apd v0.4.0

apd v0.4.0 — AAuth Agent Provider (demo mode; AAuth is an IETF draft).

Container image (multi-arch: amd64, arm64)

docker pull ghcr.io/agentprovider/apd:0.4.0

Helm chart (OCI)

helm install apd oci://ghcr.io/agentprovider/charts/apd --version 0.4.0 \
  --set issuer=https://ap.example.com --set keys.existingSecret=apd-keys

See https://agentprovider.dev/docs/deployment.html

apd v0.3.0

apd v0.3.0 — AAuth Agent Provider (demo mode; AAuth is an IETF draft).

Container image (multi-arch: amd64, arm64)

docker pull ghcr.io/agentprovider/apd:0.3.0

Helm chart (OCI)

helm install apd oci://ghcr.io/agentprovider/charts/apd --version 0.3.0 \
  --set issuer=https://ap.example.com --set keys.existingSecret=apd-keys

See https://agentprovider.dev/docs/deployment.html

apd v0.2.0 — AAuth-10 + Signature-Key-08 compliance

Brings apd into compliance with AAuth -10 and draft-hardt-httpbis-signature-key-08 (the normative changes flowing up from RFC 9864).

⚠️ Breaking wire change

Every AAuth JWK and JWT header now uses the fully-specified Ed25519 JOSE identifier — the polymorphic EdDSA is no longer accepted (nor none/symmetric). The Signature-Key hwk scheme now requires alg="Ed25519" (previously it MUST NOT carry alg). Clients built on older aauth-core must upgrade.

What changed

• Fully-specified alg on every JWK/JWT: published JWKS, cnf.jwk, naming JWTs, agent tokens, and hwk — Ed25519, not EdDSA (sig-key §3.3).
• unsupported_algorithm responses emit an Accept-Signature-Alg: Ed25519 header (sig-key §4.2); the error registry mirrors sig-key §5.4 (adds unsupported_scheme, cache_miss, issuer_missing, issuer_mismatch).
• Federated enrollment stays lenient — third-party IdP assertions may use EdDSA or Ed25519 (the no-polymorphic rule governs AAuth-native keys, not foreign IdP tokens).
• The new AAuth-10 account request parameter is resource-side (resource authorization endpoint → resource-token claim) and out of scope for the Agent Provider; documented in the resource-facing guides.
• Docs + landing site updated throughout; tracked-draft banner → -10 / signature-key-08.

Full detail in #1. Verified with 76 tests (0 clippy warnings).

Container image (multi-arch: amd64, arm64)

docker pull ghcr.io/agentprovider/apd:0.2.0

Helm chart (OCI)

helm install apd oci://ghcr.io/agentprovider/charts/apd --version 0.2.0 \
  --set issuer=https://ap.example.com --set keys.existingSecret=apd-keys

Build from source (Rust 1.85+)

git clone https://github.com/AgentProvider/source-code && cd source-code
cargo build --release   # target/release/apd

See https://agentprovider.dev/docs/deployment.html

apd v0.1.0

apd v0.1.0 — AAuth Agent Provider (demo mode; AAuth is an IETF draft).

Container image (multi-arch: amd64, arm64)

docker pull ghcr.io/agentprovider/apd:0.1.0

Helm chart (OCI)

helm install apd oci://ghcr.io/agentprovider/charts/apd --version 0.1.0 \
  --set issuer=https://ap.example.com --set keys.existingSecret=apd-keys

See https://agentprovider.dev/docs/deployment.html