0.7.0

Enhancements

• Support embedding OPA policies and validating using code shared with go-choria
• Require a signature in signing requests
• Support protocol version 2 using Organization Issuers

0.6.1

Enhancements

• Support the new system_user claim

0.6.0

Enhancements

• Support signing requests via a Choria Service
• Support new Choria client tokens
• Support client permissions
• Support signed requests using ed25519 public keys
• Remove Okta and NATS Streaming Server support

0.5.0

Enhancements

• Move to github.com/golang-jwt/jwt
• Various build tooling updates to support Podman and use go 1.16 everywhere
• Support disabling mTLS by not setting a CA #81

0.4.0

Enhancements

• Go 1.16 and latest swagger dependencies
• Support setting an ou claim to support future multi tenancy in Choria Broker

Deprecations

• Drop suppot for EL6 packages due to go 1.16 support

Bug Fixes

• Bounds check on agents list

0.3.3

Enhancements

• Support certmanager security via dependency update

0.3.1

Bug Fixes

• Do not cache OPA files read from disk (#62)

0.3.0

Enhancements

• Allow TLS to be disabled using --disable-tls for use in Kubernetes (#55)
• Allow users to be set in a separate file that gets hot reloaded (#2)
• Support NATS JetStream for auditing (#50)
• Support user properties (#48)
• Support Open Policy Agent (#42) Blog Post

0.2.0

Bug Fixes

• Run as root on el7 as well to be consistent with el6 (#35)

0.1.0

Enhancements

• Include the site that produced the audit message in the nats notification (#28)
• Instead of 0, 1 or 2 use unknown, allow or deny for the action taken in nats notifications (#28)
• Include a UTC Unix time stamp in the nats notification (#30)