github.com/ory/hydra

all: resolve and test for issues in rethinkdb coldstart - closes #207

Documentation

• Resolve broken examples in the docs, add badges and code documentation (0baa04e)

Unclassified

• Resolve and test for issues in rethinkdb coldstart - closes #207 (6a0bbd7)

0.3.0 (#195)

• cmd: resolve broken formatting issue
• client: field scopes should be scope
• config: fix broken system secret method and add test case for it
• client: scope should be scope in rethinkdb too
• client: scope should be scope in rethinkdb too
• oauth2: resolve import paths broken by goimports

Unclassified

• 0.3.0 (#195) (95ff77d), closes #195:

  • cmd: resolve broken formatting issue
  • client: field scopes should be scope
  • config: fix broken system secret method and add test case for it
  • client: scope should be scope in rethinkdb too
  • client: scope should be scope in rethinkdb too
  • oauth2: resolve import paths broken by goimports

:fire: 0.2.0 (#165)

• warden: rename assertion to token - closes #158
• config: do not log database credentials - closes #147
• oauth2: upgrade fosite - close #160
• config: do not store database config in hydra config - closes #164
• oauth2: id_token at_hash / c_hash is null - closes #129
• jwk: improve error message of wrong system secrect - closes #104
• readme: improve images, add benchmarks - closes #161
• cmd: improve connect dialogue - closes #170
• cmd: fix --dry option - closes #157
• firewall: document warden interface sdk
• readme: link openid connect and oauth2 introduction
• cmd: introduce FORCE_ROOT_CLIENT_CREDENTIALS env var - closes #140
• readme: document error redirect to identity provider - closes #96
• internal: fosite store must be consistent to avoid errors - closes #176
• client: add GetConcreteClient to http manager
• cmd: host process now logs basic information on all http requests - closes #178
• all: add memory profiling - closes #179
• warden: resolve nil pointer issue - closes #181
• cmd: clean up env to struct mapping, add more controls
• cmd: bcrypt cost should be configurable - closes #184
• cmd: token lifespans should be configurable - closes #183
• cmd: resolve issues with envirnoment config - closes #182
• cmd: implement tls termination capability - closes #177
• cmd: resolve issues with redirect logic and TLS
• oauth2: implement default oauth2 consent endpoint - closes #185
• warden - closes #188
• oauth2: id token claims should be set by using id_token - closes #188
• oauth2: oauth2 implicit flow should allow custom protocols - closes #180
• oauth2: core scope should not be mandatory - closes #189
• warden: warden sdk should not make distinction between token and request - closes #190
• warden: rename authorized / allowed endpoints to something more meaningful - closes #162
• ci: improve travis config

Documentation

• Create CONTRIBUTING.md (63702a9)
• Remove shell guide requirements (5d4d024)

Unclassified

• :fire: 0.2.0 (#165) (a297f7e), closes #165 #158 #147 #160 #164 #129 #104 #161 #170 #157 #140 #96 #176 #178 #179 #181 #184 #183 #182 #177 #185 #188 #180 #189 #190 #162

• ensure client endpoint is initialised for CLI "clients import" command (6070a80)

• Fix table of contents (#145) (9945c11), closes #145

• Resolve issues with warden and client api (#120) (c77d2dc), closes #120 #118 #119

• :fire: 0.1-beta2 (#90) :fire: (8593699), closes #90 #86 #91 #99 #93 #88 #97 #92 #89

• :zap: vendor: switch to versioned gorethink api (#81) (15242e2), closes #81:

  • vendor: switch to versioned gorethink api
  • readme: bug bounty / hall of fame
  • readme: add fosite and ladon reference

• :fire: 0.1-beta :fire: (00fd93c)

• Update README.md (f0b40f1)

• Remove go get of govet in .travis.yml (cff9754):

  Fix error where vet cmd package cannot be found. The package seems to be included in go now. No need to download it anymore.

• oauth/google: fixed status code error message (0b7b163)

• oauth/google: fixed status code error message (8ed78e5)

• Update README.md (acae0e7):

  README: Updated smaller typo

• Storage/RethinkDB: Added RethinkDB as backend storage. (cb9c2f4):

  Storage/PostgreSQL: Updated some PostgreSQL tests. Hydra: Fixed smaller bugs.

