Skip to content

Release v2.20.0

Choose a tag to compare

@github-actions github-actions released this 13 Aug 21:24
e861233

Summary

Allow applications that treat identity verification as authorization authority to invalidate the caller's local AuthProxy session when verification denies access. The external identity-provider session remains untouched.

Added

  • Add opt-in local session termination for Required identity-verification denials, including Aspire configuration and real cookie-pipeline coverage. (#103)