v1.16.7

CA Validation

Make CA the default command to better support AWS Lambda zip file deploy.

Create and validate CA cert key usages and basic constraints.

Full Changelog: v1.16.5...v1.16.7

v1.16.5

Tweak flags

CA Configuration

v1.16.4

CA Certificate and Private Key generation

Added bf CLI support for creating CA certificates and private keys.

v1.16.1

A simpler unified command

bf now contains all Bifrost functionality.
Similarly one single container image now does everything.

Cleaned up tests and removed out-dated docs.

TODO: Need new docs.

Full Changelog: v1.15.3...v1.16.1

v1.15.3

bifrost.PrivateKey

Load private keys from remote storage. Implements JSON and DynamoDB marshal and unmarshal.
By default, JSON Marshal marshals the public key. bifrost.PrivateKey#WithJSONMarshalPrivateKey changes this.

v1.15.2

Cafiles package

Cafiles is now a public package. Load certificates, and private keys from file, AWS S3, & AWS Secrets Manager.

Renamed CRT environment variable to CERT_URI and KEY to KEY_URI.

v1.15.0

Bifrost PublicKey

Bifrost PublicKey type helps marshal a public key to JSON and DynamoDB attribute value.

v1.14.8

Release binaries for Windows, MacOS, & Linux.

v1.14.5

Bifrost is available under the terms of the MIT license

Starting from version 1.14.5, new release of Bifrost will be available under the terms of the MIT license, including this one.

Sped up container build should allow us to build arm64 images as well.

HTMX for issuer web too.

v1.13.0

New binaries and container images

Bouncer is an AWS Lambda Authorizer function. It's available as the bifrost-authz container image. It reads a certificate PEM from the Lambda Request Context and extracts the public key from the certificate. The certificate and verified namespace are added to the response context to be used downstream.

Hallpass used to be known as bouncer. It is a TLS authenticating reverse-proxy meant to be used instead of the AWS API Gateway + Bouncer Authorizer combo, in development.