Skip to content

Release v0.5.6 - OIDC Conformance & Standalone Container

Choose a tag to compare

View all tags
@oranheim oranheim released this 07 Aug 17:44
· 41 commits to master since this release
v0.5.6
0aa05fe

🎉 Highlights

This release brings 100% OIDC core conformance, a new standalone all-in-one Docker container for development/testing, and numerous improvements to testing infrastructure and documentation.

🚀 New Features

Standalone Docker Container

  • All-in-one development container with embedded PostgreSQL and Redis (Dockerfile.standalone)
    • Zero-dependency deployment for evaluation, testing, and CI/CD pipelines
    • ~150MB size with Alpine Linux base
    • Includes s6-overlay for process supervision
    • Pre-configured with development defaults (NOT for production use)
    • Normal text logging by default (not JSON structured)

OIDC Conformance

  • Achieved 100% OIDC core specification compliance
  • 90% overall OIDC conformance including optional features
  • Implemented comprehensive OIDC conformance testing suite
  • Added new TCK (Technology Compatibility Kit) pipeline for continuous conformance validation
  • Reorganized TCK documentation for better clarity

Script Improvements

  • Renamed api-test.sh to simple-auth-flow.sh for better clarity
  • Enhanced integration test scripts with runtime password patching
  • Added SQL-based user seeding (replacing complex Python async approach)

🐛 Bug Fixes

  • Fixed OAuth token endpoint validation errors
  • Resolved user management integration test failures
  • Fixed discovery endpoints compliance in pipelines
  • Fixed integer expression errors in logging functions
  • Improved waiting strategies for conformance suite containers
  • Enhanced robustness of Authly health checks

📚 Documentation

  • Updated README with latest features and capabilities
  • Enhanced future planning documentation
  • Added roadmap item for renaming script integration tests to end-to-end tests
  • Improved OIDC conformance documentation

🔧 Infrastructure & CI/CD

  • Updated GitHub workflows to accurately report OIDC implementation status
  • New dedicated TCK pipeline for conformance testing
  • Improved test organization and stability

📊 Statistics

  • 24 commits since v0.5.5
  • 159 files changed: 19,985 insertions(+), 1,079 deletions(-)
  • Test Coverage:
    • simple-auth-flow: 16/16 tests passing
    • Integration tests: 9/9 passing (2 expected skips)
    • OIDC Conformance: 100% core, 90% overall

⚠️ Important Notes

Standalone Container Security Warning

The new standalone container includes insecure default secrets and is NOT suitable for production use. It's designed exclusively for:

  • Development environments
  • Testing and evaluation
  • CI/CD pipelines
  • Quick demonstrations

For production deployments, use the standard Authly container with external PostgreSQL/Redis and provide secure secrets.

🏷️ Compatibility

  • Python 3.11+
  • PostgreSQL 14+
  • Redis 6+
  • Docker 20.10+

🔄 Upgrading

No breaking changes for existing production deployments. The standalone container is an additional offering and doesn't affect existing installations.

To use the new standalone container:

docker build -f Dockerfile.standalone -t authly-standalone .
docker run -p 8000:8000 authly-standalone

Full Changelog: v0.5.5...v0.5.6

Assets 2
Loading