Skip to content

v3.1.0

Choose a tag to compare

@placerda placerda released this 06 Oct 00:36
· 72 commits to main since this release
db9795d

Added

  • Keyless service-to-service auth to the orchestrator (ADR-0019). The UI
    acquires a Microsoft Entra token with its managed identity (scope from
    ORCHESTRATOR_AUTH_AUDIENCE) and sends it in X-Service-Authorization,
    keeping Authorization for the user's OBO token. API key and Dapr remain
    opt-in fallbacks.