v1.1.0
Please take the SSO Community Survey to let us know how we're doing, and to help us plan our roadmap!
- Remove support for legacy alternative cookie cipher (#54)
- Ensure that
sso_auth
responds to pings (#65) - Static files are embedded directly into binaries (#63)
- Allow per-upstream configuration of TLS verification (#49)
- Fixed data race for encryption cipher (#77)
- Refactoring of some provider logic, to facilitate additional providers (#76)
PROXY_ROOT_DOMAIN
is now a required option forsso_auth
(#92)- Added optional
PROVIDER_URL_INTERNAL
for split dns deployments (#88, #123) - Removed default provider and associated unused functions (#87)
- Access token is now forwarded to upstreams via
X-Forwarded-AccessToken
header, when proxy optionPASS_ACCESS_TOKEN
is set (#109) - Added support for digital signing of upstream requests, via
Sso-Signature
header (#106) - Added
preserve_host
option to upstream configs (#55) - Various other minor fixes, cleanups, etc.