Skip to content

Release v2.45.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 05 Nov 22:36
v2.45.0
722f4eb
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Added

  • Backend TLS configuration: AuthProxy can present a client certificate to backends and trust a private CA bundle, from mounted PEM files that reload without a restart. It covers proxied requests, bearer routes, identity-details calls and tenant-list calls. See https://github.com/Cratis/AuthProxy/blob/main/Documentation/configuration/backend-tls.md (part of #251)
  • A Profile setting with a LocalDevelopment value for developer machines. Aspire's WithSignedForwardingTo selects it in run mode only (part of #251)
  • Startup diagnostics show the transport (PlainHttp, Tls or MutualTls) for each identity flow and the client certificate's subject, SAN, fingerprint and expiry, without key material (part of #251)

Changed

  • Outside the LocalDevelopment profile, every hop that receives signed forwarded identity (service backends, signed service frontends and tenant-list endpoints) must use HTTPS with a configured client certificate, or AuthProxy refuses to start. Deployments without forwarded-identity signing are unaffected (part of #251)
Assets 2
Loading