Skip to content

release 2.1.1

Choose a tag to compare

View all tags
@zandbelt zandbelt released this 10 Nov 07:40
· 1748 commits to master since this release
v2.1.1
348f282

binary packages for the libcjose 0.4.1 dependency can be found in the 2.1.0 release section

Bugfixes

  • fix memory leak - introduced in 2.1.0 - when skipping jwks_uri keys with a non-matching use value
  • remove stale claims from the session when refreshing them from the userinfo endpoint fails; see #194; thanks @kerrermanisNL
  • always restore id_token/claims on sub-requests so e.g. listing claims-protected subdirectories via mod_autoindex will work without having to apply IndexOptions +ShowForbidden; thanks Valentin Mercier

Other

  • ensure old sessions are removed from the cache so they don't occupy/pollute cache storage; see #192; thanks @steve-dave
  • log readable error messages when memcache operations fail
Assets 9
Loading