• handler.go:300: no formatting directive in Sprintf call (6ee1376)

• handle multiple return values from gopass (8124765)

• update accounts CLI Usage (9881e2a)

• Update README.md (2fadfae)

• Add Gitter badge (4f3d9ce)

• oauth/provider/signin/signin.go: arg err for printf verb %d of wrong type: error (16fddf2)

• cli/hydra-host/handler/tls.go: no formatting directive in Errorf call (78698d5)

• Update README.md (be43ff6)

• jwt/oauth: refresh grant now is tested and works properly (8d88305)

• Update README.md (3e2e81a)

• Update README.md (8510dd9)

• Update LICENSE (62f7c67)

• Update CONCEPTS.md (dd4df17)

• Initial commit (5df442b)

• Adapt ladon policy api changes (b8bacb0)

• Add basic debug log level support (9686a91)

• Add glide command to develop snippet (e513d2a)

• Add glide command to install snippet (e62b3d3)

• Add google group (ed5be40)

• Add managed hydra note (3450300)

• Add refact warning (07da6a0)

• Add security considerations (340c855), closes #42

• Add security section (#87) (2ae682b)

• Add test cases for methods returning slices or maps of entities (#152) (e62e385)

• Add token validation (#134) (9dfd4ea)

• Add wrapper library for HTTP Managers (#130) (266b324)

• Added benchmark section (39d2802)

• Added connection and client handlers (47070f5)

• Added godeps (ff027b5)

• Added google provider (9ae9316)

• Added heroku app.json (7c1d25e)

• Added heroku deployment notes (98b83d7)

• Added http/2 description (1f0d6f9)

• Added microsoft and improved existing providers (b2d3e06)

• Added mock for easier testing (fe25be6)

• Added mock for easier testing (c4c1166)

• Added policy endpoint to host process (c62cec5)

• Added port and host env var descriptions (c32ac10)

• Added possibility to skip CA check (09094f4)

• Added procfile (1a38744)

• Added start, client create and user create (69d39ca)

• Added status section (cea52c6)

• Added vagrant, fixed minor issues, added login capabilities, added examples (b79b547)

• Allow loading certificates directly from env vars (62ecd3d)

• Always return non-nil error when validation fails. (aca141d)

• Attached policy handler to router (2d15cd7)

• Authorization requests now properly set the code token subject (df189d6)

• Badgemania (bb02665)

• Beta preparations (5ab50dc)

• Clarified storage message (8b9d41e)

• Cleanup (0621e1a)

• Cleanup (0fb905e)

• Cleanup and issue resolving (29c943f)

• Client libraries and refactoring (e77940f)

• Client middleware works now (18d46f8)

• Connect to rethinkdb with custom root certificate (#116) (74432b0):

  • Connect to rethinkdb with a custom certificate

  • Test importRethinkDBRootCA

  Signed-off-by: Matteo Suppo matteo.suppo@gmail.com

  • Move backend_connections tests

  Signed-off-by: Matteo Suppo matteo.suppo@gmail.com

• Create MAINTAINERS (adefff9)

• Created provider handler (9338754)

• Database connection is now only opened when required. (6ac8de5)

• DROPBOX_CALLBACK's default value is now smarter (5f6457b)

• Export AuthKey (0bec260)

• Fix broken link in TOC (b40beda)

• Fix client.GetClients() for multiple clients (#151) (93dc837), closes #150

• Fix idiom (ebfc9a9):

  "What it looks like", not "how it looks like" (Very common mistake)

• Fix osin.CheckBasicAuth return value inconsistency (57d5427)

• Fix typo (#100) (3ca01db)

• Fix typo in exemplary policy (386fb0c)

• Fix typos (873a816)

• Fix typos in exemplary policies (#112) (5b44457)

• Fixed default TLS and JWT filepaths (53827a2)

• Fixed environment issues (d816e92)

• Fixed error response (f2ee621)

• Fixed issue when account is not existing (741ee9f)

• Fixed nil pointer issue (7695692)

• Fixed nil pointer issue (f09bc08)

• Fixed null pointer in cli call to oauthHandler (e7a827f)

• Fixed permission typo and tests (5a4ec4a)

• Fixed smaller bugs and typos in RethinkDB and PostgreSQL. (aebd9d6):

  Storage/RethinkDB: Refactored smaller parts in conformance to discussions in #53.

