diff --git a/CHANGELOG.md b/CHANGELOG.md index d93642a1f37..cff66d6c99b 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -166,10 +166,15 @@ **Fixed bugs:** +- CORS allowed\_origins not working as expected [\#1615](https://github.com/ory/hydra/issues/1615) - ci: Resolve broken github\_changelog\_generator task [\#1609](https://github.com/ory/hydra/pull/1609) ([aeneasr](https://github.com/aeneasr)) **Closed issues:** +- Client authentication failed due to password contains character "+" [\#1622](https://github.com/ory/hydra/issues/1622) +- Using Discovery in combination with ory deploy documentation [\#1620](https://github.com/ory/hydra/issues/1620) +- Support for OAuth2 Dynamic Client Registration RFC \(7591, 7592\) [\#1616](https://github.com/ory/hydra/issues/1616) +- Examples of use with SPA [\#1614](https://github.com/ory/hydra/issues/1614) - Does Hydra has metric or statistics interface? [\#1607](https://github.com/ory/hydra/issues/1607) - Need return login\_challenge with body instead of in Location header and redirect. [\#1604](https://github.com/ory/hydra/issues/1604) - Remove OAuth 2.0 Dynamic Client Registration links from README [\#1601](https://github.com/ory/hydra/issues/1601) @@ -181,7 +186,9 @@ **Merged pull requests:** +- Using glob \*\* pattern in order to match partial wildcard with protoco… [\#1624](https://github.com/ory/hydra/pull/1624) ([Aterocana](https://github.com/Aterocana)) - Correct alias in OAuth2 scopes documentation [\#1613](https://github.com/ory/hydra/pull/1613) ([slashmo](https://github.com/slashmo)) +- Update README.md [\#1612](https://github.com/ory/hydra/pull/1612) ([TilmanTheile](https://github.com/TilmanTheile)) - Update README.md [\#1611](https://github.com/ory/hydra/pull/1611) ([TilmanTheile](https://github.com/TilmanTheile)) - Build\(deps\): Bump jackson-version from 2.8.9 to 2.10.0 in /sdk/java/hydra-client-resttemplate [\#1608](https://github.com/ory/hydra/pull/1608) ([dependabot[bot]](https://github.com/apps/dependabot)) - Updated README.md file [\#1606](https://github.com/ory/hydra/pull/1606) ([nishanth2143](https://github.com/nishanth2143)) @@ -281,7 +288,6 @@ - Add quickstart for prometheus. [\#1562](https://github.com/ory/hydra/pull/1562) ([genchilu](https://github.com/genchilu)) - chore: remove confusing dsn setting value [\#1556](https://github.com/ory/hydra/pull/1556) ([cpwc](https://github.com/cpwc)) - develop: Makes init task in makefile and corrects readme [\#1555](https://github.com/ory/hydra/pull/1555) ([solodynamo](https://github.com/solodynamo)) -- Update README.md [\#1549](https://github.com/ory/hydra/pull/1549) ([woojtek](https://github.com/woojtek)) ## [v1.0.1](https://github.com/ory/hydra/tree/v1.0.1) (2019-09-04) [Full Changelog](https://github.com/ory/hydra/compare/v1.0.0...v1.0.1) @@ -323,6 +329,7 @@ - driver: Fix RP-Initiated Logout trailing slash bug [\#1552](https://github.com/ory/hydra/pull/1552) ([solodynamo](https://github.com/solodynamo)) - SDK: enrich oauth2\_token\_response and params [\#1551](https://github.com/ory/hydra/pull/1551) ([tyaps](https://github.com/tyaps)) +- Update README.md [\#1549](https://github.com/ory/hydra/pull/1549) ([woojtek](https://github.com/woojtek)) - Build\(deps\): Bump mixin-deep from 1.3.1 to 1.3.2 in /test/e2e/oauth2-client [\#1548](https://github.com/ory/hydra/pull/1548) ([dependabot[bot]](https://github.com/apps/dependabot)) - Remove stray fmt.Printf [\#1547](https://github.com/ory/hydra/pull/1547) ([aeneasr](https://github.com/aeneasr)) - Build\(deps\): Bump eslint-utils from 1.3.1 to 1.4.2 [\#1544](https://github.com/ory/hydra/pull/1544) ([dependabot[bot]](https://github.com/apps/dependabot)) @@ -340,6 +347,7 @@ - docs: Updates issue and pull request templates [\#1513](https://github.com/ory/hydra/pull/1513) ([aeneasr](https://github.com/aeneasr)) - Build\(deps\): Bump jackson-version from 2.8.9 to 2.10.0.pr1 in /sdk/java/hydra-client-resttemplate [\#1505](https://github.com/ory/hydra/pull/1505) ([dependabot[bot]](https://github.com/apps/dependabot)) - docs: Updates issue and pull request templates [\#1500](https://github.com/ory/hydra/pull/1500) ([aeneasr](https://github.com/aeneasr)) +- Improve OAuth2 API Docs [\#1499](https://github.com/ory/hydra/pull/1499) ([aeneasr](https://github.com/aeneasr)) - Fix wrong command name [\#1496](https://github.com/ory/hydra/pull/1496) ([shankardevy](https://github.com/shankardevy)) - cmd: Print meaningful error messages on network issues [\#1493](https://github.com/ory/hydra/pull/1493) ([aeneasr](https://github.com/aeneasr)) - Build\(deps\): Bump lodash from 4.17.11 to 4.17.14 in /test/e2e/oauth2-client [\#1491](https://github.com/ory/hydra/pull/1491) ([dependabot[bot]](https://github.com/apps/dependabot)) @@ -411,7 +419,6 @@ **Merged pull requests:** -- Improve OAuth2 API Docs [\#1499](https://github.com/ory/hydra/pull/1499) ([aeneasr](https://github.com/aeneasr)) - jwk: Fix memory mamager of JWK deletion [\#1474](https://github.com/ory/hydra/pull/1474) ([sawadashota](https://github.com/sawadashota)) - cmd: Add missing html closing tag to token user [\#1479](https://github.com/ory/hydra/pull/1479) ([aeneasr](https://github.com/aeneasr)) - sdk: Fix missing and broken swagger annotations [\#1440](https://github.com/ory/hydra/pull/1440) ([aeneasr](https://github.com/aeneasr)) @@ -560,6 +567,7 @@ - Unable to test silent refresh in local development [\#1364](https://github.com/ory/hydra/issues/1364) - Memory leak with jaeger tracing enabled [\#1363](https://github.com/ory/hydra/issues/1363) - docs: Are refresh tokens introspectable or not? [\#1250](https://github.com/ory/hydra/issues/1250) +- sdk: add oauthapi functions to golang interface [\#991](https://github.com/ory/hydra/issues/991) **Merged pull requests:** @@ -708,6 +716,7 @@ - Fix disable-telemetry check [\#1258](https://github.com/ory/hydra/pull/1258) ([jtescher](https://github.com/jtescher)) - fix token flush CLI description [\#1251](https://github.com/ory/hydra/pull/1251) ([sawadashota](https://github.com/sawadashota)) - Enable to validate by old system secret [\#1249](https://github.com/ory/hydra/pull/1249) ([sawadashota](https://github.com/sawadashota)) +- fix error message of too short NEW\_SYSTEM\_SECRET [\#1248](https://github.com/ory/hydra/pull/1248) ([sawadashota](https://github.com/sawadashota)) ## [v1.0.0-rc.6+oryOS.10](https://github.com/ory/hydra/tree/v1.0.0-rc.6+oryOS.10) (2018-12-18) [Full Changelog](https://github.com/ory/hydra/compare/v1.0.0-rc.5+oryOS.10...v1.0.0-rc.6+oryOS.10) @@ -752,12 +761,10 @@ **Implemented enhancements:** - client: Track when clients are created [\#1120](https://github.com/ory/hydra/issues/1120) -- client: Add created/updated at fields [\#1207](https://github.com/ory/hydra/pull/1207) ([aeneasr](https://github.com/aeneasr)) **Fixed bugs:** - Unable to return consent sessions for a user [\#1203](https://github.com/ory/hydra/issues/1203) -- oauth2: Tables oidc, code, openid, refresh are missing indices [\#1140](https://github.com/ory/hydra/issues/1140) - consent: Show all granted consent requests [\#1206](https://github.com/ory/hydra/pull/1206) ([aeneasr](https://github.com/aeneasr)) **Closed issues:** @@ -775,7 +782,6 @@ **Merged pull requests:** -- fix error message of too short NEW\_SYSTEM\_SECRET [\#1248](https://github.com/ory/hydra/pull/1248) ([sawadashota](https://github.com/sawadashota)) - sql: Remove superuser requirements from postgres migrations [\#1226](https://github.com/ory/hydra/pull/1226) ([aeneasr](https://github.com/aeneasr)) - docker: Remove dep from build chain [\#1217](https://github.com/ory/hydra/pull/1217) ([aeneasr](https://github.com/aeneasr)) - docs: Fix broken links [\#1216](https://github.com/ory/hydra/pull/1216) ([aeneasr](https://github.com/aeneasr)) @@ -788,6 +794,10 @@ ## [v1.0.0-rc.3+oryOS.9](https://github.com/ory/hydra/tree/v1.0.0-rc.3+oryOS.9) (2018-12-06) [Full Changelog](https://github.com/ory/hydra/compare/v1.0.0-rc.2+oryOS.9...v1.0.0-rc.3+oryOS.9) +**Implemented enhancements:** + +- client: Add created/updated at fields [\#1207](https://github.com/ory/hydra/pull/1207) ([aeneasr](https://github.com/aeneasr)) + **Closed issues:** - PHP-SDK: Composer autoloading broken [\#1199](https://github.com/ory/hydra/issues/1199) @@ -798,18 +808,15 @@ - oauth2: Use html templates in fallback endpoints [\#1202](https://github.com/ory/hydra/pull/1202) ([aeneasr](https://github.com/aeneasr)) - Fix \#1199: Generated composer autoloader non-functional [\#1200](https://github.com/ory/hydra/pull/1200) ([Takuto88](https://github.com/Takuto88)) - Migrate links from old docs to new docs [\#1197](https://github.com/ory/hydra/pull/1197) ([techthumb](https://github.com/techthumb)) -- Fixed tutorial link in README.md [\#1193](https://github.com/ory/hydra/pull/1193) ([jimmystridh](https://github.com/jimmystridh)) - setup: add instructions for updating the `hydra-migrate` service to use mysql instead of postgres [\#1192](https://github.com/ory/hydra/pull/1192) ([aaslamin](https://github.com/aaslamin)) - client: rename grant type authorize\_code to authorization\_code [\#1191](https://github.com/ory/hydra/pull/1191) ([sjkaliski](https://github.com/sjkaliski)) - refactoring [\#1190](https://github.com/ory/hydra/pull/1190) ([RikiyaFujii](https://github.com/RikiyaFujii)) +- Remove duplicated refresh token section [\#1188](https://github.com/ory/hydra/pull/1188) ([condemil](https://github.com/condemil)) +- sql: Resolve