What's Changed

• Fixed RP metadata name from request_object_alg_values_supported to request_object_signing_alg_values_supported
• Bump github.com/coreos/go-oidc/v3 from 3.16.0 to 3.17.0 by @dependabot[bot] in #56
• Bump github.com/go-resty/resty/v2 from 2.16.5 to 2.17.0 by @dependabot[bot] in #57
• Bump github.com/redis/go-redis/v9 from 9.17.0 to 9.17.1 by @dependabot[bot] in #58
• Bump golang.org/x/oauth2 from 0.33.0 to 0.34.0 by @dependabot[bot] in #61
• Bump github.com/redis/go-redis/v9 from 9.17.1 to 9.17.2 by @dependabot[bot] in #59
• Bump github.com/lestrrat-go/jwx/v3 from 3.0.12 to 3.0.13 by @dependabot[bot] in #65
• Bump github.com/gofiber/utils from 1.1.0 to 1.2.0 by @dependabot[bot] in #62
• Bump github.com/go-resty/resty/v2 from 2.17.0 to 2.17.1 by @dependabot[bot] in #63
• Bump github.com/valyala/fasthttp from 1.68.0 to 1.69.0 by @dependabot[bot] in #64

Full Changelog: v0.4.2...v0.4.3

What's Changed

• Bump golang.org/x/crypto from 0.44.0 to 0.45.0 by @dependabot[bot] in #54
• Bump github.com/redis/go-redis/v9 from 9.16.0 to 9.17.0 by @dependabot[bot] in #55
• Bump lib to 0.8.4

Full Changelog: v0.4.1...v0.4.2

This updates the go-oidfed lib to 0.8.3

Changes

• Upgraded dependencies
• Upgraded oidfed lib to 0.8.1
• Added support for requiring OPs to have certain trust marks.
• Added multi-platform docker builds

• Fixed a config check

• OFFA now obtains user attributes from userinfo (in addition to from the id token)
• Added support for thiss.js (seamless access) for discovery
• Added support for explicit client registration (kind of experimental)
• Some smaller enhancements
• Updated dependencies

What's Changed

• Updated dependencies
• Informational Metadata is copied to federation_entity
• Docker container now stops gracefully
• Allow configuring the network address to which OFFA binds.
• Log real client IP; (header is configurable)

This is the 0.2.0 release for OFFA.

It seems to be the first official release, but OFFA was in use before so I try to list the differences since the last well I don't know not-release.

Here is what recently changed:

• The Entity Configuration lifetime is now configurable
• Improved config format for durations (e.g. entity configuration lifetime)
  • Incompatible change for federation.entity_collection_interval. This was previously given in minutes. If only a number is given, this will now be interpreted as a number of seconds. However, a small number should result in an error. To keep your existing config just append m to the number.
• Support for signing key rotation and other signing algorithms than ES512
  • Config Change: signing now has it's own config section, see https://go-oidfed.github.io/offa/config/signing/
• OFFA now offers a default landing page (/) that will show information about the user. This allows OFFA to serve as a dummy RP.
• Improved OP selection including search box
• Added possibility to forward all OIDC claims as HTTP headers by defining a prefix without the need to list everything explicitly.
• Improved support to set Entity Configuration metadata.
• Improved login url to be compliant with third party initiated login from OIDC core.