• Fixed tests on linux hosts (82c7431)

• Fixed typos, improved instructions (546a109)

• Fosite note (f09cf2d)

• Go highlight code examples (3d59681)

• Godep cleanup (a43a6fc)

• Godep save (2b0df43)

• Godep save (42335ee)

• Godep save (1b84d53)

• Godep save (560a6a0)

• Godep update (e4e9b03)

• Godep update (aac79e9)

• Godir (988824d)

• Gofmt (ae5b637)

• Gofmt (46bcfda)

• Gofmt (1a6aba1)

• Goimports (9b51600)

• Handler updates and tests (911fc88)

• HTTP/2 + TLS support, refactored jwt and tls commands (e5b5a47)

• HttpErrorHandler is now WriteError (a3f809f)

• Implemented hash and account (4c345d3)

• Implemented jwt, middleware, test coverage and handlers. (10ba9ef)

• Implemented provider "sso" flow (6f365ff)

• Improve installation guide (#131) (c0cbf09)

• Improved cli options, improved provider workflow (f1021e8)

• Improved provider workflow and resolved dropbox issues (d8f2c03)

• Improved signature (0358b6b)

• Improved tests (5359952)

• Increased coverage (e20043b)

• Increased test coverage (5b4f6ac)

• Linked assertion todo to #29 (a6c8beb)

• Log refactoring (90a0a8c)

• Make access token lifetime configurable (2f69644)

• Migrated ladon policy struct changes (1d97e00)

• Minor grammar/spelling fixes (#144) (1c87dc9)

• Mocks and tests (848d6db)

• Mount warden handler (#110) (127db0a)

• Moved package pkg to ory-am/common (71d870b)

• New concept, moved backend to postgres, added tests, cleaned up legacy code (a48297d)

• New go vendor format (fa710a8)

• Now ContextAdapter is chainable, decreasing middleare code complexity a lot. (e6e3799):

  Chainable model is inspired by https://github.com/justinas/alice

• Now tries to refresh when token is invalid (29c16dc)

• Oauth and guard endpoints now accept basic auth instead of token auth. (7d6b191)

• Policy import (3afd199)

• Print out newlines at string end (0a0ff98)

• Refactor, more endpoints and tests (ff69586)

• Refactored the DATABASE_URL to accept given database technology instead of using an extra environment variable DATABASE (as per discussions in #53). (c9ef33d)

• Refactored usage and added tests (9fd1676)

• Refactoring, added introspection (adec4ae)

• Remove godeps and keep removed until release (6a2176a)

• Remove http2 dependency (1c8c770)

• Remove wait time on boot and use restart unless-stopped option instead (#105) (eb72850)

• Removed skipping of CA checks and instead added option to use HTTP without TLS (6f3411a)

• Resolve date and scope issues (24d34b3), closes #126 #125 #124

• Resolve issues with the sdk and cli, set scopes in token user cmd (#142) (b8673b7), closes #141 #137 #138

• Resolve race condition (0a17528)

• Resolve rethinkdb and warden endpoint issues (ac7710d), closes #122 #121:

  • rethinkdb: resolve an issue where missing refresh tokens cause duplicate key error

• Resolve too many open files issue (6e9b681), closes #47

• Resolved remaining issues with jwt and middlewares (bfcd40f)

• Resolved that secrets can not be set when using http or cli (#102) (8dc1e1f)

• Return client secret on POST and remove it from GET (#117) (8ab555d), closes #113

• Revert (1e23f45)

• Set keep alive, close #146 (7075f63)

• Test cleaup (219318a)

• Test for errors (d981f52)

• Tests are now more verbose and fixed issues in tests (b7a9916)

• Tests have to wait for database to be booted (a5ad3fb)

• Tls should also allow certificates from env (89e8922)

• Update cli usage (2863e25)

• Update faq section (b11a44d)

• Update jwt-go to versioned package and update dependencies (#111) (fc2ad6a)

• Update performance section (1e48e18)

• Update sections on environment variables (f441885)

• Updates (ea2196f)

• Username instead of email, token revocation, introspect spec alignments, more tests (3994ef0)

• Username instead of email, token revocation, introspect spec alignments, more tests (1585866)

sdk/go: Add go.mod definition in sdk directory (#1425)

Closes #1422

Signed-off-by: aeneasr aeneas@ory.sh

Documentation

• Incorporates changes from version v1.0.0-rc.11 (67c246c)
• Update cors values in config.yml (84573d9)

Unclassified

• sdk/go: Add go.mod definition in sdk directory (#1425) (5eeb162), closes #1425 #1422
• Add "Content-Type" to default allowed cors headers (45bd863), closes #1421
• Correct debug var (fa10d9d)
• Fix broken cors option test (#1423) (b96724b)