v1.5.0

Changes

• make sure to properly load provided enrollment key @ekoby (#826)
• refresh ext OIDC token when re-authentication is required @ekoby (#824)
• internal OIDC path is '/oidc' @ekoby (#825)
• Extend identity cert @ekoby (#823)
• export bind precedence values @ekoby (#822)
• prevent segv when dumping disabled identity @scareything (#821)
• Update protobuf @ekoby (#820)

v1.4.4

Changes

• null check data_cb before calling @scareything (#819)

v1.4.3

Changes

• update [email protected] @ekoby (#818)

v1.4.2

Changes

• set internal OIDC endpoint to currently active controller @ekoby (#817)

v1.4.1

Changes

• fix internal OIDC path handling. @ekoby (#816)

v1.4.0

Changes

• add/use targetToken in signer config @ekoby (#815)
• avoid NPE during token update @ekoby (#814)
• Posture check HA @ekoby (#812)
• fix an issue with OIDC endpoints using different hostnames @ekoby (#813)
• Allow better dev debugging @dovholuknf (#811)
• Posture check @ekoby (#807)

v1.3.7

Changes

• fix error when the last message header is zero-length @ekoby (#810)
• bump oidc callback buffer, log access token content @ekoby (#809)

v1.3.6

Changes

• remove offline_access from default scopes. too many idps don't allow it @dovholuknf (#806)

Dependencies

• update [email protected] @ekoby (#808)
• update [email protected] @ekoby (#805)

v1.3.5

Changes

• fix HA enrollment: alternate controllers cannot be used for enrollment @ekoby (#804)
• Avoid bind crypto errors @ekoby (#803)
• extend dump information @ekoby (#801)

v1.3.4

Changes

• surface ext-signer configuration error @ekoby (#799)
• Ext Signers: secondary auth @ekoby (#798)
• Update [email protected] @ekoby (#797)