Releases: primait/bridge.rs
0.18.0
0.17.0
0.16.7
0.16.6
Removed
- The library no longer validates tokens after recieving them from auth0
This was unneccessary, already wasn't done in some code paths, and as a bonus let us remove a dependency.
Changed
- When first creating the client if bridge.rs fails to decrypt a cached token a warning will be logged, and a new token will be fetched
This behavior matches what happens when a token is automatically refreshed during the applications runtime, and should help address issues that might come up in the future.
- The cache key now contains a cache version, allowing it's schema to be updated in the future
From now on cache keys will use the following format:
auth0rs_tokens:{caller}:{token_version}:{audience}"
eg.
auth0rs_tokens:wingman:2:galactus"
Commits
- [PLATFORM-2239]: Fix backward incompatibility with previous bridge.rs versions (#167) by MaeIsBad
0.16.5
Security
- Switched to using XChaCha20Poly1305 for the redis token cache encryption.
This addresses a few medium severity security issues with the tokens.
Note that this means that this, and future versions of the library cannot be used at the same time as older verisons.
Commits
- Bump (#165) by MaeIsBad
- [PLATFORM-1854]: Fix encryption (#164) by MaeIsBad
0.16.4
Added
- Support for opentelemetry 0.23, now the default version.
tracing_opentelemetry_0_23
feature
Commits
0.16.3
Fixed
- The authority server successful response might not include the
scope
field, that is now optional.
Commits
- [PLATFORM-1763]: Scope should be optional (#160) by Simone Cottini
0.16.2
0.16.1
Changed
- Added jwks_client_rs instead of reimplemnting it's functionality
- Updated reqwest to 0.12, reqwest-middleware to 0.3 and http to 1.0
Commits
- Prep release (#158) by MaeIsBad
- Update reqwest-middleware requirement from 0.2.3 to 0.3.0 (#157) by dependabot[bot]
- [PLATFORM-1400]: Include jwks_client in bridge.rs (#153) by Simone Cottini
0.16.0
Added
- Support for opentelemetry 0.21
tracing_opentelemetry_0_20
andtracing_opentelemetry_0_21
featurestracing_opentelemetry
is now an alias for the latest version of otel(sotracing_opentelemetry_0_21
)
Opentelemetry 0.20 support can be enabled by enabling the tracing_opentelemetry_0_20
feature instead of tracing_opentelemetry.
We are going to support at least the last 3 versions of opentelemetry. After that we mightremove support for older otel version without it being a breaking change.
Commits
- [PLATFORM-1473] Support opentelemetry 0.21 (#154) by MaeIsBad
- Update cargo.toml version (#148) by Simone Cottini
- Fix release (#147) by Simone Cottini
- [PLATFORM-1372]: Migrate bridge.rs to GHA (#145) by Simone Cottini