Skip to content

GPBar v0.2.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 23 Sep 05:05
· 19 commits to main since this release
v0.2.0
7d48c44
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

GPBar 0.2.0 for Apple Silicon and macOS 26 or newer.

Download GPBar-0.2.0.dmg and drag GPBar to Applications, or open GPBar-0.2.0.pkg.

Added

  • Kerberos SSO using existing tickets from the logged-in user's session, with separate portal and gateway authentication.
  • Optional macOS login SSO, with administrator approval and one-use portal credentials held briefly in helper memory.
  • Cloud Identity Engine authentication through its browser handoff, including OIDC-backed sign-in.
  • Protected-resource MFA notifications, with trusted-host checks and separate browser sign-in windows.
  • Shared authentication validation covering Keychain signing, saved cookies, certificate authentication, credential prompts, and method-specific checks.
  • A local distribution build command that signs, notarizes, and verifies the app, DMG, and PKG before publication.

Fixed

  • Dismiss the menu bar panel when opening separate windows.
  • Use release versions in DMG and PKG filenames, including prerelease suffixes.

Security and lifecycle

  • Bind Kerberos exchanges and login credentials to their user, session, and destination.
  • Require authenticated portal policy before Automatic mode can fall back after a Kerberos failure.
  • Block helper removal and updates while macOS login SSO remains enabled.
  • Keep resource MFA prompts separate from VPN connection state and reject notifications outside the supported trust policy.

Upgrade notes and limits

Update the app, helper, and bundled engine together. Their protocol versions must match.
Disconnect, remove the old helper in Edit Connection, and quit GPBar before reinstalling.
Disable macOS login SSO for every enrolled user before future updates or helper removal.

The new authentication methods have synthetic validation but still need matching live providers.
Real macOS login capture, smart-card hardware, and complete VPN connections remain unverified for these methods.
See authentication support and macOS login SSO for specific limits.

Full changelog

Assets 5
Loading