diff --git a/.dockerignore b/.dockerignore index 67508e1e16..f2b6a3d661 100644 --- a/.dockerignore +++ b/.dockerignore @@ -1,2 +1,3 @@ vendor/ -node_modules \ No newline at end of file +node_modules +dist/ diff --git a/.github/ISSUE_TEMPLATE/bug_report.md b/.github/ISSUE_TEMPLATE/bug_report.md index a7e8cbae6c..0593c86a9e 100644 --- a/.github/ISSUE_TEMPLATE/bug_report.md +++ b/.github/ISSUE_TEMPLATE/bug_report.md @@ -1,7 +1,6 @@ --- name: Bug report about: Create a report to help us improve - --- **Describe the bug** @@ -18,7 +17,7 @@ Steps to reproduce the behavior: 3. Request fails with response: `{"some": "error"}` --> -*Server logs* +_Server logs_ -*Server configuration* +_Server configuration_ -**Table of Contents** *generated with [DocToc](https://github.com/thlorenz/doctoc)* + +**Table of Contents** _generated with +[DocToc](https://github.com/thlorenz/doctoc)_ - [Change Log](#change-log) - [v0.16.0-beta.3 (2019-05-19)](#v0160-beta3-2019-05-19) @@ -64,52 +66,82 @@ # Change Log ## [v0.16.0-beta.3](https://github.com/ory/oathkeeper/tree/v0.16.0-beta.3) (2019-05-19) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.15.2...v0.16.0-beta.3) **Implemented enhancements:** -- Clean up environment variables and throw errors on misconfiguration [\#140](https://github.com/ory/oathkeeper/issues/140) -- Missing serve all, both proxy/api using 4455 [\#122](https://github.com/ory/oathkeeper/issues/122) +- Clean up environment variables and throw errors on misconfiguration + [\#140](https://github.com/ory/oathkeeper/issues/140) +- Missing serve all, both proxy/api using 4455 + [\#122](https://github.com/ory/oathkeeper/issues/122) **Closed issues:** -- json: cannot unmarshal string into Go value [\#183](https://github.com/ory/oathkeeper/issues/183) -- Oathkeeper \(v0.14.2\_oryOS.10\) returning empty reply on slow/long distance database calls [\#178](https://github.com/ory/oathkeeper/issues/178) -- Moving forward with ORY Oathkeeper [\#177](https://github.com/ory/oathkeeper/issues/177) -- Replace ORY Hydra JWK fetcher with local strategy and storage [\#174](https://github.com/ory/oathkeeper/issues/174) -- Support multiple JWKS URL in oathkeeper config rather than environment variable [\#168](https://github.com/ory/oathkeeper/issues/168) -- Move to new configuration management [\#164](https://github.com/ory/oathkeeper/issues/164) -- Do not disable filters, instead show decent error messages on misconfiguration [\#141](https://github.com/ory/oathkeeper/issues/141) -- make id\_token credential issuer optional [\#136](https://github.com/ory/oathkeeper/issues/136) - -**Merged pull requests:** - -- ci: Rename job release-docs to docs [\#193](https://github.com/ory/oathkeeper/pull/193) ([aeneasr](https://github.com/aeneasr)) -- ci: Resolve goreleaser issues [\#192](https://github.com/ory/oathkeeper/pull/192) ([aeneasr](https://github.com/aeneasr)) -- ci: Update release pipeline [\#191](https://github.com/ory/oathkeeper/pull/191) ([aeneasr](https://github.com/aeneasr)) -- docs: Updates issue and pull request templates [\#189](https://github.com/ory/oathkeeper/pull/189) ([aeneasr](https://github.com/aeneasr)) -- install.sh: fix install script [\#187](https://github.com/ory/oathkeeper/pull/187) ([mkontani](https://github.com/mkontani)) -- Reduce deployment complexity and refactor internals [\#185](https://github.com/ory/oathkeeper/pull/185) ([aeneasr](https://github.com/aeneasr)) +- json: cannot unmarshal string into Go value + [\#183](https://github.com/ory/oathkeeper/issues/183) +- Oathkeeper \(v0.14.2_oryOS.10\) returning empty reply on slow/long distance + database calls [\#178](https://github.com/ory/oathkeeper/issues/178) +- Moving forward with ORY Oathkeeper + [\#177](https://github.com/ory/oathkeeper/issues/177) +- Replace ORY Hydra JWK fetcher with local strategy and storage + [\#174](https://github.com/ory/oathkeeper/issues/174) +- Support multiple JWKS URL in oathkeeper config rather than environment + variable [\#168](https://github.com/ory/oathkeeper/issues/168) +- Move to new configuration management + [\#164](https://github.com/ory/oathkeeper/issues/164) +- Do not disable filters, instead show decent error messages on misconfiguration + [\#141](https://github.com/ory/oathkeeper/issues/141) +- make id_token credential issuer optional + [\#136](https://github.com/ory/oathkeeper/issues/136) + +**Merged pull requests:** + +- ci: Rename job release-docs to docs + [\#193](https://github.com/ory/oathkeeper/pull/193) + ([aeneasr](https://github.com/aeneasr)) +- ci: Resolve goreleaser issues + [\#192](https://github.com/ory/oathkeeper/pull/192) + ([aeneasr](https://github.com/aeneasr)) +- ci: Update release pipeline + [\#191](https://github.com/ory/oathkeeper/pull/191) + ([aeneasr](https://github.com/aeneasr)) +- docs: Updates issue and pull request templates + [\#189](https://github.com/ory/oathkeeper/pull/189) + ([aeneasr](https://github.com/aeneasr)) +- install.sh: fix install script + [\#187](https://github.com/ory/oathkeeper/pull/187) + ([mkontani](https://github.com/mkontani)) +- Reduce deployment complexity and refactor internals + [\#185](https://github.com/ory/oathkeeper/pull/185) + ([aeneasr](https://github.com/aeneasr)) ## [v0.15.2](https://github.com/ory/oathkeeper/tree/v0.15.2) (2019-05-04) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.15.1...v0.15.2) **Fixed bugs:** -- Credential issuer config is base64 encoded [\#182](https://github.com/ory/oathkeeper/issues/182) +- Credential issuer config is base64 encoded + [\#182](https://github.com/ory/oathkeeper/issues/182) **Merged pull requests:** -- Fix json encode of config for "credentials\_issuer" and "authorizer" during import [\#184](https://github.com/ory/oathkeeper/pull/184) ([stszap](https://github.com/stszap)) +- Fix json encode of config for "credentials_issuer" and "authorizer" during + import [\#184](https://github.com/ory/oathkeeper/pull/184) + ([stszap](https://github.com/stszap)) ## [v0.15.1](https://github.com/ory/oathkeeper/tree/v0.15.1) (2019-04-29) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.15.0...v0.15.1) **Merged pull requests:** -- vendor: Add go.sum [\#180](https://github.com/ory/oathkeeper/pull/180) ([aeneasr](https://github.com/aeneasr)) +- vendor: Add go.sum [\#180](https://github.com/ory/oathkeeper/pull/180) + ([aeneasr](https://github.com/aeneasr)) ## [v0.15.0](https://github.com/ory/oathkeeper/tree/v0.15.0) (2019-04-29) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.14.2+oryOS.10...v0.15.0) **Implemented enhancements:** @@ -122,482 +154,759 @@ **Closed issues:** -- Forward all auth\* headers in judge mode [\#166](https://github.com/ory/oathkeeper/issues/166) -- Move to go-swagger client [\#165](https://github.com/ory/oathkeeper/issues/165) -- Unable to install oathkeeper CLI [\#161](https://github.com/ory/oathkeeper/issues/161) -- Using Oathkeeper - External Consumer App [\#158](https://github.com/ory/oathkeeper/issues/158) -- Allow multiple rules for one URL [\#157](https://github.com/ory/oathkeeper/issues/157) -- CORS Not working as expected [\#151](https://github.com/ory/oathkeeper/issues/151) -- keto\_engine\_acp\_ory not working with oryOS10 [\#150](https://github.com/ory/oathkeeper/issues/150) -- Update README building-from-source part with the gomodule way [\#149](https://github.com/ory/oathkeeper/issues/149) -- required\_scope of authenticator validate only scope claim and not scp claim [\#138](https://github.com/ory/oathkeeper/issues/138) - -**Merged pull requests:** - -- docker: Remove full tag from build pipeline [\#179](https://github.com/ory/oathkeeper/pull/179) ([aeneasr](https://github.com/aeneasr)) -- sdk: Remove sdk dependencies to keto/hydra [\#173](https://github.com/ory/oathkeeper/pull/173) ([aeneasr](https://github.com/aeneasr)) -- ci: Adopt new release pipeline [\#171](https://github.com/ory/oathkeeper/pull/171) ([aeneasr](https://github.com/aeneasr)) -- sdk: Move to go-swagger SDK code generation [\#170](https://github.com/ory/oathkeeper/pull/170) ([aeneasr](https://github.com/aeneasr)) -- judge: Set request headers for credential issuers [\#169](https://github.com/ory/oathkeeper/pull/169) ([aeneasr](https://github.com/aeneasr)) -- Update dependencies [\#163](https://github.com/ory/oathkeeper/pull/163) ([aeneasr](https://github.com/aeneasr)) -- proxy: Use scp,scope,scopes in jwt authenticator [\#162](https://github.com/ory/oathkeeper/pull/162) ([aeneasr](https://github.com/aeneasr)) -- ci: Resolve CI build issue [\#160](https://github.com/ory/oathkeeper/pull/160) ([aeneasr](https://github.com/aeneasr)) -- Ensure rule matcher is locked before updating [\#159](https://github.com/ory/oathkeeper/pull/159) ([jtescher](https://github.com/jtescher)) -- proxy: improve debugability of JWT authenticator [\#156](https://github.com/ory/oathkeeper/pull/156) ([aeneasr](https://github.com/aeneasr)) -- issue \#149 - Update README building-from-source part with the gomodul… [\#152](https://github.com/ory/oathkeeper/pull/152) ([pink-lucifer](https://github.com/pink-lucifer)) +- Forward all auth\* headers in judge mode + [\#166](https://github.com/ory/oathkeeper/issues/166) +- Move to go-swagger client + [\#165](https://github.com/ory/oathkeeper/issues/165) +- Unable to install oathkeeper CLI + [\#161](https://github.com/ory/oathkeeper/issues/161) +- Using Oathkeeper - External Consumer App + [\#158](https://github.com/ory/oathkeeper/issues/158) +- Allow multiple rules for one URL + [\#157](https://github.com/ory/oathkeeper/issues/157) +- CORS Not working as expected + [\#151](https://github.com/ory/oathkeeper/issues/151) +- keto_engine_acp_ory not working with oryOS10 + [\#150](https://github.com/ory/oathkeeper/issues/150) +- Update README building-from-source part with the gomodule way + [\#149](https://github.com/ory/oathkeeper/issues/149) +- required_scope of authenticator validate only scope claim and not scp claim + [\#138](https://github.com/ory/oathkeeper/issues/138) + +**Merged pull requests:** + +- docker: Remove full tag from build pipeline + [\#179](https://github.com/ory/oathkeeper/pull/179) + ([aeneasr](https://github.com/aeneasr)) +- sdk: Remove sdk dependencies to keto/hydra + [\#173](https://github.com/ory/oathkeeper/pull/173) + ([aeneasr](https://github.com/aeneasr)) +- ci: Adopt new release pipeline + [\#171](https://github.com/ory/oathkeeper/pull/171) + ([aeneasr](https://github.com/aeneasr)) +- sdk: Move to go-swagger SDK code generation + [\#170](https://github.com/ory/oathkeeper/pull/170) + ([aeneasr](https://github.com/aeneasr)) +- judge: Set request headers for credential issuers + [\#169](https://github.com/ory/oathkeeper/pull/169) + ([aeneasr](https://github.com/aeneasr)) +- Update dependencies [\#163](https://github.com/ory/oathkeeper/pull/163) + ([aeneasr](https://github.com/aeneasr)) +- proxy: Use scp,scope,scopes in jwt authenticator + [\#162](https://github.com/ory/oathkeeper/pull/162) + ([aeneasr](https://github.com/aeneasr)) +- ci: Resolve CI build issue [\#160](https://github.com/ory/oathkeeper/pull/160) + ([aeneasr](https://github.com/aeneasr)) +- Ensure rule matcher is locked before updating + [\#159](https://github.com/ory/oathkeeper/pull/159) + ([jtescher](https://github.com/jtescher)) +- proxy: improve debugability of JWT authenticator + [\#156](https://github.com/ory/oathkeeper/pull/156) + ([aeneasr](https://github.com/aeneasr)) +- issue \#149 - Update README building-from-source part with the gomodul… + [\#152](https://github.com/ory/oathkeeper/pull/152) + ([pink-lucifer](https://github.com/pink-lucifer)) ## [v0.14.2+oryOS.10](https://github.com/ory/oathkeeper/tree/v0.14.2+oryOS.10) (2018-12-13) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.14.1+oryOS.10...v0.14.2+oryOS.10) **Merged pull requests:** -- ci: Fix docker push arguments in publish task [\#148](https://github.com/ory/oathkeeper/pull/148) ([aeneasr](https://github.com/aeneasr)) +- ci: Fix docker push arguments in publish task + [\#148](https://github.com/ory/oathkeeper/pull/148) + ([aeneasr](https://github.com/aeneasr)) ## [v0.14.1+oryOS.10](https://github.com/ory/oathkeeper/tree/v0.14.1+oryOS.10) (2018-12-13) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.14.0+oryOS.10...v0.14.1+oryOS.10) **Merged pull requests:** -- ci: Fix docker release task [\#147](https://github.com/ory/oathkeeper/pull/147) ([aeneasr](https://github.com/aeneasr)) +- ci: Fix docker release task + [\#147](https://github.com/ory/oathkeeper/pull/147) + ([aeneasr](https://github.com/aeneasr)) ## [v0.14.0+oryOS.10](https://github.com/ory/oathkeeper/tree/v0.14.0+oryOS.10) (2018-12-13) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.13.9+oryOS.9...v0.14.0+oryOS.10) **Closed issues:** -- Moving forward with this project's versioning [\#130](https://github.com/ory/oathkeeper/issues/130) +- Moving forward with this project's versioning + [\#130](https://github.com/ory/oathkeeper/issues/130) - Add OPA authorizer [\#98](https://github.com/ory/oathkeeper/issues/98) **Merged pull requests:** -- vendor: Update keto to latest [\#146](https://github.com/ory/oathkeeper/pull/146) ([aeneasr](https://github.com/aeneasr)) -- proxy: Update to recent keto changes [\#145](https://github.com/ory/oathkeeper/pull/145) ([aeneasr](https://github.com/aeneasr)) -- docs: Update documentation links [\#144](https://github.com/ory/oathkeeper/pull/144) ([aeneasr](https://github.com/aeneasr)) -- docs: Align changelog, upgrade with new versions [\#143](https://github.com/ory/oathkeeper/pull/143) ([aeneasr](https://github.com/aeneasr)) -- docs: Fix proxy help command description [\#142](https://github.com/ory/oathkeeper/pull/142) ([aeneasr](https://github.com/aeneasr)) -- Ignore query parameters when matching url in rules. [\#139](https://github.com/ory/oathkeeper/pull/139) ([stszap](https://github.com/stszap)) -- Support "scope" claim as a string in jwt authenticator [\#137](https://github.com/ory/oathkeeper/pull/137) ([stszap](https://github.com/stszap)) +- vendor: Update keto to latest + [\#146](https://github.com/ory/oathkeeper/pull/146) + ([aeneasr](https://github.com/aeneasr)) +- proxy: Update to recent keto changes + [\#145](https://github.com/ory/oathkeeper/pull/145) + ([aeneasr](https://github.com/aeneasr)) +- docs: Update documentation links + [\#144](https://github.com/ory/oathkeeper/pull/144) + ([aeneasr](https://github.com/aeneasr)) +- docs: Align changelog, upgrade with new versions + [\#143](https://github.com/ory/oathkeeper/pull/143) + ([aeneasr](https://github.com/aeneasr)) +- docs: Fix proxy help command description + [\#142](https://github.com/ory/oathkeeper/pull/142) + ([aeneasr](https://github.com/aeneasr)) +- Ignore query parameters when matching url in rules. + [\#139](https://github.com/ory/oathkeeper/pull/139) + ([stszap](https://github.com/stszap)) +- Support "scope" claim as a string in jwt authenticator + [\#137](https://github.com/ory/oathkeeper/pull/137) + ([stszap](https://github.com/stszap)) ## [v0.13.9+oryOS.9](https://github.com/ory/oathkeeper/tree/v0.13.9+oryOS.9) (2018-11-14) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.13.8+oryOS.8...v0.13.9+oryOS.9) ## [v0.13.8+oryOS.8](https://github.com/ory/oathkeeper/tree/v0.13.8+oryOS.8) (2018-11-14) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.13.7+oryOS.7...v0.13.8+oryOS.8) ## [v0.13.7+oryOS.7](https://github.com/ory/oathkeeper/tree/v0.13.7+oryOS.7) (2018-11-14) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.13.6+oryOS.6...v0.13.7+oryOS.7) ## [v0.13.6+oryOS.6](https://github.com/ory/oathkeeper/tree/v0.13.6+oryOS.6) (2018-11-14) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.13.5+oryOS.5...v0.13.6+oryOS.6) ## [v0.13.5+oryOS.5](https://github.com/ory/oathkeeper/tree/v0.13.5+oryOS.5) (2018-11-14) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.13.4+oryOS.4...v0.13.5+oryOS.5) ## [v0.13.4+oryOS.4](https://github.com/ory/oathkeeper/tree/v0.13.4+oryOS.4) (2018-11-14) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.13.3+oryOS.3...v0.13.4+oryOS.4) ## [v0.13.3+oryOS.3](https://github.com/ory/oathkeeper/tree/v0.13.3+oryOS.3) (2018-11-14) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.13.2+oryOS.2...v0.13.3+oryOS.3) ## [v0.13.2+oryOS.2](https://github.com/ory/oathkeeper/tree/v0.13.2+oryOS.2) (2018-11-14) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.13.1+oryOS.1...v0.13.2+oryOS.2) ## [v0.13.1+oryOS.1](https://github.com/ory/oathkeeper/tree/v0.13.1+oryOS.1) (2018-11-14) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v1.0.0-beta.9...v0.13.1+oryOS.1) **Implemented enhancements:** -- TLS Termination 'X-Forwarded-Proto' [\#95](https://github.com/ory/oathkeeper/issues/95) -- Slow POST through proxy causes timeout after 5 seconds [\#64](https://github.com/ory/oathkeeper/issues/64) +- TLS Termination 'X-Forwarded-Proto' + [\#95](https://github.com/ory/oathkeeper/issues/95) +- Slow POST through proxy causes timeout after 5 seconds + [\#64](https://github.com/ory/oathkeeper/issues/64) **Closed issues:** -- Keto Warden Authorizer: Make Subject configurable. [\#128](https://github.com/ory/oathkeeper/issues/128) -- Inconsistent Environment Variable Docs [\#121](https://github.com/ory/oathkeeper/issues/121) - -**Merged pull requests:** - -- docs: Improve some docs and update SDK [\#135](https://github.com/ory/oathkeeper/pull/135) ([aeneasr](https://github.com/aeneasr)) -- Add environment parameters \(and description\) to configure proxy server timeout settings [\#132](https://github.com/ory/oathkeeper/pull/132) ([7phs](https://github.com/7phs)) -- Make subject configurable using go template [\#129](https://github.com/ory/oathkeeper/pull/129) ([lsjostro](https://github.com/lsjostro)) -- docs: Updates issue and pull request templates [\#127](https://github.com/ory/oathkeeper/pull/127) ([aeneasr](https://github.com/aeneasr)) -- docs: Updates issue and pull request templates [\#126](https://github.com/ory/oathkeeper/pull/126) ([aeneasr](https://github.com/aeneasr)) -- cmd: TLS environment variables [\#124](https://github.com/ory/oathkeeper/pull/124) ([fredbi](https://github.com/fredbi)) -- docs: Fix typo in README. [\#118](https://github.com/ory/oathkeeper/pull/118) ([ddunkin](https://github.com/ddunkin)) +- Keto Warden Authorizer: Make Subject configurable. + [\#128](https://github.com/ory/oathkeeper/issues/128) +- Inconsistent Environment Variable Docs + [\#121](https://github.com/ory/oathkeeper/issues/121) + +**Merged pull requests:** + +- docs: Improve some docs and update SDK + [\#135](https://github.com/ory/oathkeeper/pull/135) + ([aeneasr](https://github.com/aeneasr)) +- Add environment parameters \(and description\) to configure proxy server + timeout settings [\#132](https://github.com/ory/oathkeeper/pull/132) + ([7phs](https://github.com/7phs)) +- Make subject configurable using go template + [\#129](https://github.com/ory/oathkeeper/pull/129) + ([lsjostro](https://github.com/lsjostro)) +- docs: Updates issue and pull request templates + [\#127](https://github.com/ory/oathkeeper/pull/127) + ([aeneasr](https://github.com/aeneasr)) +- docs: Updates issue and pull request templates + [\#126](https://github.com/ory/oathkeeper/pull/126) + ([aeneasr](https://github.com/aeneasr)) +- cmd: TLS environment variables + [\#124](https://github.com/ory/oathkeeper/pull/124) + ([fredbi](https://github.com/fredbi)) +- docs: Fix typo in README. [\#118](https://github.com/ory/oathkeeper/pull/118) + ([ddunkin](https://github.com/ddunkin)) ## [v1.0.0-beta.9](https://github.com/ory/oathkeeper/tree/v1.0.0-beta.9) (2018-09-01) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v1.0.0-beta.8...v1.0.0-beta.9) **Implemented enhancements:** - Add JWT authenticator [\#112](https://github.com/ory/oathkeeper/issues/112) -- proxy: Add JWT authenticator [\#109](https://github.com/ory/oathkeeper/pull/109) ([aeneasr](https://github.com/aeneasr)) -- cmd: Disable cors per default [\#107](https://github.com/ory/oathkeeper/pull/107) ([aeneasr](https://github.com/aeneasr)) +- proxy: Add JWT authenticator + [\#109](https://github.com/ory/oathkeeper/pull/109) + ([aeneasr](https://github.com/aeneasr)) +- cmd: Disable cors per default + [\#107](https://github.com/ory/oathkeeper/pull/107) + ([aeneasr](https://github.com/aeneasr)) **Fixed bugs:** -- oathkeeper beta8 builds on older hydra SDK [\#101](https://github.com/ory/oathkeeper/issues/101) -- proxy: Improve compatibility with ORY Hydra 1.0.0-beta.8 [\#108](https://github.com/ory/oathkeeper/pull/108) ([aeneasr](https://github.com/aeneasr)) -- cmd: Disable cors per default [\#107](https://github.com/ory/oathkeeper/pull/107) ([aeneasr](https://github.com/aeneasr)) +- oathkeeper beta8 builds on older hydra SDK + [\#101](https://github.com/ory/oathkeeper/issues/101) +- proxy: Improve compatibility with ORY Hydra 1.0.0-beta.8 + [\#108](https://github.com/ory/oathkeeper/pull/108) + ([aeneasr](https://github.com/aeneasr)) +- cmd: Disable cors per default + [\#107](https://github.com/ory/oathkeeper/pull/107) + ([aeneasr](https://github.com/aeneasr)) **Closed issues:** -- --config flag doesn't work [\#110](https://github.com/ory/oathkeeper/issues/110) -- \[Proposal/Discussion\] New Credentials Issuers [\#96](https://github.com/ory/oathkeeper/issues/96) - -**Merged pull requests:** - -- cmd: Properly document JWT refresh [\#117](https://github.com/ory/oathkeeper/pull/117) ([aeneasr](https://github.com/aeneasr)) -- cmd: Enables TLS option on serve api [\#116](https://github.com/ory/oathkeeper/pull/116) ([fredbi](https://github.com/fredbi)) -- Prepare beta.9 release [\#115](https://github.com/ory/oathkeeper/pull/115) ([aeneasr](https://github.com/aeneasr)) -- Aligned TLS options with hydra: allow cert&key to be specified with file [\#114](https://github.com/ory/oathkeeper/pull/114) ([fredbi](https://github.com/fredbi)) -- Improve integration tests [\#113](https://github.com/ory/oathkeeper/pull/113) ([aeneasr](https://github.com/aeneasr)) -- cmd: Remove config flag [\#111](https://github.com/ory/oathkeeper/pull/111) ([aeneasr](https://github.com/aeneasr)) -- \(fix\) Typo in checkResponse function print message [\#106](https://github.com/ory/oathkeeper/pull/106) ([devprincess](https://github.com/devprincess)) -- proxy: add cookies ci to handler factory [\#103](https://github.com/ory/oathkeeper/pull/103) ([zikes](https://github.com/zikes)) -- proxy: add cookies credentials issuer [\#102](https://github.com/ory/oathkeeper/pull/102) ([zikes](https://github.com/zikes)) -- Headers Credentials Issuer [\#100](https://github.com/ory/oathkeeper/pull/100) ([zikes](https://github.com/zikes)) +- --config flag doesn't work + [\#110](https://github.com/ory/oathkeeper/issues/110) +- \[Proposal/Discussion\] New Credentials Issuers + [\#96](https://github.com/ory/oathkeeper/issues/96) + +**Merged pull requests:** + +- cmd: Properly document JWT refresh + [\#117](https://github.com/ory/oathkeeper/pull/117) + ([aeneasr](https://github.com/aeneasr)) +- cmd: Enables TLS option on serve api + [\#116](https://github.com/ory/oathkeeper/pull/116) + ([fredbi](https://github.com/fredbi)) +- Prepare beta.9 release [\#115](https://github.com/ory/oathkeeper/pull/115) + ([aeneasr](https://github.com/aeneasr)) +- Aligned TLS options with hydra: allow cert&key to be specified with file + [\#114](https://github.com/ory/oathkeeper/pull/114) + ([fredbi](https://github.com/fredbi)) +- Improve integration tests [\#113](https://github.com/ory/oathkeeper/pull/113) + ([aeneasr](https://github.com/aeneasr)) +- cmd: Remove config flag [\#111](https://github.com/ory/oathkeeper/pull/111) + ([aeneasr](https://github.com/aeneasr)) +- \(fix\) Typo in checkResponse function print message + [\#106](https://github.com/ory/oathkeeper/pull/106) + ([devprincess](https://github.com/devprincess)) +- proxy: add cookies ci to handler factory + [\#103](https://github.com/ory/oathkeeper/pull/103) + ([zikes](https://github.com/zikes)) +- proxy: add cookies credentials issuer + [\#102](https://github.com/ory/oathkeeper/pull/102) + ([zikes](https://github.com/zikes)) +- Headers Credentials Issuer [\#100](https://github.com/ory/oathkeeper/pull/100) + ([zikes](https://github.com/zikes)) ## [v1.0.0-beta.8](https://github.com/ory/oathkeeper/tree/v1.0.0-beta.8) (2018-08-09) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v1.0.0-beta.7...v1.0.0-beta.8) **Implemented enhancements:** -- Resolve various issues [\#93](https://github.com/ory/oathkeeper/pull/93) ([aeneasr](https://github.com/aeneasr)) +- Resolve various issues [\#93](https://github.com/ory/oathkeeper/pull/93) + ([aeneasr](https://github.com/aeneasr)) **Fixed bugs:** - Invalid Url Validator [\#92](https://github.com/ory/oathkeeper/issues/92) -- Resolve various issues [\#93](https://github.com/ory/oathkeeper/pull/93) ([aeneasr](https://github.com/aeneasr)) +- Resolve various issues [\#93](https://github.com/ory/oathkeeper/pull/93) + ([aeneasr](https://github.com/aeneasr)) **Closed issues:** -- `noop` authenticator should not bypass allow/deny authorizers [\#97](https://github.com/ory/oathkeeper/issues/97) -- Build and upload binaries upon release [\#89](https://github.com/ory/oathkeeper/issues/89) -- Feature request: vault authenticator [\#88](https://github.com/ory/oathkeeper/issues/88) -- Add endpoint for answering access requests directly [\#42](https://github.com/ory/oathkeeper/issues/42) +- `noop` authenticator should not bypass allow/deny authorizers + [\#97](https://github.com/ory/oathkeeper/issues/97) +- Build and upload binaries upon release + [\#89](https://github.com/ory/oathkeeper/issues/89) +- Feature request: vault authenticator + [\#88](https://github.com/ory/oathkeeper/issues/88) +- Add endpoint for answering access requests directly + [\#42](https://github.com/ory/oathkeeper/issues/42) **Merged pull requests:** -- Resolve various issues [\#99](https://github.com/ory/oathkeeper/pull/99) ([aeneasr](https://github.com/aeneasr)) -- Node sdk [\#94](https://github.com/ory/oathkeeper/pull/94) ([aeneasr](https://github.com/aeneasr)) -- judge: Add endpoint for answering access requests directly [\#91](https://github.com/ory/oathkeeper/pull/91) ([aeneasr](https://github.com/aeneasr)) -- health: Introduce health and version endpoint [\#90](https://github.com/ory/oathkeeper/pull/90) ([aeneasr](https://github.com/aeneasr)) +- Resolve various issues [\#99](https://github.com/ory/oathkeeper/pull/99) + ([aeneasr](https://github.com/aeneasr)) +- Node sdk [\#94](https://github.com/ory/oathkeeper/pull/94) + ([aeneasr](https://github.com/aeneasr)) +- judge: Add endpoint for answering access requests directly + [\#91](https://github.com/ory/oathkeeper/pull/91) + ([aeneasr](https://github.com/aeneasr)) +- health: Introduce health and version endpoint + [\#90](https://github.com/ory/oathkeeper/pull/90) + ([aeneasr](https://github.com/aeneasr)) ## [v1.0.0-beta.7](https://github.com/ory/oathkeeper/tree/v1.0.0-beta.7) (2018-07-12) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v1.0.0-beta.6...v1.0.0-beta.7) **Merged pull requests:** -- docs: fix broken link [\#87](https://github.com/ory/oathkeeper/pull/87) ([orisano](https://github.com/orisano)) -- README: grammatical fix in stability sentence [\#86](https://github.com/ory/oathkeeper/pull/86) ([philips](https://github.com/philips)) +- docs: fix broken link [\#87](https://github.com/ory/oathkeeper/pull/87) + ([orisano](https://github.com/orisano)) +- README: grammatical fix in stability sentence + [\#86](https://github.com/ory/oathkeeper/pull/86) + ([philips](https://github.com/philips)) ## [v1.0.0-beta.6](https://github.com/ory/oathkeeper/tree/v1.0.0-beta.6) (2018-07-11) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v1.0.0-beta.5...v1.0.0-beta.6) ## [v1.0.0-beta.5](https://github.com/ory/oathkeeper/tree/v1.0.0-beta.5) (2018-07-07) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v1.0.0-beta.4...v1.0.0-beta.5) **Implemented enhancements:** -- rule: Adds validator for rules [\#77](https://github.com/ory/oathkeeper/pull/77) ([aeneasr](https://github.com/aeneasr)) +- rule: Adds validator for rules + [\#77](https://github.com/ory/oathkeeper/pull/77) + ([aeneasr](https://github.com/aeneasr)) **Fixed bugs:** -- Resolve stack overflow in key & rule refresher [\#80](https://github.com/ory/oathkeeper/issues/80) -- Deletion of conflicting rule doesn't solve the route conflict [\#73](https://github.com/ory/oathkeeper/issues/73) -- rules: Properly handle conflicts on PUT and POST [\#76](https://github.com/ory/oathkeeper/pull/76) ([aeneasr](https://github.com/aeneasr)) -- rules: Resolves an issue with cached matchers [\#75](https://github.com/ory/oathkeeper/pull/75) ([aeneasr](https://github.com/aeneasr)) +- Resolve stack overflow in key & rule refresher + [\#80](https://github.com/ory/oathkeeper/issues/80) +- Deletion of conflicting rule doesn't solve the route conflict + [\#73](https://github.com/ory/oathkeeper/issues/73) +- rules: Properly handle conflicts on PUT and POST + [\#76](https://github.com/ory/oathkeeper/pull/76) + ([aeneasr](https://github.com/aeneasr)) +- rules: Resolves an issue with cached matchers + [\#75](https://github.com/ory/oathkeeper/pull/75) + ([aeneasr](https://github.com/aeneasr)) **Closed issues:** -- kid does not match .well-known/jwks.json [\#83](https://github.com/ory/oathkeeper/issues/83) +- kid does not match .well-known/jwks.json + [\#83](https://github.com/ory/oathkeeper/issues/83) - MySQL not supported [\#82](https://github.com/ory/oathkeeper/issues/82) -- Add input validator to rules [\#41](https://github.com/ory/oathkeeper/issues/41) -- PUT rules/unknownId does not error [\#38](https://github.com/ory/oathkeeper/issues/38) - -**Merged pull requests:** - -- rsakey: Resolve HS256 kid mismatch [\#85](https://github.com/ory/oathkeeper/pull/85) ([aeneasr](https://github.com/aeneasr)) -- cmd: Allows connectivity to MySQL [\#84](https://github.com/ory/oathkeeper/pull/84) ([aeneasr](https://github.com/aeneasr)) -- cmd: Resolves recursive stack overflow [\#81](https://github.com/ory/oathkeeper/pull/81) ([aeneasr](https://github.com/aeneasr)) -- docs: Adds link to examples repository [\#79](https://github.com/ory/oathkeeper/pull/79) ([aeneasr](https://github.com/aeneasr)) -- docs: Adds gh templates & code of conduct [\#78](https://github.com/ory/oathkeeper/pull/78) ([aeneasr](https://github.com/aeneasr)) -- ci: Prevent pushes from forks to coveralls [\#74](https://github.com/ory/oathkeeper/pull/74) ([aeneasr](https://github.com/aeneasr)) +- Add input validator to rules + [\#41](https://github.com/ory/oathkeeper/issues/41) +- PUT rules/unknownId does not error + [\#38](https://github.com/ory/oathkeeper/issues/38) + +**Merged pull requests:** + +- rsakey: Resolve HS256 kid mismatch + [\#85](https://github.com/ory/oathkeeper/pull/85) + ([aeneasr](https://github.com/aeneasr)) +- cmd: Allows connectivity to MySQL + [\#84](https://github.com/ory/oathkeeper/pull/84) + ([aeneasr](https://github.com/aeneasr)) +- cmd: Resolves recursive stack overflow + [\#81](https://github.com/ory/oathkeeper/pull/81) + ([aeneasr](https://github.com/aeneasr)) +- docs: Adds link to examples repository + [\#79](https://github.com/ory/oathkeeper/pull/79) + ([aeneasr](https://github.com/aeneasr)) +- docs: Adds gh templates & code of conduct + [\#78](https://github.com/ory/oathkeeper/pull/78) + ([aeneasr](https://github.com/aeneasr)) +- ci: Prevent pushes from forks to coveralls + [\#74](https://github.com/ory/oathkeeper/pull/74) + ([aeneasr](https://github.com/aeneasr)) ## [v1.0.0-beta.4](https://github.com/ory/oathkeeper/tree/v1.0.0-beta.4) (2018-06-14) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v1.0.0-beta.3...v1.0.0-beta.4) **Implemented enhancements:** -- cmd: Should not fatal if ORY Hydra SDK is unable to start [\#71](https://github.com/ory/oathkeeper/issues/71) +- cmd: Should not fatal if ORY Hydra SDK is unable to start + [\#71](https://github.com/ory/oathkeeper/issues/71) **Merged pull requests:** -- Reduces setup complexity [\#72](https://github.com/ory/oathkeeper/pull/72) ([aeneasr](https://github.com/aeneasr)) +- Reduces setup complexity [\#72](https://github.com/ory/oathkeeper/pull/72) + ([aeneasr](https://github.com/aeneasr)) ## [v1.0.0-beta.3](https://github.com/ory/oathkeeper/tree/v1.0.0-beta.3) (2018-06-13) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v1.0.0-beta.2...v1.0.0-beta.3) **Merged pull requests:** -- proxy: Resolves potential panic in request handler [\#70](https://github.com/ory/oathkeeper/pull/70) ([aeneasr](https://github.com/aeneasr)) -- Minor improvements [\#69](https://github.com/ory/oathkeeper/pull/69) ([aeneasr](https://github.com/aeneasr)) +- proxy: Resolves potential panic in request handler + [\#70](https://github.com/ory/oathkeeper/pull/70) + ([aeneasr](https://github.com/aeneasr)) +- Minor improvements [\#69](https://github.com/ory/oathkeeper/pull/69) + ([aeneasr](https://github.com/aeneasr)) ## [v1.0.0-beta.2](https://github.com/ory/oathkeeper/tree/v1.0.0-beta.2) (2018-05-29) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v1.0.0-beta.1...v1.0.0-beta.2) ## [v1.0.0-beta.1](https://github.com/ory/oathkeeper/tree/v1.0.0-beta.1) (2018-05-29) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.11.12...v1.0.0-beta.1) **Closed issues:** -- Make Oathkeeper work without Hydra \(Fix JWK Manager\) [\#65](https://github.com/ory/oathkeeper/issues/65) -- Expected at least one private key [\#61](https://github.com/ory/oathkeeper/issues/61) -- Disallow unknown JSON fields [\#45](https://github.com/ory/oathkeeper/issues/45) -- Write AWS Lambda function for oathkeeper [\#44](https://github.com/ory/oathkeeper/issues/44) +- Make Oathkeeper work without Hydra \(Fix JWK Manager\) + [\#65](https://github.com/ory/oathkeeper/issues/65) +- Expected at least one private key + [\#61](https://github.com/ory/oathkeeper/issues/61) +- Disallow unknown JSON fields + [\#45](https://github.com/ory/oathkeeper/issues/45) +- Write AWS Lambda function for oathkeeper + [\#44](https://github.com/ory/oathkeeper/issues/44) **Merged pull requests:** -- rsakey: Resolves issues with broken tests [\#68](https://github.com/ory/oathkeeper/pull/68) ([aeneasr](https://github.com/aeneasr)) -- cmd: Improves cors parsing [\#67](https://github.com/ory/oathkeeper/pull/67) ([aeneasr](https://github.com/aeneasr)) -- cmd: Doesn't fatal if no ORY Hydra is unresponsive. [\#66](https://github.com/ory/oathkeeper/pull/66) ([aeneasr](https://github.com/aeneasr)) -- Keto [\#60](https://github.com/ory/oathkeeper/pull/60) ([aeneasr](https://github.com/aeneasr)) +- rsakey: Resolves issues with broken tests + [\#68](https://github.com/ory/oathkeeper/pull/68) + ([aeneasr](https://github.com/aeneasr)) +- cmd: Improves cors parsing [\#67](https://github.com/ory/oathkeeper/pull/67) + ([aeneasr](https://github.com/aeneasr)) +- cmd: Doesn't fatal if no ORY Hydra is unresponsive. + [\#66](https://github.com/ory/oathkeeper/pull/66) + ([aeneasr](https://github.com/aeneasr)) +- Keto [\#60](https://github.com/ory/oathkeeper/pull/60) + ([aeneasr](https://github.com/aeneasr)) ## [v0.11.12](https://github.com/ory/oathkeeper/tree/v0.11.12) (2018-05-07) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.0.29...v0.11.12) **Closed issues:** -- Unable to refresh RSA keys for JWK signing [\#53](https://github.com/ory/oathkeeper/issues/53) -- Add well known endpoint to swagger docs [\#47](https://github.com/ory/oathkeeper/issues/47) - -**Merged pull requests:** - -- Update README.md [\#58](https://github.com/ory/oathkeeper/pull/58) ([aeneasr](https://github.com/aeneasr)) -- docs: Moves documentation to new repository [\#57](https://github.com/ory/oathkeeper/pull/57) ([aeneasr](https://github.com/aeneasr)) -- Update 2-EXECUTION.md [\#56](https://github.com/ory/oathkeeper/pull/56) ([maryoush](https://github.com/maryoush)) -- Update 2-EXECUTION.md [\#55](https://github.com/ory/oathkeeper/pull/55) ([taland](https://github.com/taland)) -- Improve tests [\#54](https://github.com/ory/oathkeeper/pull/54) ([aeneasr](https://github.com/aeneasr)) -- cmd: correct logging typo [\#52](https://github.com/ory/oathkeeper/pull/52) ([euank](https://github.com/euank)) -- docs: Adds license note to all source files [\#51](https://github.com/ory/oathkeeper/pull/51) ([aeneasr](https://github.com/aeneasr)) -- ci: Resolves issue with pushing docs [\#50](https://github.com/ory/oathkeeper/pull/50) ([aeneasr](https://github.com/aeneasr)) -- docs: Adds automatic summary generation [\#49](https://github.com/ory/oathkeeper/pull/49) ([aeneasr](https://github.com/aeneasr)) +- Unable to refresh RSA keys for JWK signing + [\#53](https://github.com/ory/oathkeeper/issues/53) +- Add well known endpoint to swagger docs + [\#47](https://github.com/ory/oathkeeper/issues/47) + +**Merged pull requests:** + +- Update README.md [\#58](https://github.com/ory/oathkeeper/pull/58) + ([aeneasr](https://github.com/aeneasr)) +- docs: Moves documentation to new repository + [\#57](https://github.com/ory/oathkeeper/pull/57) + ([aeneasr](https://github.com/aeneasr)) +- Update 2-EXECUTION.md [\#56](https://github.com/ory/oathkeeper/pull/56) + ([maryoush](https://github.com/maryoush)) +- Update 2-EXECUTION.md [\#55](https://github.com/ory/oathkeeper/pull/55) + ([taland](https://github.com/taland)) +- Improve tests [\#54](https://github.com/ory/oathkeeper/pull/54) + ([aeneasr](https://github.com/aeneasr)) +- cmd: correct logging typo [\#52](https://github.com/ory/oathkeeper/pull/52) + ([euank](https://github.com/euank)) +- docs: Adds license note to all source files + [\#51](https://github.com/ory/oathkeeper/pull/51) + ([aeneasr](https://github.com/aeneasr)) +- ci: Resolves issue with pushing docs + [\#50](https://github.com/ory/oathkeeper/pull/50) + ([aeneasr](https://github.com/aeneasr)) +- docs: Adds automatic summary generation + [\#49](https://github.com/ory/oathkeeper/pull/49) + ([aeneasr](https://github.com/aeneasr)) ## [v0.0.29](https://github.com/ory/oathkeeper/tree/v0.0.29) (2017-12-19) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.0.28...v0.0.29) **Merged pull requests:** -- Adds use field to well known [\#48](https://github.com/ory/oathkeeper/pull/48) ([aeneasr](https://github.com/aeneasr)) +- Adds use field to well known [\#48](https://github.com/ory/oathkeeper/pull/48) + ([aeneasr](https://github.com/aeneasr)) ## [v0.0.28](https://github.com/ory/oathkeeper/tree/v0.0.28) (2017-12-19) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.0.27...v0.0.28) **Closed issues:** -- Make key discovery easier with well-known feature [\#43](https://github.com/ory/oathkeeper/issues/43) +- Make key discovery easier with well-known feature + [\#43](https://github.com/ory/oathkeeper/issues/43) **Merged