Pomerium v0.3.0 Release Notes

Release Date: 2019-09-01 // over 4 years ago
  • v0.3.0

    ๐Ÿ†• New

    GRPC Improvements. [GH-261] / [GH-69]

    • Enable WaitForReady to allow background retries through transient failures
    • Expose a configurable timeout for backend requests to Authorize and Authenticate

    - Enable DNS round_robin load balancing to Authorize and Authenticate services by default

    โž• Add ability to set client certificates for downstream connections. [GH-259]

    ๐Ÿ›  Fixed

    • ๐Ÿ›  Fixed non-amd64 based docker images.[GH-284]
    • ๐Ÿ›  Fixed an issue where stripped cookie headers would result in a cookie full of semi-colons (Cookie: ;;;). [GH-285]
    • ๐ŸŒ HTTP status codes now better adhere to RFC7235. In particular, authentication failures reply with 401 Unauthorized while authorization failures reply with 403 Forbidden. [GH-272]

    ๐Ÿ”„ Changed

    Pomerium will now strip _csrf cookies in addition to session cookies. [GG-285]

    Disabled gRPC service config. [GH-280]

    A policy's custom certificate authority can set as a file or a base64 encoded blob(tls_custom_ca/tls_custom_ca_file). [GH-259]

    โœ‚ Remove references to service named ports and instead use their numeric equivalent. [GH-266]