Popularno: Podaci ažurirani: 27. oktobar 2026.

Kategorije

Internet1.356
Komunikacija321
Audio i video898
Grafika i dizajn539
Kancelarija i produktivnost1.124
Alati za programere3.134
AI alati529
Bezbednost i privatnost385
Sistemski alati3.114
Igre523
Obrazovanje i nauka239
Mreža i IT284

openapi-oathkeeper: starije verzije za preuzimanje

Generate Ory Oathkeeper access rules from an OpenAPI 3 contract.

Spisak obuhvata 4 verzije programa openapi-oathkeeper, od 19. mart 2026. do aktuelne 0.8.0. Svaka vodi do instalacionih fajlova na serveru izdavača.

2026: 4 4 26
VerzijaDatumVeličinaFajlovi
0.8.0Najnovija 9. septembar 2026. — 64-bit ZIP32-bit ZIP
Beleške o izdanju
## What's Changed

• Add integration tests by @emmanuelgautier in https://github.com/cerberauth/openapi-oathkeeper/pull/143
• feat:update dependencies and image version by @emmanuelgautier in https://github.com/cerberauth/openapi-oathkeeper/pull/144
• Capture array and object path params as explicit types by @emmanuelgautier in https://github.com/cerberauth/openapi-oathkeeper/pull/145

**Full Changelog**:https://github.com/cerberauth/openapi-oathkeeper/compare/v0.7.19...v0.8.0
0.7.19 7. septembar 2026. — 64-bit ZIP32-bit ZIP
Beleške o izdanju
## Security fix

**High severity:** Overbroad path-parameter regex in generated Ory Oathkeeper access rules could cause an authentication/authorization bypass.

Previously, every OpenAPI `string` path parameter (and any parameter type the generator couldn't classify) was compiled to the unanchored regex token `<.+>`. Because `.` matches `/` in Go's regexp engine — and in Ory Oathkeeper's `regexp` matching strategy — a rule generated for a single path segment (e.g. `/public/{slug}`) also matched deeper, unrelated paths under the same prefix (e.g. `/public/admin/delete-all-users`). If those deeper paths weren't defined as their own, more specific OpenAPI operations, the broader (often unauthenticated `noop`) rule would match and proxy them instead of being rejected.

Generated rules for `string` and unclassified path parameters now use `<[^/]+>`, anchored to a single URL segment, matching the behavior already documented for numeric parameters.

**Action required:** Regenerate your Ory Oathkeeper access rules with this version and redeploy them. Rules generated by earlier versions using `string` path parameters may be broader than intended.

See [GHSA-9f3w-vm54-7gfc](https://github.com/cerberauth/openapi-oathkeeper/security/advisories/GHSA-9f3w-vm54-7gfc) for full details. Thanks to @EQSTLab for the responsible disclosure.

## What's Changed

• fix(generator):anchor string path-parameter regex to a single URL segment by @emmanuelgautier in https://github.com/cerberauth/openapi-oathkeeper/pull/142

**Full Changelog**:https://github.com/cerberauth/openapi-oathkeeper/compare/v0.7.18...v0.7.19
0.7.18 13. avgust 2026. — 64-bit ZIP32-bit ZIP
0.7.15 19. mart 2026. — 64-bit ZIP32-bit ZIP

Najpopularnije u kategoriji „Jezici i SDK“

Prikaži sve
  1. LLVMJezici i SDK · LLVM
  2. DenoJezici i SDK · Deno Land Inc.
  3. CMakeJezici i SDK · Kitware
  4. YarnJezici i SDK · Yarn Contributors
  5. CcacheJezici i SDK · Joel Rosdahl
  6. sbtJezici i SDK · Lightbend, Inc.
  7. BOINCJezici i SDK · Space Sciences Laboratory, U.C. Berkeley
  8. Dart SDKJezici i SDK · Google
  9. NVM for WindowsJezici i SDK · Ecor Ventures LLC

Još programa izdavača CerberAuth

Prikaži sve
  • jwtopJezici i SDK · CerberAuth

Podeli