熱門: 資料更新於2026年10月27日

軟體分類

網路軟體1,356
通訊社群321
影音軟體898
繪圖與影像539
辦公軟體1,124
開發工具3,134
AI工具529
安全與隱私385
系統工具3,114
遊戲523
教育與科學239
網路與IT284

openapi-oathkeeper舊版本下載(所有版本)

Generate Ory Oathkeeper access rules from an OpenAPI 3 contract.

這裡收錄openapi-oathkeeper從2026年3月19日到目前0.8.0的4個版本,每個版本都連到開發商的官方安裝檔。

2026: 4 4 26
版本日期大小檔案
0.8.0最新版本 2026年9月9日 — 64位元 ZIP32位元 ZIP
更新紀錄
## What's Changed

• Add integration tests by @emmanuelgautier in https://github.com/cerberauth/openapi-oathkeeper/pull/143
• feat:update dependencies and image version by @emmanuelgautier in https://github.com/cerberauth/openapi-oathkeeper/pull/144
• Capture array and object path params as explicit types by @emmanuelgautier in https://github.com/cerberauth/openapi-oathkeeper/pull/145

**Full Changelog**:https://github.com/cerberauth/openapi-oathkeeper/compare/v0.7.19...v0.8.0
0.7.19 2026年9月7日 — 64位元 ZIP32位元 ZIP
更新紀錄
## Security fix

**High severity:** Overbroad path-parameter regex in generated Ory Oathkeeper access rules could cause an authentication/authorization bypass.

Previously, every OpenAPI `string` path parameter (and any parameter type the generator couldn't classify) was compiled to the unanchored regex token `<.+>`. Because `.` matches `/` in Go's regexp engine — and in Ory Oathkeeper's `regexp` matching strategy — a rule generated for a single path segment (e.g. `/public/{slug}`) also matched deeper, unrelated paths under the same prefix (e.g. `/public/admin/delete-all-users`). If those deeper paths weren't defined as their own, more specific OpenAPI operations, the broader (often unauthenticated `noop`) rule would match and proxy them instead of being rejected.

Generated rules for `string` and unclassified path parameters now use `<[^/]+>`, anchored to a single URL segment, matching the behavior already documented for numeric parameters.

**Action required:** Regenerate your Ory Oathkeeper access rules with this version and redeploy them. Rules generated by earlier versions using `string` path parameters may be broader than intended.

See [GHSA-9f3w-vm54-7gfc](https://github.com/cerberauth/openapi-oathkeeper/security/advisories/GHSA-9f3w-vm54-7gfc) for full details. Thanks to @EQSTLab for the responsible disclosure.

## What's Changed

• fix(generator):anchor string path-parameter regex to a single URL segment by @emmanuelgautier in https://github.com/cerberauth/openapi-oathkeeper/pull/142

**Full Changelog**:https://github.com/cerberauth/openapi-oathkeeper/compare/v0.7.18...v0.7.19
0.7.18 2026年8月13日 — 64位元 ZIP32位元 ZIP
0.7.15 2026年3月19日 — 64位元 ZIP32位元 ZIP

程式語言與SDK熱門排行

查看全部
  1. Go Programming Language程式語言與SDK
  2. LLVM程式語言與SDK · LLVM
  3. Deno程式語言與SDK · Deno Land Inc.
  4. CMake程式語言與SDK · Kitware
  5. Yarn程式語言與SDK · Yarn Contributors
  6. Ccache程式語言與SDK · Joel Rosdahl
  7. sbt程式語言與SDK · Lightbend, Inc.
  8. BOINC程式語言與SDK · Space Sciences Laboratory, U.C. Berkeley
  9. Dart SDK程式語言與SDK · Google
  10. NVM for Windows程式語言與SDK · Ecor Ventures LLC

CerberAuth的其他軟體

查看全部
  • jwtop程式語言與SDK · CerberAuth

分享