Skip to content

Release v2.51.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 08 Nov 07:03
v2.51.1
847262a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Summary

Back-channel requests made by AuthProxy no longer keep cookies set by the services they call, so a response cookie cannot be replayed on later requests made for other callers.

Security

  • Outbound back-channel HTTP clients (proxying, admission, bearer routes, invites, client-credentials verification and OAuth/OIDC/JWT back channels) now disable cookie storage and replay. Documented callback identity headers are unchanged. (#277)
Assets 2
Loading