Releases: TykTechnologies/tyk-identity-broker
Releases · TykTechnologies/tyk-identity-broker
v1.2.3
v1.2.2
v1.2.1
v1.1.2-rc1
Potential SAML fix
v1.2.0
- Added new option in the profiles
SSOOnlyForRegisteredUsers
, to configure if we want to allow only existent dashboard’s users to perform SSO. - Fix #152 we now have arm64 docker images as well as a slim image with a reduced attack surface
- Fixed bug when using Proxy provider for developer portal access,if the email was empty the developer was not created, now in such case it will be created in the format userID@ssoSession.com
v1.1.1
- Fixed SAML vulnerability where the Go XML parser can cause SAML authentication bypass. The XML parser doesn’t guarantee integrity in the XML round-trip (encoding/decoding XML data) leading to make the SAML authentication bypass possible.
- Enhanced error messages coming from mongo store
- Implemented redis backend to make TIB work better behind a load balancer
- TIB’s proxy flow now insert upstream host header into the call, so it will work with any upstream service that verifies Host headers against expected host headers.