beta.9 -\> rc.1 migration issue [\#1186](https://github.com/ory/hydra/pull/1186) ([aeneasr](https://github.com/aeneasr)) ## [v1.0.0-rc.2+oryOS.9](https://github.com/ory/hydra/tree/v1.0.0-rc.2+oryOS.9) (2018-11-21) [Full Changelog](https://github.com/ory/hydra/compare/v1.0.0-rc.1+oryOS.9...v1.0.0-rc.2+oryOS.9) -**Merged pull requests:** - -- sql: Resolve beta.9 -\> rc.1 migration issue [\#1186](https://github.com/ory/hydra/pull/1186) ([aeneasr](https://github.com/aeneasr)) - ## [v1.0.0-rc.1+oryOS.9](https://github.com/ory/hydra/tree/v1.0.0-rc.1+oryOS.9) (2018-11-21) [Full Changelog](https://github.com/ory/hydra/compare/v1.0.0-beta.9...v1.0.0-rc.1+oryOS.9) @@ -825,6 +832,7 @@ - cmd/server: Export useful bootstrap function [\#973](https://github.com/ory/hydra/issues/973) - sdk: C\# language SDK [\#958](https://github.com/ory/hydra/issues/958) - Opentracing tracing integration [\#931](https://github.com/ory/hydra/issues/931) +- consent: Add ability to specify Access Token Audience [\#883](https://github.com/ory/hydra/issues/883) - Prepare v1.0.0-rc.1 release [\#1175](https://github.com/ory/hydra/pull/1175) ([aeneasr](https://github.com/aeneasr)) - vendor: Update fosite to 0.27.3 [\#1164](https://github.com/ory/hydra/pull/1164) ([aeneasr](https://github.com/aeneasr)) - sdk: Document userinfo as GET instead of POST [\#1161](https://github.com/ory/hydra/pull/1161) ([aeneasr](https://github.com/aeneasr)) @@ -841,6 +849,7 @@ - consent: Require proof of authentication before ending user session [\#1154](https://github.com/ory/hydra/issues/1154) - oauth2: Audience is potentially not being refreshed [\#1153](https://github.com/ory/hydra/issues/1153) - Hydra shut down after a race condition [\#1141](https://github.com/ory/hydra/issues/1141) +- oauth2: Tables oidc, code, openid, refresh are missing indices [\#1140](https://github.com/ory/hydra/issues/1140) - consent: SQL field `subject\_obfuscated` does not have an index [\#1138](https://github.com/ory/hydra/issues/1138) - Setting up a fresh hydra installation results in panic [\#1137](https://github.com/ory/hydra/issues/1137) - Copy-paste error in manager\_0\_sql\_migrations\_test.go [\#1135](https://github.com/ory/hydra/issues/1135) @@ -914,7 +923,7 @@ **Merged pull requests:** -- Remove duplicated refresh token section [\#1188](https://github.com/ory/hydra/pull/1188) ([condemil](https://github.com/condemil)) +- Fixed tutorial link in README.md [\#1193](https://github.com/ory/hydra/pull/1193) ([jimmystridh](https://github.com/jimmystridh)) - More e2e tests [\#1184](https://github.com/ory/hydra/pull/1184) ([aeneasr](https://github.com/aeneasr)) - fix migrate sql command at upgrading guide [\#1183](https://github.com/ory/hydra/pull/1183) ([sawadashota](https://github.com/sawadashota)) - rc.1 release preparations [\#1182](https://github.com/ory/hydra/pull/1182) ([aeneasr](https://github.com/aeneasr)) @@ -1004,7 +1013,7 @@ - cmd: Replace cors fork with upstream [\#1010](https://github.com/ory/hydra/issues/1010) - Auth State mismatch. URL Double Encoding [\#1005](https://github.com/ory/hydra/issues/1005) - Can not remember consent because no user interaction was required with resp\['skip'\] false [\#999](https://github.com/ory/hydra/issues/999) -- sdk: add oauthapi functions to golang interface [\#991](https://github.com/ory/hydra/issues/991) +- invalid if condition about SubjectTypesSupport [\#992](https://github.com/ory/hydra/issues/992) - After redirecting from consent -- runtime error: invalid memory address or nil pointer dereference [\#988](https://github.com/ory/hydra/issues/988) **Merged pull requests:** @@ -1058,7 +1067,6 @@ **Closed issues:** -- invalid if condition about SubjectTypesSupport [\#992](https://github.com/ory/hydra/issues/992) - Refresh token and access token share same lifetime [\#955](https://github.com/ory/hydra/issues/955) - Id\_token\_hint doesn't work as expected [\#951](https://github.com/ory/hydra/issues/951) - consent: Check if helper rejects unknown JSON fields [\#940](https://github.com/ory/hydra/issues/940) @@ -1202,7 +1210,6 @@ - oauth2: Revoke tokens when performing refreshing grant [\#889](https://github.com/ory/hydra/issues/889) - docs: Explicitly document in upgrade guide that hydra is no longer protected by default [\#888](https://github.com/ory/hydra/issues/888) -- consent: Add ability to specify Access Token Audience [\#883](https://github.com/ory/hydra/issues/883) - consent: Investigate if prompt=none should be allowed with implicit flows [\#866](https://github.com/ory/hydra/issues/866) - consent: Implement login\_hint capabilities [\#860](https://github.com/ory/hydra/issues/860) - consent: Always remove session if rememberLogin=false [\#859](https://github.com/ory/hydra/issues/859) @@ -1281,7 +1288,6 @@ - docs: add subject + id mocks in the policy section of the swagger specs for each endpoint [\#614](https://github.com/ory/hydra/issues/614) - docs: /warden/allowed do not fully specify security parameters [\#565](https://github.com/ory/hydra/issues/565) - docs: explain oauth2 better [\#356](https://github.com/ory/hydra/issues/356) -- docs: have a "running hydra in production" section [\#354](https://github.com/ory/hydra/issues/354) - docs: clarify that the consent app is responsible for implementing full OIDC [\#353](https://github.com/ory/hydra/issues/353) - docs: add auth0 seminar to docs [\#347](https://github.com/ory/hydra/issues/347) - docs: add bug bounty section to readme [\#84](https://github.com/ory/hydra/issues/84) @@ -1377,7 +1383,6 @@ - sdk: add python sdk [\#639](https://github.com/ory/hydra/issues/639) - oauth2: Forces UTC in consent strategy [\#775](https://github.com/ory/hydra/pull/775) ([aeneasr](https://github.com/aeneasr)) - client: Introduces pagination to client management [\#774](https://github.com/ory/hydra/pull/774) ([aeneasr](https://github.com/aeneasr)) -- oauth2: Adds support for PKCE \(IETF RFC7636\) [\#769](https://github.com/ory/hydra/pull/769) ([aeneasr](https://github.com/aeneasr)) **Fixed bugs:** @@ -1411,15 +1416,14 @@ - metrics: Improve metrics endpoint [\#742](https://github.com/ory/hydra/issues/742) - oauth2: Add ability to purge old access tokens [\#738](https://github.com/ory/hydra/issues/738) - jwk: refactor jwk id generation [\#589](https://github.com/ory/hydra/issues/589) +- oauth2: Adds support for PKCE \(IETF RFC7636\) [\#769](https://github.com/ory/hydra/pull/769) ([aeneasr](https://github.com/aeneasr)) - Forces unique JWK IDs and allows anonymous access to ./well-known/jwks.json [\#762](https://github.com/ory/hydra/pull/762) ([aeneasr](https://github.com/aeneasr)) -- cmd: Adds a dedicated command for importing policies [\#709](https://github.com/ory/hydra/pull/709) ([aeneasr](https://github.com/aeneasr)) **Fixed bugs:** - Do not show client secret when client is public in CLI [\#737](https://github.com/ory/hydra/issues/737) - oauth2: Client secret error message should be shown on creation [\#725](https://github.com/ory/hydra/issues/725) - sdk: Resolves composer license complaint [\#763](https://github.com/ory/hydra/pull/763) ([aeneasr](https://github.com/aeneasr)) -- health: Stop requiring x-forwarded-proto [\#731](https://github.com/ory/hydra/pull/731) ([aeneasr](https://github.com/aeneasr)) **Closed issues:** @@ -1460,6 +1464,10 @@ - client: Returns 404 only when policy allows getting a client [\#751](https://github.com/ory/hydra/pull/751) ([aeneasr](https://github.com/aeneasr)) +**Merged pull requests:** + +- oauth2: Protects consent flow against session fixation [\#754](https://github.com/ory/hydra/pull/754) ([aeneasr](https://github.com/aeneasr)) + ## [v0.11.1](https://github.com/ory/hydra/tree/v0.11.1) (2018-01-18) [Full Changelog](https://github.com/ory/hydra/compare/v0.11.0...v0.11.1) @@ -1497,6 +1505,7 @@ **Fixed bugs:** - health: Should not require x-forwarded-proto [\#726](https://github.com/ory/hydra/issues/726) +- health: Stop requiring x-forwarded-proto [\#731](https://github.com/ory/hydra/pull/731) ([aeneasr](https://github.com/aeneasr)) **Closed issues:** @@ -1507,7 +1516,6 @@ **Merged pull requests:** -- oauth2: Protects consent flow against session fixation [\#754](https://github.com/ory/hydra/pull/754) ([aeneasr](https://github.com/aeneasr)) - docs: Adds documentation on third-party deps [\#728](https://github.com/ory/hydra/pull/728) ([aeneasr](https://github.com/aeneasr)) ## [v0.10.10](https://github.com/ory/hydra/tree/v0.10.10) (2017-12-16) @@ -1517,6 +1525,7 @@ - Make scopes in `hydra token client` command configurable [\#711](https://github.com/ory/hydra/issues/711) - cmd: Makes scopes in token command configurable [\#712](https://github.com/ory/hydra/pull/712) ([aeneasr](https://github.com/aeneasr)) +- cmd: Adds a dedicated command for importing policies [\#709](https://github.com/ory/hydra/pull/709) ([aeneasr](https://github.com/aeneasr)) **Fixed bugs:** @@ -1533,6 +1542,7 @@ **Merged pull requests:** - docs: Resolves issue with broken 5-minute tutorial [\#721](https://github.com/ory/hydra/pull/721) ([aeneasr](https://github.com/aeneasr)) +- Improves userinfo endpoint [\#714](https://github.com/ory/hydra/pull/714) ([aeneasr](https://github.com/aeneasr)) - groups: Corrects group scope documentation [\#710](https://github.com/ory/hydra/pull/710) ([aeneasr](https://github.com/aeneasr)) ## [v0.10.9](https://github.com/ory/hydra/tree/v0.10.9) (2017-12-13) @@ -1573,7 +1583,6 @@ **Merged pull requests:** -- Improves