pull requests:** -- Replaces key discovery with well-known feature [\#46](https://github.com/ory/oathkeeper/pull/46) ([aeneasr](https://github.com/aeneasr)) +- Replaces key discovery with well-known feature + [\#46](https://github.com/ory/oathkeeper/pull/46) + ([aeneasr](https://github.com/aeneasr)) ## [v0.0.27](https://github.com/ory/oathkeeper/tree/v0.0.27) (2017-12-12) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.0.26...v0.0.27) **Merged pull requests:** -- Adds cors capabilities to management server [\#40](https://github.com/ory/oathkeeper/pull/40) ([aeneasr](https://github.com/aeneasr)) -- evaluator: Use full request URL [\#24](https://github.com/ory/oathkeeper/pull/24) ([aeneasr](https://github.com/aeneasr)) +- Adds cors capabilities to management server + [\#40](https://github.com/ory/oathkeeper/pull/40) + ([aeneasr](https://github.com/aeneasr)) +- evaluator: Use full request URL + [\#24](https://github.com/ory/oathkeeper/pull/24) + ([aeneasr](https://github.com/aeneasr)) ## [v0.0.26](https://github.com/ory/oathkeeper/tree/v0.0.26) (2017-12-11) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.0.25...v0.0.26) **Merged pull requests:** -- Fixes broken image link in docs [\#39](https://github.com/ory/oathkeeper/pull/39) ([aeneasr](https://github.com/aeneasr)) +- Fixes broken image link in docs + [\#39](https://github.com/ory/oathkeeper/pull/39) + ([aeneasr](https://github.com/aeneasr)) ## [v0.0.25](https://github.com/ory/oathkeeper/tree/v0.0.25) (2017-11-28) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.0.24...v0.0.25) **Merged pull requests:** -- Add extra data from token introspection to session [\#37](https://github.com/ory/oathkeeper/pull/37) ([aeneasr](https://github.com/aeneasr)) +- Add extra data from token introspection to session + [\#37](https://github.com/ory/oathkeeper/pull/37) + ([aeneasr](https://github.com/aeneasr)) ## [v0.0.24](https://github.com/ory/oathkeeper/tree/v0.0.24) (2017-11-26) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.0.23...v0.0.24) **Closed issues:** -- Document HYDRA\_JWK\_SET\_ID [\#34](https://github.com/ory/oathkeeper/issues/34) -- Investigate if the issuer should be oathkeeper or hydra [\#27](https://github.com/ory/oathkeeper/issues/27) +- Document HYDRA_JWK_SET_ID [\#34](https://github.com/ory/oathkeeper/issues/34) +- Investigate if the issuer should be oathkeeper or hydra + [\#27](https://github.com/ory/oathkeeper/issues/27) **Merged pull requests:** -- Telemetry [\#36](https://github.com/ory/oathkeeper/pull/36) ([aeneasr](https://github.com/aeneasr)) +- Telemetry [\#36](https://github.com/ory/oathkeeper/pull/36) + ([aeneasr](https://github.com/aeneasr)) ## [v0.0.23](https://github.com/ory/oathkeeper/tree/v0.0.23) (2017-11-24) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.0.22...v0.0.23) **Closed issues:** -- Rename basicAuthorizationModeEnabled to something that does not clash with HTTP basic authorization [\#29](https://github.com/ory/oathkeeper/issues/29) -- Rename bypass values for better clarity [\#13](https://github.com/ory/oathkeeper/issues/13) +- Rename basicAuthorizationModeEnabled to something that does not clash with + HTTP basic authorization [\#29](https://github.com/ory/oathkeeper/issues/29) +- Rename bypass values for better clarity + [\#13](https://github.com/ory/oathkeeper/issues/13) **Merged pull requests:** -- Print formatted output string in rule management CLI [\#35](https://github.com/ory/oathkeeper/pull/35) ([aeneasr](https://github.com/aeneasr)) -- docs: Add JWK set docs [\#33](https://github.com/ory/oathkeeper/pull/33) ([aeneasr](https://github.com/aeneasr)) -- Update docs and add tests [\#32](https://github.com/ory/oathkeeper/pull/32) ([aeneasr](https://github.com/aeneasr)) +- Print formatted output string in rule management CLI + [\#35](https://github.com/ory/oathkeeper/pull/35) + ([aeneasr](https://github.com/aeneasr)) +- docs: Add JWK set docs [\#33](https://github.com/ory/oathkeeper/pull/33) + ([aeneasr](https://github.com/aeneasr)) +- Update docs and add tests [\#32](https://github.com/ory/oathkeeper/pull/32) + ([aeneasr](https://github.com/aeneasr)) ## [v0.0.22](https://github.com/ory/oathkeeper/tree/v0.0.22) (2017-11-20) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.0.21...v0.0.22) **Merged pull requests:** -- Renames bypass values for better clarity [\#31](https://github.com/ory/oathkeeper/pull/31) ([aeneasr](https://github.com/aeneasr)) +- Renames bypass values for better clarity + [\#31](https://github.com/ory/oathkeeper/pull/31) + ([aeneasr](https://github.com/aeneasr)) ## [v0.0.21](https://github.com/ory/oathkeeper/tree/v0.0.21) (2017-11-19) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.0.20...v0.0.21) **Merged pull requests:** -- Request hydra.keys scope and fix panic [\#30](https://github.com/ory/oathkeeper/pull/30) ([aeneasr](https://github.com/aeneasr)) +- Request hydra.keys scope and fix panic + [\#30](https://github.com/ory/oathkeeper/pull/30) + ([aeneasr](https://github.com/aeneasr)) ## [v0.0.20](https://github.com/ory/oathkeeper/tree/v0.0.20) (2017-11-18) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.0.19...v0.0.20) **Merged pull requests:** -- docs: Improve swagger documentation [\#28](https://github.com/ory/oathkeeper/pull/28) ([aeneasr](https://github.com/aeneasr)) -- cmd: Add rules management capabilities to the cli [\#26](https://github.com/ory/oathkeeper/pull/26) ([aeneasr](https://github.com/aeneasr)) -- unstaged [\#25](https://github.com/ory/oathkeeper/pull/25) ([aeneasr](https://github.com/aeneasr)) +- docs: Improve swagger documentation + [\#28](https://github.com/ory/oathkeeper/pull/28) + ([aeneasr](https://github.com/aeneasr)) +- cmd: Add rules management capabilities to the cli + [\#26](https://github.com/ory/oathkeeper/pull/26) + ([aeneasr](https://github.com/aeneasr)) +- unstaged [\#25](https://github.com/ory/oathkeeper/pull/25) + ([aeneasr](https://github.com/aeneasr)) ## [v0.0.19](https://github.com/ory/oathkeeper/tree/v0.0.19) (2017-11-13) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.0.18...v0.0.19) **Closed issues:** -- evaluator: token\[:5\] will cause panic [\#22](https://github.com/ory/oathkeeper/issues/22) +- evaluator: token\[:5\] will cause panic + [\#22](https://github.com/ory/oathkeeper/issues/22) ## [v0.0.18](https://github.com/ory/oathkeeper/tree/v0.0.18) (2017-11-13) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.0.17...v0.0.18) **Merged pull requests:** -- evaluator: Resolve potential panic in token id generation [\#23](https://github.com/ory/oathkeeper/pull/23) ([aeneasr](https://github.com/aeneasr)) +- evaluator: Resolve potential panic in token id generation + [\#23](https://github.com/ory/oathkeeper/pull/23) + ([aeneasr](https://github.com/aeneasr)) ## [v0.0.17](https://github.com/ory/oathkeeper/tree/v0.0.17) (2017-11-12) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.0.16...v0.0.17) **Merged pull requests:** -- Introduces surrogate\_id to SQLManager [\#21](https://github.com/ory/oathkeeper/pull/21) ([aeneasr](https://github.com/aeneasr)) +- Introduces surrogate_id to SQLManager + [\#21](https://github.com/ory/oathkeeper/pull/21) + ([aeneasr](https://github.com/aeneasr)) ## [v0.0.16](https://github.com/ory/oathkeeper/tree/v0.0.16) (2017-11-12) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.0.15...v0.0.16) **Merged pull requests:** -- Replace MatchesPath with MatchesURL [\#20](https://github.com/ory/oathkeeper/pull/20) ([aeneasr](https://github.com/aeneasr)) +- Replace MatchesPath with MatchesURL + [\#20](https://github.com/ory/oathkeeper/pull/20) + ([aeneasr](https://github.com/aeneasr)) ## [v0.0.15](https://github.com/ory/oathkeeper/tree/v0.0.15) (2017-11-09) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.0.14...v0.0.15) **Merged pull requests:** -- Add HTTPS capabilities and document proxy/management commands [\#19](https://github.com/ory/oathkeeper/pull/19) ([aeneasr](https://github.com/aeneasr)) +- Add HTTPS capabilities and document proxy/management commands + [\#19](https://github.com/ory/oathkeeper/pull/19) + ([aeneasr](https://github.com/aeneasr)) ## [v0.0.14](https://github.com/ory/oathkeeper/tree/v0.0.14) (2017-11-07) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.0.13...v0.0.14) **Merged pull requests:** -- Make refresh\_delay configurable and skip it on boot [\#18](https://github.com/ory/oathkeeper/pull/18) ([aeneasr](https://github.com/aeneasr)) +- Make refresh_delay configurable and skip it on boot + [\#18](https://github.com/ory/oathkeeper/pull/18) + ([aeneasr](https://github.com/aeneasr)) ## [v0.0.13](https://github.com/ory/oathkeeper/tree/v0.0.13) (2017-11-07) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.0.12...v0.0.13) **Merged pull requests:** -- Store rules path match in plaintext [\#17](https://github.com/ory/oathkeeper/pull/17) ([aeneasr](https://github.com/aeneasr)) +- Store rules path match in plaintext + [\#17](https://github.com/ory/oathkeeper/pull/17) + ([aeneasr](https://github.com/aeneasr)) ## [v0.0.12](https://github.com/ory/oathkeeper/tree/v0.0.12) (2017-11-07) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.0.11...v0.0.12) **Merged pull requests:** -- Use ladon regex compiler for matches [\#16](https://github.com/ory/oathkeeper/pull/16) ([aeneasr](https://github.com/aeneasr)) +- Use ladon regex compiler for matches + [\#16](https://github.com/ory/oathkeeper/pull/16) + ([aeneasr](https://github.com/aeneasr)) ## [v0.0.11](https://github.com/ory/oathkeeper/tree/v0.0.11) (2017-11-06) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.0.10...v0.0.11) ## [v0.0.10](https://github.com/ory/oathkeeper/tree/v0.0.10) (2017-11-06) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.0.9...v0.0.10) ## [v0.0.9](https://github.com/ory/oathkeeper/tree/v0.0.9) (2017-11-06) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.0.8...v0.0.9) ## [v0.0.8](https://github.com/ory/oathkeeper/tree/v0.0.8) (2017-11-06) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.0.7...v0.0.8) **Merged pull requests:** -- Make oathkeeper binary executable\# [\#15](https://github.com/ory/oathkeeper/pull/15) ([aeneasr](https://github.com/aeneasr)) +- Make oathkeeper binary executable\# + [\#15](https://github.com/ory/oathkeeper/pull/15) + ([aeneasr](https://github.com/aeneasr)) ## [v0.0.7](https://github.com/ory/oathkeeper/tree/v0.0.7) (2017-11-06) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.0.6...v0.0.7) **Merged pull requests:** -- Build oathekeeper docker image statically [\#14](https://github.com/ory/oathkeeper/pull/14) ([aeneasr](https://github.com/aeneasr)) +- Build oathekeeper docker image statically + [\#14](https://github.com/ory/oathkeeper/pull/14) + ([aeneasr](https://github.com/aeneasr)) ## [v0.0.6](https://github.com/ory/oathkeeper/tree/v0.0.6) (2017-11-03) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.0.5...v0.0.6) **Merged pull requests:** -- Added serve all command [\#12](https://github.com/ory/oathkeeper/pull/12) ([aeneasr](https://github.com/aeneasr)) +- Added serve all command [\#12](https://github.com/ory/oathkeeper/pull/12) + ([aeneasr](https://github.com/aeneasr)) ## [v0.0.5](https://github.com/ory/oathkeeper/tree/v0.0.5) (2017-11-01) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.0.4...v0.0.5) **Merged pull requests:** -- Add cors handling to proxy [\#11](https://github.com/ory/oathkeeper/pull/11) ([aeneasr](https://github.com/aeneasr)) -- Remove goveralls from circle build [\#10](https://github.com/ory/oathkeeper/pull/10) ([aeneasr](https://github.com/aeneasr)) -- Use circle ci build status badge [\#9](https://github.com/ory/oathkeeper/pull/9) ([aeneasr](https://github.com/aeneasr)) -- Switch from glide to golang/dep for vendoring [\#8](https://github.com/ory/oathkeeper/pull/8) ([aeneasr](https://github.com/aeneasr)) -- Resolve tests by replacing nil slice [\#7](https://github.com/ory/oathkeeper/pull/7) ([aeneasr](https://github.com/aeneasr)) +- Add cors handling to proxy [\#11](https://github.com/ory/oathkeeper/pull/11) + ([aeneasr](https://github.com/aeneasr)) +- Remove goveralls from circle build + [\#10](https://github.com/ory/oathkeeper/pull/10) + ([aeneasr](https://github.com/aeneasr)) +- Use circle ci build status badge + [\#9](https://github.com/ory/oathkeeper/pull/9) + ([aeneasr](https://github.com/aeneasr)) +- Switch from glide to golang/dep for vendoring + [\#8](https://github.com/ory/oathkeeper/pull/8) + ([aeneasr](https://github.com/aeneasr)) +- Resolve tests by replacing nil slice + [\#7](https://github.com/ory/oathkeeper/pull/7) + ([aeneasr](https://github.com/aeneasr)) ## [v0.0.4](https://github.com/ory/oathkeeper/tree/v0.0.4) (2017-10-21) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.0.3...v0.0.4) **Merged pull requests:** -- Return arrays instead of null on rule creation [\#6](https://github.com/ory/oathkeeper/pull/6) ([aeneasr](https://github.com/aeneasr)) -- Add circleci configuration file [\#5](https://github.com/ory/oathkeeper/pull/5) ([aeneasr](https://github.com/aeneasr)) +- Return arrays instead of null on rule creation + [\#6](https://github.com/ory/oathkeeper/pull/6) + ([aeneasr](https://github.com/aeneasr)) +- Add circleci configuration file + [\#5](https://github.com/ory/oathkeeper/pull/5) + ([aeneasr](https://github.com/aeneasr)) ## [v0.0.3](https://github.com/ory/oathkeeper/tree/v0.0.3) (2017-10-18) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.0.2...v0.0.3) **Merged pull requests:** -- Fix unauthorized [\#4](https://github.com/ory/oathkeeper/pull/4) ([aeneasr](https://github.com/aeneasr)) +- Fix unauthorized [\#4](https://github.com/ory/oathkeeper/pull/4) + ([aeneasr](https://github.com/aeneasr)) ## [v0.0.2](https://github.com/ory/oathkeeper/tree/v0.0.2) (2017-10-12) + [Full Changelog](https://github.com/ory/oathkeeper/compare/v0.0.1...v0.0.2) **Merged pull requests:** -- Skip acp checks [\#3](https://github.com/ory/oathkeeper/pull/3) ([aeneasr](https://github.com/aeneasr)) +- Skip acp checks [\#3](https://github.com/ory/oathkeeper/pull/3) + ([aeneasr](https://github.com/aeneasr)) ## [v0.0.1](https://github.com/ory/oathkeeper/tree/v0.0.1) (2017-10-10) -**Merged pull requests:** - -- travis: add goveralls report submission [\#2](https://github.com/ory/oathkeeper/pull/2) ([aeneasr](https://github.com/aeneasr)) -- Prototype [\#1](https://github.com/ory/oathkeeper/pull/1) ([aeneasr](https://github.com/aeneasr)) +**Merged pull requests:** +- travis: add goveralls report submission + [\#2](https://github.com/ory/oathkeeper/pull/2) + ([aeneasr](https://github.com/aeneasr)) +- Prototype [\#1](https://github.com/ory/oathkeeper/pull/1) + ([aeneasr](https://github.com/aeneasr)) -\* *This Change Log was automatically generated by [github_changelog_generator](https://github.com/skywinder/Github-Changelog-Generator)* \ No newline at end of file +\* _This Change Log was automatically generated by +[github_changelog_generator](https://github.com/skywinder/Github-Changelog-Generator)_ diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index fe63e0f0f3..eb36cc38fb 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -2,6 +2,7 @@ + **Table of Contents** - [Introduction](#introduction) @@ -16,78 +17,104 @@ ## Introduction -Please note: We take ORY Oathkeeper's security and our users' trust very seriously. If you believe you have found a -security issue in ORY Oathkeeper, please responsibly disclose by contacting us at hi@ory.sh. +Please note: We take ORY Oathkeeper's security and our users' trust very +seriously. If you believe you have found a security issue in ORY Oathkeeper, +please responsibly disclose by contacting us at hi@ory.sh. -First: if you're unsure or afraid of anything, just ask or submit the issue or pull request anyways. You won't be -yelled at for giving it your best effort. The worst that can happen is that you'll be politely asked to change -something. We appreciate any sort of contributions, and don't want a wall of rules to get in the way of that. +First: if you're unsure or afraid of anything, just ask or submit the issue or +pull request anyways. You won't be yelled at for giving it your best effort. The +worst that can happen is that you'll be politely asked to change something. We +appreciate any sort of contributions, and don't want a wall of rules to get in +the way of that. -That said, if you want to ensure that a pull request is likely to be merged, talk to us! You can find out our thoughts -and ensure that your contribution won't clash or be obviated by ORY Oathkeeper's normal direction. A great way to do this is via -the [ORY Community](https://community.ory.sh/) or join the [ORY Chat](https://www.ory.sh/chat). +That said, if you want to ensure that a pull request is likely to be merged, +talk to us! You can find out our thoughts and ensure that your contribution +won't clash or be obviated by ORY Oathkeeper's normal direction. A great way to +do this is via the [ORY Community](https://community.ory.sh/) or join the +[ORY Chat](https://www.ory.sh/chat). ## Contributing Code -Unless you are fixing a known bug, we **strongly** recommend discussing it with the core team via a GitHub issue or -[in our chat](https://www.ory.sh/chat) before getting started to ensure your work is consistent with -ORY Oathkeeper's roadmap and architecture. +Unless you are fixing a known bug, we **strongly** recommend discussing it with +the core team via a GitHub issue or [in our chat](https://www.ory.sh/chat) +before getting started to ensure your work is consistent with ORY Oathkeeper's +roadmap and architecture. -All contributions are made via pull request. Note that **all patches from all contributors get reviewed**. After a pull -request is made other contributors will offer feedback, and if the patch passes review a maintainer will accept it with -a comment. When pull requests fail testing, authors are expected to update their pull requests to address the failures -until the tests pass and the pull request merges successfully. +All contributions are made via pull request. Note that **all patches from all +contributors get reviewed**. After a pull request is made other contributors +will offer feedback, and if the patch passes review a maintainer will accept it +with a comment. When pull requests fail testing, authors are expected to update +their pull requests to address the failures until the tests pass and the pull +request merges successfully. -At least one review from a maintainer is required for all patches (even patches from maintainers). +At least one review from a maintainer is required for all patches (even patches +from maintainers). -Reviewers should leave a "LGTM" comment once they are satisfied with the patch. If the patch was submitted by a -maintainer with write access, the pull request should be merged by the submitter after review. +Reviewers should leave a "LGTM" comment once they are satisfied with the patch. +If the patch was submitted by a maintainer with write access, the pull request +should be merged by the submitter after review. ## Disclosing vulnerabilities -Please disclose vulnerabilities exclusively to [hi@ory.am](mailto:hi@ory.am). Do not use GitHub issues. +Please disclose vulnerabilities exclusively to [hi@ory.am](mailto:hi@ory.am). Do +not use GitHub issues. ## Code Style Please follow these guidelines when formatting source code: -* Go code should match the output of `gofmt -s` +- Go code should match the output of `gofmt -s` ## Pull request procedure -To make a pull request, you will need a GitHub account; if you are unclear on this process, see GitHub's -documentation on [forking](https://help.github.com/articles/fork-a-repo) and [pull requests](https://help.github.com/articles/using-pull-requests). -Pull requests should be targeted at the `master` branch. Before creating a pull request, go through this checklist: +To make a pull request, you will need a GitHub account; if you are unclear on +this process, see GitHub's documentation on +[forking](https://help.github.com/articles/fork-a-repo) and +[pull requests](https://help.github.com/articles/using-pull-requests). Pull +requests should be targeted at the `master` branch. Before creating a pull +request, go through this checklist: 1. Create a feature branch off of `master` so that changes do not get mixed up. -1. [Rebase](http://git-scm.com/book/en/Git-Branching-Rebasing) your local changes against the `master` branch. -1. Run the full project test suite with the `go test ./...