Skip to content

Release v2.52.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 08 Nov 07:39
v2.52.0
8d99997
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Summary

Applications that use Arc's signed forwarded-identity scheme can now stop AuthProxy from sending the separate actor header on on-behalf back-channel calls and read the actor only from the verified attestation.

Added

  • An opt-in OnBehalf setting, off by default, that leaves out the x-cratis-on-behalf-actor header on on-behalf grant checks and session started/ended notifications. The attestation is unchanged, and the default behavior is unchanged. The on-behalf sessions documentation describes the receiver contract: verify the attestation fully and read the actor from it. (#266)
Assets 2
Loading