proxy/oauth2-proxy/pull/494) Upstream websockets TLS certificate validation now depends on ssl-upstream-insecure-skip-verify

51+- [#494](https://github.com/oauth2-proxy/oauth2-proxy/pull/494) Upstream websockets TLS certificate validation now depends on ssl-upstream-insecure-skip-verify (@yaroslavros)

52+

53+# v5.1.1

54+

55+## Release Highlights

56+

57+N/A

58+

59+## Important Notes

60+

61+- (Security) Fix for [open redirect vulnerability](https://github.com/oauth2-proxy/oauth2-proxy/security/advisories/GHSA-j7px-6hwj-hpjg).

62+ - A bad actor using encoded whitespace in redirect URIs can redirect a session to another domain

63+

64+## Breaking Changes

65+

66+N/A

67+

68+## Changes since v5.1.0

69+

70+- [GHSA-j7px-6hwj-hpjg](https://github.com/oauth2-proxy/oauth2-proxy/security/advisories/GHSA-j7px-6hwj-hpjg) Fix Open Redirect Vulnerability with encoded Whitespace characters (@JoelSpeed)

5271

5372# v5.1.0

5473

55−## Release Hightlights

74+## Release Highlights

5675- Bump to Go 1.14

5776- Reduced number of Google API requests for group validation

5877- Support for Redis Cluster

@@ -84,7 +103,7 @@ N/A

84103

85104# v5.0.0

86105

87−## Release Hightlights

106+## Release Highlights

88107- Disabled CGO (binaries will work regardless og glibc/musl)

89108- Allow whitelisted redirect ports

90109- Nextcloud provider support added

README.md+3−2

@@ -21,7 +21,7 @@ Going forward, all images shall be available at `quay.io/oauth2-proxy/oauth2-pro

2121

22221. Choose how to deploy:

2323

24− a. Download [Prebuilt Binary](https://github.com/oauth2-proxy/oauth2-proxy/releases) (current release is `v5.1.0`)

24+ a. Download [Prebuilt Binary](https://github.com/oauth2-proxy/oauth2-proxy/releases) (current release is `v5.1.1`)

2525

2626 b. Build with `$ go get github.com/oauth2-proxy/oauth2-proxy` which will put the binary in `$GOROOT/bin`

2727

@@ -41,7 +41,8 @@ oauth2-proxy-x.y.z.linux-amd64: OK

4141

4242## Security

4343

44−If you are running a version older than v5.0.0 we **strongly recommend you please update** to a current version. RE: [open redirect vulnverability](https://github.com/oauth2-proxy/oauth2-proxy/security/advisories/GHSA-qqxw-m5fj-f7gv)

44+If you are running a version older than v5.1.0 we **strongly recommend you please update** to a current version.

45+See [open redirect vulnverability](https://github.com/oauth2-proxy/oauth2-proxy/security/advisories/GHSA-j7px-6hwj-hpjg) for details.

4546

4647## Docs

4748

docs/1_installation.md+1−1

@@ -9,7 +9,7 @@ nav_order: 1

10101. Choose how to deploy:

1111

12− a. Download [Prebuilt Binary](https://github.com/oauth2-proxy/oauth2-proxy/releases) (current release is `v5.1.0`)

12+ a. Download [Prebuilt Binary](https://github.com/oauth2-proxy/oauth2-proxy/releases) (current release is `v5.1.1`)

1313

1414 b. Build with `$ go get github.com/oauth2-proxy/oauth2-proxy` which will put the binary in `$GOROOT/bin`

1515