github pomerium/pomerium v0.25.0
on GitHub

latest releases: v0.25.2, v0.25.1
3 months ago

v0.25.0 Changes

Breaking

Changes that are expected to cause an incompatibility.

New

  • Initial support for the Pomerium Zero closed beta is included in this release.
  • authenticate: Refactoring identity authenticators to initiate redirect. For AWS Cognito, please allow the following sign out https://{AUTHENTICATE_DOMAIN}/.pomerium/signed_out URL. See more details in #4858 by @calebdoxsey.

Fixes

  • config: add support for maps in environments, i.e. env IDP_REQUEST_PARAMS='{"x":"y"}' ... by @calebdoxsey in #4717
  • core: fix graceful stop by @calebdoxsey in #4865
  • databroker: prevent nil data in the databroker deleted records by @wasaga in #4736
  • databroker: fix nil data unmarshal by @calebdoxsey in #4734
  • databroker: hijack connections for notification listeners by @calebdoxsey in #4806
  • databroker: REDIS backend has been removed in the previous release, #4768 by @calebdoxsey cleans up some remaining references.
  • databroker: fix Patch() error handling for in-memory databroker backend by @kenjenkins in #4838
  • envoy: Rewrite the remove_pomerium_cookie lua function to handle = inside of cookie values. by @calebdoxsey in #4641
  • metrics: enforce text/plain metric format by @kenjenkins in #4774
  • zero: group funcs that need run within a lease by @wasaga in #4862

Changed

  • authenticate: Update the initialization logic for the authenticate, authorize, and proxy services to automatically select between the stateful authentication flow and the stateless authentication flow, depending on whether Pomerium is configured to use the hosted authenticate service. This change ensures a single IdP session is maintained for all user visits, enabling a single sign out behaviour for installations with IdP configured. @kenjenkins in #4765
  • authenticate: move events.go out of internal/authenticateflow by @kenjenkins in #4852
  • authenticate: remove extra UpdateUserInfo() call by @kenjenkins in #4813
  • authenticate: getUserInfoData() cleanup by @kenjenkins in #4818
  • authenticate: move stateless flow logic by @kenjenkins in #4820
  • authenticate: move logAuthenticateEvent by @kenjenkins in #4821
  • authenticate: add stateful flow by @kenjenkins in #4822
  • authenticate: change how sessions are deleted by @kenjenkins in #4893
  • authenticate: verify redirect in Callback test by @kenjenkins in #4894
  • config: remove unnecessary authenticate route when using hosted authenticate (authenticate.pomerium.app) by @calebdoxsey in #4719
  • config: Add a global config option for pass_identity_headers, in addition to existing per-route option by @calebdoxsey in #4720
  • config: disable strict-transport-security header with staging autocert by @calebdoxsey in #4741
  • config: no longer stub out HPKE public key fetch by @kenjenkins in #4853
  • runtime: update to Go 1.21.4 by @kenjenkins in #4770
  • runtime: automatically determine goroutine max cap by @calebdoxsey in #4766
  • session: add unit tests for gRPC wrapper methods by @kenjenkins in #4713
  • tests: renew test certs by @kenjenkins in #4738
  • tests: add tool for renewing test certs by @kenjenkins in #4742
  • tests: re-generate test configurations by @kenjenkins in #4816
  • tests: check for profile cookies by @kenjenkins in #4847
  • zero: rebase and merge feature/zero branch by @kenjenkins in #4745
  • zero: fix restart behavior by @kenjenkins in #4753
  • zero: use os.UserCacheDir for boostrap config path by @kenjenkins in #4744
  • zero: better code reuse by @wasaga in #4758
  • zero: set drwx------ for cache dir by @wasaga in #4764
  • zero: support gzipped blobs by @wasaga in #4767
  • zero: add linear probabilistic counter for MAU estimation by @wasaga in #4776
  • zero: use production urls by default by @wasaga in #4814
  • zero: add more verbose logging about background control loops by @wasaga in #4815
  • zero: calculate DAU and MAU by @wasaga in #4810
  • zero: add reporter by @wasaga in #4855
  • zero: add support for managed mode from config file by @calebdoxsey in #4756

Dependency Updates

Check out latest releases or
releases around pomerium/pomerium v0.25.0

Don't miss a new pomerium release

NewReleases is sending notifications on new releases.

Get notifications