Skip to content

Release v1.0.0

Latest
Latest

Choose a tag to compare

View all tags
@soulteary soulteary released this 27 Aug 11:14
· 187 commits to main since this release
v1.0.0
3bc7278
This commit was signed with the committer’s verified signature.
soulteary Su Yang
GPG key ID: DBCDD8CBF440F8DE
Verified
Learn about vigilant mode.

[1.0.0] - 2026-08-27

Breaking changes

  • Go 1.27 or later is required to build Stargate.
  • Logout and account-state changes use POST requests with same-origin validation.
  • Cross-domain session exchange uses short-lived, signed, single-use tickets instead of raw session IDs and requires SESSION_EXCHANGE_SECRET.
  • Forwarded host, protocol, URI, and client-IP headers are ignored unless the immediate proxy is listed in TRUSTED_PROXIES.
  • Invalid or incomplete security-sensitive configuration now stops startup instead of silently degrading.
  • The removed WARDEN_OTP_ENABLED and WARDEN_OTP_SECRET_KEY settings are rejected; TOTP is provided through Herald.

Authentication and authorization

  • Added Warden authorization refresh with revocation handling.
  • Added trusted-header authentication with a shared proxy secret.
  • Added per-user Herald TOTP enrollment, confirmation, revocation, and backup-code flows.
  • Added configurable password re-verification for sensitive paths through STEP_UP_ENABLED and STEP_UP_PATHS.
  • Session state is reset after login so prior authorization, Step-up, refresh, or enrollment state cannot cross an authentication boundary.

Security and operations

  • Added strict callback-host, cookie-domain, HTTP-header, service-URL, secret-length, and TLS-pair validation.
  • Added Redis-backed shared session and session-ticket replay state for multi-instance deployments.
  • Split liveness (/healthz) from dependency readiness (/readyz) and added TLS-aware Warden and Herald checks.
  • Added structured audit events, configurable log levels, container hardening, SBOMs, artifact attestations, checksums, Cosign signatures, and multi-architecture image scanning.
  • User-visible verification errors no longer expose upstream provider details.

Compatibility and documentation

  • Added Linux, macOS, and Windows builds for amd64 and arm64.
  • Added a seven-language API and deployment contract checker.
  • Added v1.0.0 migration guides in all seven supported languages and corrected executable Docker, Compose, and Traefik examples.

Upgrade instructions: v1.0.0 migration guide.

Assets 11
Loading