` (or equivalent) command and confirm that it passes. +1. [Rebase](http://git-scm.com/book/en/Git-Branching-Rebasing) your local + changes against the `master` branch. +1. Run the full project test suite with the `go test ./...` (or equivalent) + command and confirm that it passes. 1. Run `gofmt -s` (if the project is written in Go). -1. Ensure that each commit has a subsystem prefix (ex: `controller: `). +1. Ensure that each commit has a subsystem prefix (ex: `controller:`). -Pull requests will be treated as "review requests," and maintainers will give feedback on the style and substance of the patch. +Pull requests will be treated as "review requests," and maintainers will give +feedback on the style and substance of the patch. -Normally, all pull requests must include tests that test your change. Occasionally, a change will -be very difficult to test for. In those cases, please include a note in your commit message explaining why. +Normally, all pull requests must include tests that test your change. +Occasionally, a change will be very difficult to test for. In those cases, +please include a note in your commit message explaining why. ## Communication -We use [discord](https://www.ory.sh/chat). You are welcome to drop in and ask questions, discuss bugs, etc. +We use [discord](https://www.ory.sh/chat). You are welcome to drop in and ask +questions, discuss bugs, etc. ## Conduct -Whether you are a regular contributor or a newcomer, we care about making this community a safe place for you and -we've got your back. - -* We are committed to providing a friendly, safe and welcoming environment for all, regardless of gender, - sexual orientation, disability, ethnicity, religion, or similar personal characteristic. -* Please avoid using nicknames that might detract from a friendly, safe and welcoming environment for all. -* Be kind and courteous. There is no need to be mean or rude. -* We will exclude you from interaction if you insult, demean or harass anyone. In particular, we do not tolerate - behavior that excludes people in socially marginalized groups. -* Private harassment is also unacceptable. No matter who you are, if you feel you have been or are being harassed or - made uncomfortable by a community member, please contact one of the channel ops or a member of the ORY - Oathkeeper core team immediately. -* Likewise any spamming, trolling, flaming, baiting or other attention-stealing behaviour is not welcome. - -We welcome discussion about creating a welcoming, safe, and productive environment for the community. If you have any questions, feedback, or concerns [please let us know](https://www.ory.sh/chat). +Whether you are a regular contributor or a newcomer, we care about making this +community a safe place for you and we've got your back. + +- We are committed to providing a friendly, safe and welcoming environment for + all, regardless of gender, sexual orientation, disability, ethnicity, + religion, or similar personal characteristic. +- Please avoid using nicknames that might detract from a friendly, safe and + welcoming environment for all. +- Be kind and courteous. There is no need to be mean or rude. +- We will exclude you from interaction if you insult, demean or harass anyone. + In particular, we do not tolerate behavior that excludes people in socially + marginalized groups. +- Private harassment is also unacceptable. No matter who you are, if you feel + you have been or are being harassed or made uncomfortable by a community + member, please contact one of the channel ops or a member of the ORY + Oathkeeper core team immediately. +- Likewise any spamming, trolling, flaming, baiting or other attention-stealing + behaviour is not welcome. + +We welcome discussion about creating a welcoming, safe, and productive +environment for the community. If you have any questions, feedback, or concerns +[please let us know](https://www.ory.sh/chat). diff --git a/Makefile b/Makefile index 8846b558cb..451e0b466a 100644 --- a/Makefile +++ b/Makefile @@ -46,4 +46,4 @@ install: docker: CGO_ENABLED=0 GO111MODULE=on GOOS=linux GOARCH=amd64 go build docker build -t oryd/oathkeeper:latest . - rm oathkeeper \ No newline at end of file + rm oathkeeper diff --git a/README.md b/README.md index 361b1f2734..fc8978dc9e 100644 --- a/README.md +++ b/README.md @@ -10,23 +10,31 @@ Support this project! -ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests -based on sets of Access Rules. The BeyondCorp Model is designed by [Google](https://cloud.google.com/beyondcorp/) and -secures applications in Zero-Trust networks. - -An Identity & Access Proxy is typically deployed in front of (think API Gateway) web-facing applications and is capable -of authenticating and optionally authorizing access requests. The Access Control Decision API can be deployed alongside -an existing API Gateway or reverse proxy. ORY Oathkeeper's Access Control Decision API works with: - -- [Ambassador](https://github.com/datawire/ambassador) via [auth service](https://www.getambassador.io/reference/services/auth-service). -- [Envoy](https://www.envoyproxy.io) via the [External Authorization HTTP Filter](https://www.envoyproxy.io/docs/envoy/latest/configuration/http_filters/ext_authz_filter#config-http-filters-ext-authz) -- AWS API Gateway via [Custom Authorizers](https://aws.amazon.com/de/blogs/compute/introducing-custom-authorizers-in-amazon-api-gateway/) -- [Nginx](https://www.nginx.com) via [Authentication Based on Subrequest Result](https://docs.nginx.com/nginx/admin-guide/security-controls/configuring-subrequest-authentication/) +ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision +API that authorizes HTTP requests based on sets of Access Rules. The BeyondCorp +Model is designed by [Google](https://cloud.google.com/beyondcorp/) and secures +applications in Zero-Trust networks. + +An Identity & Access Proxy is typically deployed in front of (think API Gateway) +web-facing applications and is capable of authenticating and optionally +authorizing access requests. The Access Control Decision API can be deployed +alongside an existing API Gateway or reverse proxy. ORY Oathkeeper's Access +Control Decision API works with: + +- [Ambassador](https://github.com/datawire/ambassador) via + [auth service](https://www.getambassador.io/reference/services/auth-service). +- [Envoy](https://www.envoyproxy.io) via the + [External Authorization HTTP Filter](https://www.envoyproxy.io/docs/envoy/latest/configuration/http_filters/ext_authz_filter#config-http-filters-ext-authz) +- AWS API Gateway via + [Custom Authorizers](https://aws.amazon.com/de/blogs/compute/introducing-custom-authorizers-in-amazon-api-gateway/) +- [Nginx](https://www.nginx.com) via + [Authentication Based on Subrequest Result](https://docs.nginx.com/nginx/admin-guide/security-controls/configuring-subrequest-authentication/) among others. -This service is stable, but under active development and may introduce breaking changes in future releases. -Any breaking change will have extensive documentation and upgrade instructions. +This service is stable, but under active development and may introduce breaking +changes in future releases. Any breaking change will have extensive +documentation and upgrade instructions. [![CircleCI](https://circleci.com/gh/ory/oathkeeper.svg?style=shield&circle-token=eb458bf636326d41674141b6bbfa475a39c9db1e)](https://circleci.com/gh/ory/oathkeeper) [![Coverage Status](https://coveralls.io/repos/github/ory/oathkeeper/badge.svg?branch=master)](https://coveralls.io/github/ory/oathkeeper?branch=master) @@ -37,7 +45,6 @@ Any breaking change will have extensive documentation and upgrade instructions. - - [Installation](#installation) - [Ecosystem](#ecosystem) - [ORY Security Console: Administrative User Interface](#ory-security-console-administrative-user-interface) @@ -60,8 +67,10 @@ Any breaking change will have extensive documentation and upgrade instructions. ## Installation -Head over to the [ORY Developer Documentation](https://www.ory.sh/docs/oathkeeper/install) to learn how to install ORY -Oathkeeper on Linux, macOS, Windows, and Docker and how to build ORY Oathkeeper from source. +Head over to the +[ORY Developer Documentation](https://www.ory.sh/docs/oathkeeper/install) to +learn how to install ORY Oathkeeper on Linux, macOS, Windows, and Docker and how +to build ORY Oathkeeper from source. ## Ecosystem @@ -71,52 +80,61 @@ Oathkeeper on Linux, macOS, Windows, and Docker and how to build