Skip to content

Latest commit

 

History

History
170 lines (120 loc) · 6.64 KB

CHANGELOG.md

File metadata and controls

170 lines (120 loc) · 6.64 KB
Raw

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

Unreleased

v0.4.14

  • Update configs and documentation for the introduction of OTLP in Candlelight #137
  • Correct Bad Usage of LoggerIn that broke Themis #136

v0.4.13

  • Disable TLS 1.0 and 1.1 by default. Configuration can reenable.
  • Disable ciphers vulnerable to SWEET32.

v0.4.12

v0.4.11

  • Remove several unused build files and update the docker images to work. #122

v0.4.10

  • Update dependencies.
  • Fix the docker container so it has configuration in the right place.

v0.4.9

  • Patch failing docker image, fix linter issues, fix breaking unit tests & changes #104

v0.4.8

  • Migrated to github.com/golang-jwt/jwt to address a security vulnerability. #78
  • Updated spec file and rpkg version macro to be able to choose when the 'v' is included in the version. #80
  • Updated transport.go to send a 400 error if there is an issue parsing the URL. #47
  • Allow any peer certificate to pass validation, instead of requiring all of them to pass. #91

v0.4.7

  • Migrate to github actions, normalize analysis tools, Dockerfiles and Makefiles. #67
  • Add optional OpenTelemetry tracing feature. #75

v0.4.6

Fixed

  • Update RPM .spec file so copr builds succeed. #65

v0.4.5

  • Refactor configuration to preserve case in claims. #63

Changed

  • Update mentions of the default branch from 'master' to 'main'. #58

v0.4.4

  • remove extra rpm config files #43
  • add JWK support #48
  • add pprof support #50
  • add content negotation for /keys #53

v0.4.3

  • fix rpm spec file for epel 8 #42

v0.4.2

  • fix rpm spec file, fix changelog formatting #41

v0.4.1

  • added docker automation
  • updated release pipeline to use travis
  • added specialized partner id logic #40

v0.4.0

  • Removed the required option for claims and metadata obtained from HTTP requests

v0.3.2

  • Add versioning to themis binaries

v0.3.1

  • Added a custom xhttpserver.Listener type
  • Added MaxConcurrentRequests enforcement driven by configuration
  • ConstantHandler for static HTTP transaction responses
  • Busy decorator for enforcing MaxConcurrentRequests

v0.3.0

  • Allow metrics and health servers to be disabled
  • Allow only a claims server to be configured
  • Require an issuer server if a keys server is configured, and vice versa

v0.2.1

  • Use metrics namespace from config

v0.2.0

  • added configurable and application-injectable peer verification for MTLS

v0.1.1

  • Use new paths for systemd start

v0.1.0

  • Added logic to create RPMs per themis running mode

v0.0.3

  • updated Makefile
  • updated conf directory
  • Refactored config and xlog packages to remove some magic and makes things more obvious
  • Allow named HTTP client components
  • Simplify HTTP client/server component providers

v0.0.2

  • Fixed issues with building themis as a module

v0.0.1

  • Rename from xmidt-issuer to themis to follow the naming convention
  • Dev mode
  • Uber/fx style provders
  • MTLS support
  • Remote claims support
  • Request logging
  • Integrated server logging
  • Full support for claims specified in requests
  • Optional claims server that simply returns a JSON payload of the claims
  • Time-based claims can be disabled
  • Both the issue and claims servers can be disabled
  • Integrated health via InvisionApp/go-health
  • Converted to a go module: github.com/xmidt-org/themis