userinfo endpoint [\#714](https://github.com/ory/hydra/pull/714) ([aeneasr](https://github.com/aeneasr)) - Improves OpenID Connect conformity [\#694](https://github.com/ory/hydra/pull/694) ([aeneasr](https://github.com/aeneasr)) ## [v0.10.5](https://github.com/ory/hydra/tree/v0.10.5) (2017-12-09) @@ -1599,10 +1608,6 @@ ## [v0.10.1](https://github.com/ory/hydra/tree/v0.10.1) (2017-12-08) [Full Changelog](https://github.com/ory/hydra/compare/v0.10.0...v0.10.1) -**Implemented enhancements:** - -- Open source policy naming guidelines [\#680](https://github.com/ory/hydra/issues/680) - **Closed issues:** - docs: docker --link should be replaced by networks [\#555](https://github.com/ory/hydra/issues/555) @@ -1612,6 +1617,7 @@ **Implemented enhancements:** +- Open source policy naming guidelines [\#680](https://github.com/ory/hydra/issues/680) - docs: Improve release and breaking changes management [\#675](https://github.com/ory/hydra/issues/675) - oauth2: Make sub explicit in the database [\#658](https://github.com/ory/hydra/issues/658) - oauth2: Add access control to token introspection endpoint [\#655](https://github.com/ory/hydra/issues/655) @@ -1631,6 +1637,7 @@ - Json logging [\#670](https://github.com/ory/hydra/issues/670) - swagger: scope pattern requires a space [\#661](https://github.com/ory/hydra/issues/661) - docs: Add list of undisclosed adopters with requests ranges to readme [\#659](https://github.com/ory/hydra/issues/659) +- Add license header to all source files [\#643](https://github.com/ory/hydra/issues/643) **Merged pull requests:** @@ -1732,7 +1739,6 @@ **Closed issues:** -- Add license header to all source files [\#643](https://github.com/ory/hydra/issues/643) - warden: remove obsolete http manager [\#616](https://github.com/ory/hydra/issues/616) **Merged pull requests:** @@ -1850,7 +1856,6 @@ - warden: remove deprecated http manager [\#601](https://github.com/ory/hydra/pull/601) ([aeneasr](https://github.com/aeneasr)) - docs: fix sdk links [\#599](https://github.com/ory/hydra/pull/599) ([aeneasr](https://github.com/aeneasr)) - travis: re-add goveralls [\#598](https://github.com/ory/hydra/pull/598) ([aeneasr](https://github.com/aeneasr)) -- travis: fix binary building [\#596](https://github.com/ory/hydra/pull/596) ([aeneasr](https://github.com/aeneasr)) ## [v0.10.0-alpha.1](https://github.com/ory/hydra/tree/v0.10.0-alpha.1) (2017-10-05) [Full Changelog](https://github.com/ory/hydra/compare/v0.9.13...v0.10.0-alpha.1) @@ -1872,6 +1877,7 @@ **Merged pull requests:** +- travis: fix binary building [\#596](https://github.com/ory/hydra/pull/596) ([aeneasr](https://github.com/aeneasr)) - cmd/cli: typo Connection -\> Policy [\#592](https://github.com/ory/hydra/pull/592) ([ljagiello](https://github.com/ljagiello)) - sdk: switch to swagger codegen sdk [\#585](https://github.com/ory/hydra/pull/585) ([aeneasr](https://github.com/aeneasr)) - 0.10.0 [\#557](https://github.com/ory/hydra/pull/557) ([aeneasr](https://github.com/aeneasr)) @@ -1927,6 +1933,7 @@ - warden: refresh tokens are no longer proof of authZ [\#553](https://github.com/ory/hydra/pull/553) ([aeneasr](https://github.com/aeneasr)) - README.md: hydra container doesn't include bash [\#548](https://github.com/ory/hydra/pull/548) ([srenatus](https://github.com/srenatus)) +- docs: fix typo in tutorial [\#547](https://github.com/ory/hydra/pull/547) ([aeneasr](https://github.com/aeneasr)) - cmd/token/user: fix auth and token-url mixup [\#546](https://github.com/ory/hydra/pull/546) ([aeneasr](https://github.com/aeneasr)) - docs: update docs [\#545](https://github.com/ory/hydra/pull/545) ([aeneasr](https://github.com/aeneasr)) @@ -1970,10 +1977,8 @@ **Merged pull requests:** -- docs: fix typo in tutorial [\#547](https://github.com/ory/hydra/pull/547) ([aeneasr](https://github.com/aeneasr)) - cmd: add test for get handler [\#531](https://github.com/ory/hydra/pull/531) ([aeneasr](https://github.com/aeneasr)) - cmd/policy/create: exit on error - closes \#527 [\#530](https://github.com/ory/hydra/pull/530) ([aeneasr](https://github.com/aeneasr)) -- cmd: resolve issuer test issue [\#522](https://github.com/ory/hydra/pull/522) ([aeneasr](https://github.com/aeneasr)) ## [v0.9.8](https://github.com/ory/hydra/tree/v0.9.8) (2017-06-17) [Full Changelog](https://github.com/ory/hydra/compare/v0.9.7...v0.9.8) @@ -2008,6 +2013,7 @@ **Merged pull requests:** - Db plugin connector [\#524](https://github.com/ory/hydra/pull/524) ([aeneasr](https://github.com/aeneasr)) +- docs: start writing faq from gitter [\#504](https://github.com/ory/hydra/pull/504) ([aeneasr](https://github.com/aeneasr)) ## [v0.9.5](https://github.com/ory/hydra/tree/v0.9.5) (2017-06-15) [Full