OFFA 0.4.8

• Fixed a problem with the essential metadata policy and array claims
• fixed a bug that prevented creation of oidc signing keys

OFFA 0.4.7

• Publish trust anchors in entity configuration

OFFA 0.4.6

What's Changed

• Bump github.com/go-oidfed/lib from 0.10.4 to 0.10.8
• Bump github.com/valyala/fasthttp from 1.70.0 to 1.71.0
• Bump github.com/lestrrat-go/jwx/v3 from 3.1.0 to 3.1.1
• add publish_informational_claims_in_federation_entity config option to allow configuration whether information metadata claims should be copied from RP to federation_entity or not.
• add extra_fe_metadata support to customize federation_entity metadata

Full Changelog: v0.4.5...v0.4.6

OFFA 0.4.5

What's Changed

• Bump github.com/go-oidfed/lib from 0.10.3 to 0.10.4 by @dependabot[bot] in #87
• Bump github.com/redis/go-redis/v9 from 9.18.0 to 9.19.0 by @dependabot[bot] in #86

Full Changelog: v0.4.4...v0.4.5

OFFA 0.4.4

🚀 Features & Enhancements

• Upgraded go-oidfed/lib to v0.10.3, which includes changes to singing key storage and (very small) configuration
• Automatic migration of legacy key formats to the new storage structure.

🐛 Bug Fixes

• Updated helmet middleware configuration to set CrossOriginEmbedderPolicy=unsafe-none (fixes #82).
• Fixed integer precision loss in the log output of UserClaims (fixes #67).

📦 Dependency Updates

• Bumped go-oidfed/lib to v0.10.3
• Bumped github.com/gofiber/fiber/v2 to 2.52.12
• Bumped github.com/redis/go-redis/v9 to 9.18.0
• Bumped github.com/go-jose/go-jose/v4 to 4.1.4
• Bumped github.com/valyala/fasthttp to 1.70.0
• Bumped github.com/coreos/go-oidc/v3 to 3.18.0
• Bumped github.com/lestrrat-go/jwx/v3 to 3.1.0
• Bumped github.com/go-resty/resty/v2 to 2.17.2
• Bumped golang.org/x/oauth2 to 0.35.0
• Bumped github.com/sirupsen/logrus to 1.9.4

OFFA 0.4.3

What's Changed

• Fixed RP metadata name from request_object_alg_values_supported to request_object_signing_alg_values_supported
• Bump github.com/coreos/go-oidc/v3 from 3.16.0 to 3.17.0 by @dependabot[bot] in #56
• Bump github.com/go-resty/resty/v2 from 2.16.5 to 2.17.0 by @dependabot[bot] in #57
• Bump github.com/redis/go-redis/v9 from 9.17.0 to 9.17.1 by @dependabot[bot] in #58
• Bump golang.org/x/oauth2 from 0.33.0 to 0.34.0 by @dependabot[bot] in #61
• Bump github.com/redis/go-redis/v9 from 9.17.1 to 9.17.2 by @dependabot[bot] in #59
• Bump github.com/lestrrat-go/jwx/v3 from 3.0.12 to 3.0.13 by @dependabot[bot] in #65
• Bump github.com/gofiber/utils from 1.1.0 to 1.2.0 by @dependabot[bot] in #62
• Bump github.com/go-resty/resty/v2 from 2.17.0 to 2.17.1 by @dependabot[bot] in #63
• Bump github.com/valyala/fasthttp from 1.68.0 to 1.69.0 by @dependabot[bot] in #64

Full Changelog: v0.4.2...v0.4.3

OFFA 0.4.2

What's Changed

• Bump golang.org/x/crypto from 0.44.0 to 0.45.0 by @dependabot[bot] in #54
• Bump github.com/redis/go-redis/v9 from 9.16.0 to 9.17.0 by @dependabot[bot] in #55
• Bump lib to 0.8.4

Full Changelog: v0.4.1...v0.4.2

OFFA 0.4.1

This updates the go-oidfed lib to 0.8.3

OFFA 0.4.0

Changes

• Upgraded dependencies
• Upgraded oidfed lib to 0.8.1
• Added support for requiring OPs to have certain trust marks.
• Added multi-platform docker builds

OFFA 0.3.1

• Fixed a config check