Skip to content

Release v2.34.0

Choose a tag to compare

@github-actions github-actions released this 29 Oct 07:13
c9501ac

Added

  • AuthProxy can validate lobby invitation tokens from Ante's published issuer metadata: set Invite:TokenMetadataUrl, Invite:Issuer and Invite:Audience, and AuthProxy checks iss, aud and the RS256 signature by kid, with the published keys cached and refreshed, so key rotation needs no AuthProxy configuration change. See Invitation token keys. (#142)

Changed

  • Configuring both Invite:PublicKeyPem and Invite:TokenMetadataUrl is rejected at startup; Invite:TokenMetadataUrl requires Invite:Issuer and Invite:Audience. (#142)