Changelog](https://github.com/ory/hydra/compare/v0.9.4...v0.9.5) @@ -2021,8 +2027,8 @@ **Merged pull requests:** +- cmd: resolve issuer test issue [\#522](https://github.com/ory/hydra/pull/522) ([aeneasr](https://github.com/aeneasr)) - all: improve test exports [\#521](https://github.com/ory/hydra/pull/521) ([aeneasr](https://github.com/aeneasr)) -- docs: start writing faq from gitter [\#504](https://github.com/ory/hydra/pull/504) ([aeneasr](https://github.com/aeneasr)) ## [v0.9.3](https://github.com/ory/hydra/tree/v0.9.3) (2017-06-14) [Full Changelog](https://github.com/ory/hydra/compare/v0.9.2...v0.9.3) @@ -2035,7 +2041,6 @@ **Merged pull requests:** -- metrics: resolve potential data race [\#520](https://github.com/ory/hydra/pull/520) ([aeneasr](https://github.com/aeneasr)) - Fix warden docs [\#519](https://github.com/ory/hydra/pull/519) ([aeneasr](https://github.com/aeneasr)) - all: export test helpers [\#518](https://github.com/ory/hydra/pull/518) ([aeneasr](https://github.com/aeneasr)) - oauth2: add tests for refresh token grant [\#515](https://github.com/ory/hydra/pull/515) ([aeneasr](https://github.com/aeneasr)) @@ -2047,6 +2052,7 @@ **Merged pull requests:** +- metrics: resolve potential data race [\#520](https://github.com/ory/hydra/pull/520) ([aeneasr](https://github.com/aeneasr)) - cmd/server: print full error message on http startup [\#514](https://github.com/ory/hydra/pull/514) ([aeneasr](https://github.com/aeneasr)) ## [v0.9.1](https://github.com/ory/hydra/tree/v0.9.1) (2017-06-12) @@ -2107,6 +2113,7 @@ - all: implement --fake-tls-termination flag [\#493](https://github.com/ory/hydra/pull/493) ([aeneasr](https://github.com/aeneasr)) - oauth2/introspect\>: resolve 401 on invalid token [\#492](https://github.com/ory/hydra/pull/492) ([aeneasr](https://github.com/aeneasr)) - client/manager\_sql: return an empty slice if string is empty [\#491](https://github.com/ory/hydra/pull/491) ([faxal](https://github.com/faxal)) +- cmd: improve error message for when database tables are missing [\#453](https://github.com/ory/hydra/pull/453) ([aeneasr](https://github.com/aeneasr)) ## [v0.8.6](https://github.com/ory/hydra/tree/v0.8.6) (2017-06-05) [Full Changelog](https://github.com/ory/hydra/compare/v0.8.5...v0.8.6) @@ -2120,6 +2127,7 @@ - Creating policies via the CLI does not populate the 'description' field [\#472](https://github.com/ory/hydra/issues/472) - Missing "iss" field from /oauth2/introspect response [\#399](https://github.com/ory/hydra/issues/399) - client: getting a non-existing client raises 500 instead of 404 [\#348](https://github.com/ory/hydra/issues/348) +- cmd/server: resolve gorilla session mem leak - closes \#461 [\#475](https://github.com/ory/hydra/pull/475) ([aeneasr](https://github.com/aeneasr)) **Closed issues:** @@ -2140,7 +2148,6 @@ - jwk/handler: nest ac check and resolve stray log message [\#487](https://github.com/ory/hydra/pull/487) ([aeneasr](https://github.com/aeneasr)) - pkg/errors: make ErrNotFound return a status code [\#486](https://github.com/ory/hydra/pull/486) ([aeneasr](https://github.com/aeneasr)) - cmd/policies: description is a string field, not slice [\#485](https://github.com/ory/hydra/pull/485) ([aeneasr](https://github.com/aeneasr)) -- Vendor update [\#483](https://github.com/ory/hydra/pull/483) ([aeneasr](https://github.com/aeneasr)) - vendor: update to latest versions [\#482](https://github.com/ory/hydra/pull/482) ([aeneasr](https://github.com/aeneasr)) - client/manager: remove merging of stored and updated client [\#478](https://github.com/ory/hydra/pull/478) ([faxal](https://github.com/faxal)) - Fix Swagger for Warden Groups [\#476](https://github.com/ory/hydra/pull/476) ([pbarker](https://github.com/pbarker)) @@ -2151,7 +2158,6 @@ **Fixed bugs:** - max\_conns and max\_conn\_lifetime breaks db.Ping [\#464](https://github.com/ory/hydra/issues/464) -- cmd/server: resolve gorilla session mem leak - closes \#461 [\#475](https://github.com/ory/hydra/pull/475) ([aeneasr](https://github.com/aeneasr)) **Closed issues:** @@ -2172,6 +2178,7 @@ **Merged pull requests:** +- Vendor update [\#483](https://github.com/ory/hydra/pull/483) ([aeneasr](https://github.com/aeneasr)) - config: connect to cleaned DSN [\#470](https://github.com/ory/hydra/pull/470) ([aeneasr](https://github.com/aeneasr)) - docs: hint to kubernetes helm chart - see \#430 [\#467](https://github.com/ory/hydra/pull/467) ([aeneasr](https://github.com/aeneasr)) - Improve documentation [\#466](https://github.com/ory/hydra/pull/466) ([aeneasr](https://github.com/aeneasr)) @@ -2209,7 +2216,6 @@ **Merged pull requests:** - Add Key Id to Header [\#454](https://github.com/ory/hydra/pull/454) ([pbarker](https://github.com/pbarker)) -- cmd: improve error message for when