Skip to content
/ security-http Public

v7.4.19

Choose a tag to compare

View all tags
@fabpot fabpot released this 15 Sep 07:12
· 224 commits to 8.2 since this release
Immutable release. Only release title and notes can be modified.
v7.4.19
This tag was signed with the committer’s verified signature.
fabpot Fabien Potencier
SSH Key Fingerprint: 2Epes5EqLalzBuDpYoQuproz9c57CsymvlzEGYtOXJw
Verified
Learn about vigilant mode.
c13182e

Changelog (v7.4.18...v7.4.19)

  • minor #66070 Explain why a remember-me login counts as interactive (@nicolas-grekas)
  • bug #65953 Do not follow redirects on the OIDC JWKS, OAuth2 introspection and CAS validation endpoints (@nicolas-grekas)
  • bug #65952 Do not follow redirects on the OIDC UserInfo endpoint (@nicolas-grekas)
  • bug #65913 Read the OAuth2 verified claims as booleans (@nicolas-grekas)
  • bug #65912 Read the OIDC verified claims as booleans (@nicolas-grekas)
  • bug #65881 Read the "active" member of an introspection response as a boolean (@Spomky)
  • bug #65870 Answer 401 instead of 500 when the introspection request fails (@Spomky)
  • bug #65859 Reset the login rate limiter on successful login with a peekable limiter (@lazerg)

Contributors

nicolas-grekas, Spomky, and lazerg
Assets 3
Loading