लोकप्रिय: डेटा अपडेट: २०२६ अक्टोबर २७

श्रेणीहरू

इन्टरनेट१,३५६
सञ्चार३२१
अडियो र भिडियो८९८
ग्राफिक्स र डिजाइन५३९
अफिस र उत्पादकत्व१,१२४
डेभलपर टुल३,१३४
AI टुल५२९
सुरक्षा र गोपनीयता३८५
सिस्टम टुल३,११४
गेम५२३
शिक्षा र विज्ञान२३९
नेटवर्क र IT२८४

openapi-oathkeeper का पुराना संस्करणहरू डाउनलोड गर्नुहोस्

Generate Ory Oathkeeper access rules from an OpenAPI 3 contract.

यहाँ openapi-oathkeeper का ४ संस्करण छन्, २०२६ मार्च १९ देखि हालको 0.8.0 सम्म। हरेक संस्करणको लिङ्क प्रकाशकका आफ्नै इन्स्टलर फाइलहरूमा जान्छ।

2026: 4 4 26
संस्करणमितिसाइजफाइलहरू
0.8.0पछिल्लो २०२६ सेप्टेम्बर ९ — ६४-बिट ZIP३२-बिट ZIP
रिलिज नोटहरू
## What's Changed

• Add integration tests by @emmanuelgautier in https://github.com/cerberauth/openapi-oathkeeper/pull/143
• feat:update dependencies and image version by @emmanuelgautier in https://github.com/cerberauth/openapi-oathkeeper/pull/144
• Capture array and object path params as explicit types by @emmanuelgautier in https://github.com/cerberauth/openapi-oathkeeper/pull/145

**Full Changelog**:https://github.com/cerberauth/openapi-oathkeeper/compare/v0.7.19...v0.8.0
0.7.19 २०२६ सेप्टेम्बर ७ — ६४-बिट ZIP३२-बिट ZIP
रिलिज नोटहरू
## Security fix

**High severity:** Overbroad path-parameter regex in generated Ory Oathkeeper access rules could cause an authentication/authorization bypass.

Previously, every OpenAPI `string` path parameter (and any parameter type the generator couldn't classify) was compiled to the unanchored regex token `<.+>`. Because `.` matches `/` in Go's regexp engine — and in Ory Oathkeeper's `regexp` matching strategy — a rule generated for a single path segment (e.g. `/public/{slug}`) also matched deeper, unrelated paths under the same prefix (e.g. `/public/admin/delete-all-users`). If those deeper paths weren't defined as their own, more specific OpenAPI operations, the broader (often unauthenticated `noop`) rule would match and proxy them instead of being rejected.

Generated rules for `string` and unclassified path parameters now use `<[^/]+>`, anchored to a single URL segment, matching the behavior already documented for numeric parameters.

**Action required:** Regenerate your Ory Oathkeeper access rules with this version and redeploy them. Rules generated by earlier versions using `string` path parameters may be broader than intended.

See [GHSA-9f3w-vm54-7gfc](https://github.com/cerberauth/openapi-oathkeeper/security/advisories/GHSA-9f3w-vm54-7gfc) for full details. Thanks to @EQSTLab for the responsible disclosure.

## What's Changed

• fix(generator):anchor string path-parameter regex to a single URL segment by @emmanuelgautier in https://github.com/cerberauth/openapi-oathkeeper/pull/142

**Full Changelog**:https://github.com/cerberauth/openapi-oathkeeper/compare/v0.7.18...v0.7.19
0.7.18 २०२६ अगस्ट १३ — ६४-बिट ZIP३२-बिट ZIP
0.7.15 २०२६ मार्च १९ — ६४-बिट ZIP३२-बिट ZIP

प्रोग्रामिङ भाषा र SDK मा सबैभन्दा लोकप्रिय

सबै हेर्नुहोस्
  1. Go Programming Languageप्रोग्रामिङ भाषा र SDK
  2. LLVMप्रोग्रामिङ भाषा र SDK · LLVM
  3. Denoप्रोग्रामिङ भाषा र SDK · Deno Land Inc.
  4. CMakeप्रोग्रामिङ भाषा र SDK · Kitware
  5. Yarnप्रोग्रामिङ भाषा र SDK · Yarn Contributors
  6. Ccacheप्रोग्रामिङ भाषा र SDK · Joel Rosdahl
  7. sbtप्रोग्रामिङ भाषा र SDK · Lightbend, Inc.
  8. BOINCप्रोग्रामिङ भाषा र SDK · Space Sciences Laboratory, U.C. Berkeley
  9. Dart SDKप्रोग्रामिङ भाषा र SDK · Google
  10. NVM for Windowsप्रोग्रामिङ भाषा र SDK · Ecor Ventures LLC

CerberAuth का अन्य एपहरू

सबै हेर्नुहोस्
  • jwtopप्रोग्रामिङ भाषा र SDK · CerberAuth

सेयर गर्नुहोस्