Priljubljeno: Podatki posodobljeni: 27. oktober 2026

Kategorije

Internet1356
Komunikacija321
Zvok in video898
Grafika in oblikovanje539
Pisarna in produktivnost1124
Orodja za razvijalce3134
Orodja UI529
Varnost in zasebnost385
Sistemska orodja3114
Igre523
Izobraževanje in znanost239
Omrežje in IT284

openapi-oathkeeper: starejše različice za prenos

Generate Ory Oathkeeper access rules from an OpenAPI 3 contract.

Seznam zajema 4 različice programa openapi-oathkeeper, od 19. marec 2026 do trenutne 0.8.0. Vsaka vodi do namestitvenih datotek na strežniku izdajatelja.

2026: 4 4 26
RazličicaDatumVelikostDatoteke
0.8.0Najnovejša 9. september 2026 — 64-bitno ZIP32-bitno ZIP
Opombe ob izdaji
## What's Changed

• Add integration tests by @emmanuelgautier in https://github.com/cerberauth/openapi-oathkeeper/pull/143
• feat:update dependencies and image version by @emmanuelgautier in https://github.com/cerberauth/openapi-oathkeeper/pull/144
• Capture array and object path params as explicit types by @emmanuelgautier in https://github.com/cerberauth/openapi-oathkeeper/pull/145

**Full Changelog**:https://github.com/cerberauth/openapi-oathkeeper/compare/v0.7.19...v0.8.0
0.7.19 7. september 2026 — 64-bitno ZIP32-bitno ZIP
Opombe ob izdaji
## Security fix

**High severity:** Overbroad path-parameter regex in generated Ory Oathkeeper access rules could cause an authentication/authorization bypass.

Previously, every OpenAPI `string` path parameter (and any parameter type the generator couldn't classify) was compiled to the unanchored regex token `<.+>`. Because `.` matches `/` in Go's regexp engine — and in Ory Oathkeeper's `regexp` matching strategy — a rule generated for a single path segment (e.g. `/public/{slug}`) also matched deeper, unrelated paths under the same prefix (e.g. `/public/admin/delete-all-users`). If those deeper paths weren't defined as their own, more specific OpenAPI operations, the broader (often unauthenticated `noop`) rule would match and proxy them instead of being rejected.

Generated rules for `string` and unclassified path parameters now use `<[^/]+>`, anchored to a single URL segment, matching the behavior already documented for numeric parameters.

**Action required:** Regenerate your Ory Oathkeeper access rules with this version and redeploy them. Rules generated by earlier versions using `string` path parameters may be broader than intended.

See [GHSA-9f3w-vm54-7gfc](https://github.com/cerberauth/openapi-oathkeeper/security/advisories/GHSA-9f3w-vm54-7gfc) for full details. Thanks to @EQSTLab for the responsible disclosure.

## What's Changed

• fix(generator):anchor string path-parameter regex to a single URL segment by @emmanuelgautier in https://github.com/cerberauth/openapi-oathkeeper/pull/142

**Full Changelog**:https://github.com/cerberauth/openapi-oathkeeper/compare/v0.7.18...v0.7.19
0.7.18 13. avgust 2026 — 64-bitno ZIP32-bitno ZIP
0.7.15 19. marec 2026 — 64-bitno ZIP32-bitno ZIP

Najbolj priljubljeno v kategoriji „Jeziki in SDK“

Prikaži vse
  1. LLVMJeziki in SDK · LLVM
  2. DenoJeziki in SDK · Deno Land Inc.
  3. CMakeJeziki in SDK · Kitware
  4. YarnJeziki in SDK · Yarn Contributors
  5. CcacheJeziki in SDK · Joel Rosdahl
  6. sbtJeziki in SDK · Lightbend, Inc.
  7. BOINCJeziki in SDK · Space Sciences Laboratory, U.C. Berkeley
  8. Dart SDKJeziki in SDK · Google
  9. NVM for WindowsJeziki in SDK · Ecor Ventures LLC

Več programov izdajatelja CerberAuth

Prikaži vse
  • jwtopJeziki in SDK · CerberAuth

Deli