v0.5.3-alpha.1

This release improves the developer and user experience around CSRF counter-measures. It should now be possible to use the self-service API flows without having to explicitly disable cookie features in your SDKs and integrations. Additionally, another issue in the CGO pipeline was resolved which finally allows running ORY Kratos without CGO if the target database is not SQLite.

Further improvements to default config values have been made and a full end-to-end test suite for the exemplary kratos-selfservice-ui-react-native app. The app is now available in the iTunes store as well - just search for "ORY Profile App"!

0.5.3-alpha.1 (2020-10-27)

Bug Fixes

• Add "x-session-token" to default allowed headers (3c912e4)

• Do not set cookies on api endpoints (2f67c28)

• Do not set csrf cookies on potential api endpoints (4d97a95)

• Ignore unsupported migration dialects (12bb8d1), closes #778:

  Skips sqlite3 migrations when support is lacking.

• Improve semver regex (584c0b5)

• Properly set nosurf context even when ignored (0dcb774)

• Update cypress (ba8b172)

• Use correct regex for version replacement (ce870ab), closes #787

Documentation

• Fix docosaurus admonitions (#788) (281a7c9)
• Pin download script version (e4137a6)
• Remove trailing garbage from quickstart (#787) (7e70924)

Features

• Improve makefile install process and update deps (d1eb37f)

Tests

• Add e2e tests for mobile (d481d51)
• Add option to disable csrf protection in apis (a0077f1)
• Bump wait time (7a719e1)
• Install expo-cli globally (db21cfa)
• Install expo-cli in cci config with sudo (d255f46)
• Log wait-on output (62b5ba9)
• Output web server address (cb41ca7)
• Resolve csrf test issues in settings (ef8ba7d)
• Resolve test panic (6f6461f)
• Revert delay increase and improve install scripts (1eafcaa)

Changelog

6fdc772 autogen(docs): generate and format documentation
6536f46 autogen(docs): regenerate and update changelog
389e0f9 autogen(docs): regenerate and update changelog
0404e75 autogen(docs): update milestone document
41a8eaf autogen(docs): update milestone document
0fec10c autogen: add v0.5.2-alpha.1 to version.schema.json
054e2e3 autogen: add v0.5.3-alpha.1.pre.0 to version.schema.json
64dc91a autogen: pin v0.5.3-alpha.1 release commit
0de4f93 autogen: pin v0.5.3-alpha.1.pre.0 release commit
c551f0f chore: bump cypress dependency
4dac92d chore: update docusaurus template
281a7c9 docs: fix docosaurus admonitions (#788)
e4137a6 docs: pin download script version
7e70924 docs: remove trailing garbage from quickstart (#787)
d1eb37f feat: improve makefile install process and update deps
3c912e4 fix: add "x-session-token" to default allowed headers
2f67c28 fix: do not set cookies on api endpoints
4d97a95 fix: do not set csrf cookies on potential api endpoints
12bb8d1 fix: ignore unsupported migration dialects
584c0b5 fix: improve semver regex
0dcb774 fix: properly set nosurf context even when ignored
ba8b172 fix: update cypress
ce870ab fix: use correct regex for version replacement
7be571e style: format and update format toolchain
d481d51 test: add e2e tests for mobile
a0077f1 test: add option to disable csrf protection in apis
7a719e1 test: bump wait time
db21cfa test: install expo-cli globally
d255f46 test: install expo-cli in cci config with sudo
62b5ba9 test: log wait-on output
cb41ca7 test: output web server address
ef8ba7d test: resolve csrf test issues in settings
6f6461f test: resolve test panic
1eafcaa test: revert delay increase and improve install scripts

Docker images

• docker pull oryd/kratos:v0
• docker pull oryd/kratos:v0.5
• docker pull oryd/kratos:v0.5.3
• docker pull oryd/kratos:v0.5.3-alpha.1
• docker pull oryd/kratos:latest
• docker pull oryd/kratos:v0-sqlite
• docker pull oryd/kratos:v0.5-sqlite
• docker pull oryd/kratos:v0.5.3-sqlite
• docker pull oryd/kratos:v0.5.3-alpha.1-sqlite
• docker pull oryd/kratos:latest-sqlite