Releases: primait/bridge.rs
Releases · primait/bridge.rs
0.20.0
0.19.0
0.18.0
0.17.0
0.16.7
0.16.6
Removed
- The library no longer validates tokens after recieving them from auth0
This was unneccessary, already wasn't done in some code paths, and as a bonus let us remove a dependency.
Changed
- When first creating the client if bridge.rs fails to decrypt a cached token a warning will be logged, and a new token will be fetched
This behavior matches what happens when a token is automatically refreshed during the applications runtime, and should help address issues that might come up in the future.
- The cache key now contains a cache version, allowing it's schema to be updated in the future
From now on cache keys will use the following format:
auth0rs_tokens:{caller}:{token_version}:{audience}"
eg.
auth0rs_tokens:wingman:2:galactus"
Commits
- [PLATFORM-2239]: Fix backward incompatibility with previous bridge.rs versions (#167) by MaeIsBad
0.16.5
Security
- Switched to using XChaCha20Poly1305 for the redis token cache encryption.
This addresses a few medium severity security issues with the tokens.
Note that this means that this, and future versions of the library cannot be used at the same time as older verisons.
Commits
- Bump (#165) by MaeIsBad
- [PLATFORM-1854]: Fix encryption (#164) by MaeIsBad
0.16.4
Added
- Support for opentelemetry 0.23, now the default version.
tracing_opentelemetry_0_23
feature
Commits
0.16.3
Fixed
- The authority server successful response might not include the
scope
field, that is now optional.
Commits
- [PLATFORM-1763]: Scope should be optional (#160) by Simone Cottini