github.com/greenpau/caddy-security

Changelog

go-authcrunch changes

github.com/greenpau/go-authcrunch was updated from v1.1.40 to v1.1.41.

Compare: greenpau/[email protected]

• ops: add indicator to release commit subject (646004f)
• security: harden authz bypass path matching (c320a62)
• skills: add threat hunting workflow (d0224bf)
• security: prevent prefixed API key creation hang (65b492e)
• security: avoid session cache deletion under read lock (95415a0)
• security: harden profile API request parsing (89beb23)
• security: canonicalize authz request paths (87d594b)
• skills: expand threat hunting and sandbox test guidance (b2625d4)
• authn: cap system API request body reads (f80387d)
• authz: isolate token cache user state (4f1fd2a)
• skills: classify stdlib vulns as toolchain notes (f71eec3)
• oauth: verify access token JWTs before merging claims (7f5d3d8)
• skills: add threat hunt report TOC guidance (45cab9b)
• skills: clarify forwarded IP threat hunt guidance (47fe4cd)
• redirects: require same rule for trusted redirect matches (7b9002e)
• security: validate OAuth JWT issuer and audience claims (429779c)
• breakfix: restore Azure OAuth login with resource tokens (bb0b253)
• ops: released v1.1.41 (9740809)

Changelog

• e03784f breakfix: caddy placeholder not replaced within user_group_filters (or other []interface{}) (#484)
• 4425ec0 skills: add HTTP integration configuration guidance
• 3743bd7 skills: add OAuth provider configuration guidance
• a3fc646 skills: add SSO app configuration guidance
• e03fdc8 skills: add agent guidance and source code management skill
• 72cdd15 skills: add authorization configuration skill
• da45a9b skills: add break-fix troubleshooting workflow
• dd1a8b2 skills: add coding directives skill
• e10acba skills: add configuration Caddyfile router skill
• 69ca4a5 skills: add configuration credentials skill
• d5b1a86 skills: add configuration secrets guidance
• 9700c87 skills: add crypto configuration guidance
• 207318a skills: add identity store configuration skill
• b8c1d52 skills: add local user configuration skill
• a33e044 skills: add messaging configuration skill
• 3bbafd0 skills: add registration configuration skill
• 201e967 skills: add runtime resolution configuration skill
• 9518228 skills: add scripts automation guidance
• 33398f8 skills: add testing and CI workflow skill
• 76b026f skills: align repo-local guidance with current behavior
• f53941b skills: broaden authentication configuration guidance
• ad0af04 skills: document OAuth provider claim setup
• 667af66 skills: document auth cookie scope behavior
• 80a03ee skills: document auth sandbox challenge behavior
• a43a088 skills: document caddy security project summary
• dcfba2c skills: document local user challenge rule limits
• 68757dc skills: document messaging debug SMTP testing
• 8e6aa89 skills: document portal UI language and client patterns
• 8c19e67 skills: document registration workflow behavior
• 2a2560d skills: document repository project structure
• 7de0e91 skills: expand break-fix symptom checks
• d9ebc95 skills: split authentication configuration guidance

Changelog

• f58591d upgrade to github.com/greenpau/go-authcrunch v1.1.39

Changelog

• 7f80e63 feat: add PKCE support for OAuth 2.0 authorization flow

Changelog

• c902769 upgrade to github.com/greenpau/go-authcrunch v1.1.36

Changelog

• a77b167 upgrade to github.com/greenpau/go-authcrunch v1.1.35

Changelog

• a3338ba upgrade to github.com/greenpau/go-authcrunch v1.1.34

Changelog

• b9450c6 upgrade to github.com/greenpau/go-authcrunch v1.1.33

Changelog

• ee2f84c upgrade to github.com/greenpau/go-authcrunch v1.1.32