ORY Oathkeeper ### ORY Security Console: Administrative User Interface -The [ORY Security Console](https://console.ory.sh/) is a visual admin interface for managing ORY Hydra, -ORY Oathkeeper, and ORY Keto. +The [ORY Security Console](https://console.ory.sh/) is a visual admin interface +for managing ORY Hydra, ORY Oathkeeper, and ORY Keto. ### ORY Hydra: OAuth2 & OpenID Connect Server -[ORY Hydra](https://github.com/ory/hydra) ORY Hydra is a hardened OAuth2 and OpenID Connect server optimized -for low-latency, high throughput, and low resource consumption. ORY Hydra is not an identity provider -(user sign up, user log in, password reset flow), but connects to your existing identity provider through a consent app. +[ORY Hydra](https://github.com/ory/hydra) ORY Hydra is a hardened OAuth2 and +OpenID Connect server optimized for low-latency, high throughput, and low +resource consumption. ORY Hydra is not an identity provider (user sign up, user +log in, password reset flow), but connects to your existing identity provider +through a consent app. ### ORY Keto: Access Control Policies as a Server -[ORY Keto](https://github.com/ory/keto) is a policy decision point. It uses a set of access control policies, similar -to AWS IAM Policies, in order to determine whether a subject (user, application, service, car, ...) is authorized to -perform a certain action on a resource. +[ORY Keto](https://github.com/ory/keto) is a policy decision point. It uses a +set of access control policies, similar to AWS IAM Policies, in order to +determine whether a subject (user, application, service, car, ...) is authorized +to perform a certain action on a resource. ### Examples -The [ory/examples](https://github.com/ory/examples) repository contains numerous examples of setting up this project -individually and together with other services from the ORY Ecosystem. +The [ory/examples](https://github.com/ory/examples) repository contains numerous +examples of setting up this project individually and together with other +services from the ORY Ecosystem. ## Security ### Disclosing vulnerabilities -If you think you found a security vulnerability, please refrain from posting it publicly on the forums, the chat, or GitHub -and send us an email to [hi@ory.am](mailto:hi@ory.am) instead. +If you think you found a security vulnerability, please refrain from posting it +publicly on the forums, the chat, or GitHub and send us an email to +[hi@ory.am](mailto:hi@ory.am) instead. ## Telemetry -Our services collect summarized, anonymized data which can optionally be turned off. Click -[here](https://www.ory.sh/docs/guides/master/telemetry/) to learn more. +Our services collect summarized, anonymized data which can optionally be turned +off. Click [here](https://www.ory.sh/docs/guides/master/telemetry/) to learn +more. ## Documentation ### Guide -The Guide is available [here](https://www.ory.sh/docs/guides/master/oathkeeper/). +The Guide is available +[here](https://www.ory.sh/docs/guides/master/oathkeeper/). ### HTTP API documentation -The HTTP API is documented [here](https://www.ory.sh/docs/api/oathkeeper?version=master). +The HTTP API is documented +[here](https://www.ory.sh/docs/api/oathkeeper?version=master). ### Upgrading and Changelog -New releases might introduce breaking changes. To help you identify and incorporate those changes, we document these -changes in [UPGRADE.md](./UPGRADE.md) and [CHANGELOG.md](./CHANGELOG.md). +New releases might introduce breaking changes. To help you identify and +incorporate those changes, we document these changes in +[UPGRADE.md](./UPGRADE.md) and [CHANGELOG.md](./CHANGELOG.md). ### Command line documentation @@ -136,16 +154,21 @@ $ go test ./... ## Backers -Thank you to all our backers! 🙏 [[Become a backer](https://opencollective.com/ory#backer)] +Thank you to all our backers! 🙏 +[[Become a backer](https://opencollective.com/ory#backer)] -We would also like to thank (past & current) supporters (in alphabetical order) on [Patreon](https://www.patreon.com/_ory): Alexander Alimovs, Billy, Chancy Kennedy, Drozzy, Edwin Trejos, Howard Edidin, Ken Adler Oz Haven, Stefan Hans, TheCrealm - +We would also like to thank (past & current) supporters (in alphabetical order) +on [Patreon](https://www.patreon.com/_ory): Alexander Alimovs, Billy, Chancy +Kennedy, Drozzy, Edwin Trejos, Howard Edidin, Ken Adler Oz Haven, Stefan Hans, +TheCrealm ## Sponsors -Support this project by becoming a sponsor. Your logo will show up here with a link to your website. [[Become a sponsor](https://opencollective.com/ory#sponsor)] +Support this project by becoming a sponsor. Your logo will show up here with a +link to your website. +[[Become a sponsor](https://opencollective.com/ory#sponsor)] @@ -158,4 +181,6 @@ Support this project by becoming a sponsor. Your logo will show up here with a l -A special thanks goes out to **Wayne Robinson** for supporting this ecosystem with $200 every month since Oktober 2016 [on Patreon](https://www.patreon.com/_ory). +A special thanks goes out to **Wayne Robinson** for supporting this ecosystem +with \$200 every month since Oktober 2016 +[on Patreon](https://www.patreon.com/_ory). diff --git a/SECURITY.md b/SECURITY.md index 1ce5ed2bfd..df41f9ddcf 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -2,19 +2,17 @@ ## Supported Versions -We release patches for security vulnerabilities. -Which versions are eligible receiving such patches -depend on the CVSS v3.0 Rating: +We release patches for security vulnerabilities. Which versions are eligible +receiving such patches depend on the CVSS v3.0 Rating: -| CVSS v3.0 | Supported Versions | -| ---------- | ----------------------------------------- | -| 9.0-10.0 | Releases within the previous three months | -| 4.0-8.9 | Most recent release | +| CVSS v3.0 | Supported Versions | +| --------- | ----------------------------------------- | +| 9.0-10.0 | Releases within the previous three months | +| 4.0-8.9 | Most recent release | ## Reporting a Vulnerability Please report (suspected) security vulnerabilities to -**[security@ory.sh](mailto:security@ory.sh)**. You will receive -a response from us within 48 hours. If the issue is confirmed, -we will release a patch as soon as possible depending on complexity -but historically within a few days. +**[security@ory.sh](mailto:security@ory.sh)**. You will receive a response from +us within 48 hours. If the issue is confirmed, we will release a patch as soon +as possible depending on complexity but historically within a few days. diff --git a/UPGRADE.md b/UPGRADE.md index 6ed04108cd..afa107cb40 100644 --- a/UPGRADE.md +++ b/UPGRADE.md @@ -8,7 +8,6 @@ before finalizing the upgrade process. - - [master](#master) - [v0.16.0-beta.1+oryOS.12](#v0160-beta1oryos12) - [Access Rule Changes](#access-rule-changes) diff --git a/cmd/server/server.go b/cmd/server/server.go index 71066a8735..509233b33e 100644 --- a/cmd/server/server.go +++ b/cmd/server/server.go @@ -10,13 +10,14 @@ import ( "sync" negronilogrus "github.com/meatballhat/negroni-logrus" - "github.com/ory/x/healthx" "github.com/pkg/errors" "github.com/sirupsen/logrus" "github.com/spf13/cobra" "github.com/spf13/viper" "github.com/urfave/negroni" + "github.com/ory/x/healthx" + "github.com/ory/herodot" "github.com/ory/graceful" @@ -78,10 +79,9 @@ func runAPI(d driver.Driver, n *negroni.Negroni, logger *logrus.Logger) func() { d.Registry().HealthHandler().SetRoutes(router.Router, true) d.Registry().CredentialHandler().SetRoutes(router) - n.With( - negronilogrus.NewMiddlewareFromLogger(logger, "oathkeeper-api"), - d.Registry().DecisionHandler(), // This needs to be the last entry, otherwise the judge API won't work - ) + n.Use(negronilogrus.NewMiddlewareFromLogger(logger, "oathkeeper-api")) + n.Use(d.Registry().DecisionHandler()) // This needs to be the last entry, otherwise the judge API won't work + n.UseHandler(router) h := corsx.Initialize(n, logger, "serve.api") diff --git a/test/e2e/e2e-rules.json b/test/e2e/e2e-rules.json index 393ef4e481..372a73aba0 100644 --- a/test/e2e/e2e-rules.json +++ b/test/e2e/e2e-rules.json @@ -5,7 +5,7 @@ "url": "http://127.0.0.1:6662" }, "match": { - "url": "http://127.0.0.1:6660/jwt", + "url": "http://127.0.0.1:<6660|6661>/jwt", "methods": [ "GET" ] diff --git a/test/e2e/okclient/main.go b/test/e2e/okclient/main.go index 4fc86b9ec4..293de37ce3 100644 --- a/test/e2e/okclient/main.go +++ b/test/e2e/okclient/main.go @@ -54,12 +54,22 @@ var tokenValid = func() string { func main() { res, body := requestWithJWT(tokenValid) if res.StatusCode != 200 { - panic("expected 200: " + body) + panic("proxy: expected 200: " + body) } res, body = requestWithJWT("not.valid.token") if res.StatusCode != 403 { - panic("expected 401: " + body) + panic("proxy: expected 401: " + body) + } + + res, body = decisionWithJWT(tokenValid) + if res.StatusCode != 200 { + panic("decision: expected 200: " + body) + } + + res, body = decisionWithJWT("not.valid.token") + if res.StatusCode != 403 { + panic("decision: expected 401: " + body) } } @@ -75,3 +85,16 @@ func requestWithJWT(token string) (*http.Response, string) { cmdx.Must(err, "%s", err) return res, string(body) } + +func decisionWithJWT(token string) (*http.Response, string) { + pu := urlx.ParseOrPanic(os.Getenv("OATHKEEPER_API")) + req, err := http.NewRequest("GET", urlx.AppendPaths(pu, "decisions", "jwt").String(), nil) + cmdx.Must(err, "%s", err) + req.Header.Set("Authorization", "Bearer "+token) + res, err := http.DefaultClient.Do(req) + cmdx.Must(err, "%s", err) + defer res.Body.Close() + body, err := ioutil.ReadAll(res.Body) + cmdx.Must(err, "%s", err) + return res, string(body) +}