database tables are missing [\#453](https://github.com/ory/hydra/pull/453) ([aeneasr](https://github.com/aeneasr)) - Wellknown [\#427](https://github.com/ory/hydra/pull/427) ([pbarker](https://github.com/pbarker)) ## [v0.8.1](https://github.com/ory/hydra/tree/v0.8.1) (2017-05-08) @@ -2242,6 +2248,7 @@ - Add example about securing the consent app [\#450](https://github.com/ory/hydra/pull/450) ([matteosuppo](https://github.com/matteosuppo)) - Allow setting SkipTLSVerify Option value [\#448](https://github.com/ory/hydra/pull/448) ([faxal](https://github.com/faxal)) - 0.8.0: Towards production friendliness [\#445](https://github.com/ory/hydra/pull/445) ([aeneasr](https://github.com/aeneasr)) +- oauth2: fix typo [\#403](https://github.com/ory/hydra/pull/403) ([maximesong](https://github.com/maximesong)) ## [v0.7.13](https://github.com/ory/hydra/tree/v0.7.13) (2017-05-03) [Full Changelog](https://github.com/ory/hydra/compare/v0.7.12...v0.7.13) @@ -2254,7 +2261,6 @@ - herodot: resolve issue with infinite loop caused by certain error chain [\#441](https://github.com/ory/hydra/issues/441) - "Could not fetch signing key for OpenID Connect" [\#439](https://github.com/ory/hydra/issues/439) -- vendor: upgrade fosite to resolve regression issue [\#446](https://github.com/ory/hydra/pull/446) ([aeneasr](https://github.com/aeneasr)) **Closed issues:** @@ -2307,6 +2313,7 @@ **Merged pull requests:** +- Remove uname references from docs [\#423](https://github.com/ory/hydra/pull/423) ([matteosuppo](https://github.com/matteosuppo)) - vendor: update common and ladon dependencies [\#422](https://github.com/ory/hydra/pull/422) ([aeneasr](https://github.com/aeneasr)) - docs: resolve broken build instructions in readme - closes \#420 [\#421](https://github.com/ory/hydra/pull/421) ([aeneasr](https://github.com/aeneasr)) - Dropping brackets in Create Client example [\#415](https://github.com/ory/hydra/pull/415) ([pbarker](https://github.com/pbarker)) @@ -2325,7 +2332,6 @@ **Merged pull requests:** - Updated ladon version in glide.lock [\#404](https://github.com/ory/hydra/pull/404) ([ericalandouglas](https://github.com/ericalandouglas)) -- oauth2: fix typo [\#403](https://github.com/ory/hydra/pull/403) ([maximesong](https://github.com/maximesong)) ## [v0.7.8](https://github.com/ory/hydra/tree/v0.7.8) (2017-03-24) [Full Changelog](https://github.com/ory/hydra/compare/v0.7.7...v0.7.8) @@ -2396,12 +2402,15 @@ **Fixed bugs:** +- Problems with the authorization code flow [\#342](https://github.com/ory/hydra/issues/342) +- vendor: upgrade fosite to resolve regression issue [\#446](https://github.com/ory/hydra/pull/446) ([aeneasr](https://github.com/aeneasr)) - policy: investigate potential sql connection leak - closes \#363 [\#365](https://github.com/ory/hydra/pull/365) ([aeneasr](https://github.com/aeneasr)) **Closed issues:** - Have Hydra store usernames linked to tokens [\#364](https://github.com/ory/hydra/issues/364) - policy: investigate potential sql connection leak [\#363](https://github.com/ory/hydra/issues/363) +- docs: have a "running hydra in production" section [\#354](https://github.com/ory/hydra/issues/354) - crypto/bcrypt: hashedPassword is not the hash of the given password [\#346](https://github.com/ory/hydra/issues/346) **Merged pull requests:** @@ -2413,7 +2422,6 @@ **Fixed bugs:** -- Problems with the authorization code flow [\#342](https://github.com/ory/hydra/issues/342) - sql: deleting policies does not delete associated records with mysql driver [\#326](https://github.com/ory/hydra/issues/326) - vendor: update to fosite 0.6.11 - closes \#338 [\#343](https://github.com/ory/hydra/pull/343) ([aeneasr](https://github.com/aeneasr)) @@ -2456,10 +2464,6 @@ - warden: add group management and group based policy checks [\#68](https://github.com/ory/hydra/issues/68) - Improve http-based warden/introspection error responses [\#335](https://github.com/ory/hydra/pull/335) ([aeneasr](https://github.com/aeneasr)) -**Merged pull requests:** - -- Remove uname references from docs [\#423](https://github.com/ory/hydra/pull/423) ([matteosuppo](https://github.com/matteosuppo)) - ## [v0.6.9](https://github.com/ory/hydra/tree/v0.6.9) (2016-12-20) [Full Changelog](https://github.com/ory/hydra/compare/v0.6.8...v0.6.9) @@ -2528,13 +2532,11 @@ **Implemented enhancements:** - oauth2/revocation: token revocation fails silently with sql store [\#312](https://github.com/ory/hydra/pull/312) ([aeneasr](https://github.com/aeneasr)) -- 0.6.0 [\#293](https://github.com/ory/hydra/pull/293) ([aeneasr](https://github.com/aeneasr)) **Fixed bugs:** - oauth2/revocation: token revocation fails silently with sql store [\#311](https://github.com/ory/hydra/issues/311) - oauth2/revocation: token revocation fails silently with sql store [\#312](https://github.com/ory/hydra/pull/312) ([aeneasr](https://github.com/aeneasr)) -- 0.6.0 [\#293](https://github.com/ory/hydra/pull/293) ([aeneasr](https://github.com/aeneasr)) **Closed issues:** @@ -2588,6 +2590,7 @@ - consider signing up for Core Infrastructure Initiative badge [\#246](https://github.com/ory/hydra/issues/246) - oauth2: token revocation endpoint [\#233](https://github.com/ory/hydra/issues/233) - oauth2/rethinkdb: clear expired access tokens from memory [\#228](https://github.com/ory/hydra/issues/228) +- 0.6.0 [\#293](https://github.com/ory/hydra/pull/293) ([aeneasr](https://github.com/aeneasr)) **Fixed bugs:** @@ -2595,6 +2598,7 @@ - oauth2/introspect: make endpoint rfc7662 compatible [\#289](https://github.com/ory/hydra/issues/289) - rethink: figure out how to deal with unreliable changefeed [\#269](https://github.com/ory/hydra/issues/269) - oauth2: requests waste a lot of time in fosite storer `requestFromRDB\(\)` routine [\#260](https://github.com/ory/hydra/issues/260) +- 0.6.0 [\#293](https://github.com/ory/hydra/pull/293) ([aeneasr](https://github.com/aeneasr)) **Closed issues:** @@ -2616,10 +2620,6 @@ ## [v0.5.8](https://github.com/ory/hydra/tree/v0.5.8) (2016-10-06) [Full Changelog](https://github.com/ory/hydra/compare/v0.5.7...v0.5.8) -**Implemented enhancements:** - -- docker: add http-only dockerfile and upgrade to go 1.7 base image [\#273](https://github.com/ory/hydra/pull/273) ([aeneasr](https://github.com/aeneasr)) - **Fixed bugs:** - oauth2: refresh token does not migrate session object to new token [\#283](https://github.com/ory/hydra/issues/283) @@ -2663,6 +2663,10 @@ ## [v0.5.3](https://github.com/ory/hydra/tree/v0.5.3) (2016-09-29) [Full Changelog](https://github.com/ory/hydra/compare/v0.5.2...v0.5.3) +**Implemented enhancements:** + +- docker: add http-only dockerfile and upgrade to go 1.7 base image [\#273](https://github.com/ory/hydra/pull/273) ([aeneasr](https://github.com/aeneasr)) + **Fixed bugs:** - investigate if and why slow rethinkdb connection causes client root to be recreated [\#191](https://github.com/ory/hydra/issues/191) @@ -2750,8 +2754,6 @@ - warden: firewal.Audience overridden with requesting clients subject [\#236](https://github.com/ory/hydra/pull/236) ([faxal](https://github.com/faxal)) - Update jwt-go and resolve warden regression issue [\#232](https://github.com/ory/hydra/pull/232) ([aeneasr](https://github.com/aeneasr)) -- Fix 207 [\#208](https://github.com/ory/hydra/pull/208) ([aeneasr](https://github.com/aeneasr)) -- client: return client secret on POST and remove it from GET [\#117](https://github.com/ory/hydra/pull/117) ([aeneasr](https://github.com/aeneasr)) **Closed issues:** @@ -2810,6 +2812,7 @@ - AccessTokens get overridden during startup of hydra [\#207](https://github.com/ory/hydra/issues/207) - warden: IntrospectToken always throws an error on Hydra logs [\#199](https://github.com/ory/hydra/issues/199) - resolve issue with at extra data [\#198](https://github.com/ory/hydra/issues/198) +- Fix 207 [\#208](https://github.com/ory/hydra/pull/208) ([aeneasr](https://github.com/aeneasr)) ## [v0.3.0](https://github.com/ory/hydra/tree/v0.3.0) (2016-08-09) [Full Changelog](https://github.com/ory/hydra/compare/v0.2.0...v0.3.0) @@ -2921,9 +2924,11 @@ - firewall 403s on warden endpoints [\#118](https://github.com/ory/hydra/issues/118) - Client secrets should not be hashed when POSTing [\#113](https://github.com/ory/hydra/issues/113) - Resolve issues with warden and client api [\#120](https://github.com/ory/hydra/pull/120) ([aeneasr](https://github.com/aeneasr)) +- client: return client secret on POST and remove it from GET [\#117](https://github.com/ory/hydra/pull/117) ([aeneasr](https://github.com/aeneasr)) **Merged pull requests:** +- Connect to rethinkdb with a custom certificate [\#116](https://github.com/ory/hydra/pull/116) ([matteosuppo](https://github.com/matteosuppo)) - dist: fix typos in exemplary policies [\#112](https://github.com/ory/hydra/pull/112) ([aeneasr](https://github.com/aeneasr)) ## [0.1-beta.3](https://github.com/ory/hydra/tree/0.1-beta.3) (2016-06-20) @@ -3030,7 +3035,6 @@ **Merged pull requests:** -- Connect to rethinkdb with a custom certificate [\#116](https://github.com/ory/hydra/pull/116) ([matteosuppo](https://github.com/matteosuppo)) - Remove go get of govet in .travis.yml [\#67](https://github.com/ory/hydra/pull/67) ([sbani](https://github.com/sbani)) - Hydra is now using Go 1.6 vendoring and is deployable to heroku [\#56](https://github.com/ory/hydra/pull/56) ([aeneasr](https://github.com/aeneasr)) - Heroku [\#55](https://github.com/ory/hydra/pull/55) ([aeneasr](https://github.com/aeneasr))