v1.3.6

Changes

• remove offline_access from default scopes. too many idps don't allow it @dovholuknf (#806)

Dependencies

• update tlsuv@v0.33.4 @ekoby (#808)
• update tlsuv@v0.33.3 @ekoby (#805)

v1.3.5

Changes

• fix HA enrollment: alternate controllers cannot be used for enrollment @ekoby (#804)
• Avoid bind crypto errors @ekoby (#803)
• extend dump information @ekoby (#801)

v1.3.4

Changes

• surface ext-signer configuration error @ekoby (#799)
• Ext Signers: secondary auth @ekoby (#798)
• Update tlsuv@v0.33.1 @ekoby (#797)

v1.3.3

Changes

• Allow partial ca chains @ekoby (#796)
• update ctrl list with new advertised address @ekoby (#794)
• exclude unusable signers from consideration @ekoby (#793)
• add symbols to release binaries @ekoby (#791)

v1.3.2

Changes

• Improve parse message @ekoby (#788)

v1.3.1

Changes

• Misc OIDC flow fixes @ekoby (#787)
• handle redirect before invoking response callback @ekoby (#786)

v1.3.0

Changes

• misc OIDC fixes @ekoby (#784)
• ziti config event: replaces ZitiAPIEvent @ekoby (#780)
• legacy auth: clear session on forced refresh @ekoby (#779)
• CLI11 instead of subcommand @ekoby (#778)
• add MISSING_CERT_CLAIM mapping @dovholuknf (#777)

v1.2.1

Changes

• fix ziti_error parsing @ekoby (#776)
• do not process binding before token is acquired @ekoby (#775)
• add two error mappings @dovholuknf (#774)
• Optimize bind refresh @ekoby (#772)
• model collections improvement (iteration) @ekoby (#771)

v1.2.0

Changes

• select ext jwt provider @ekoby (#768)
• update tlsuv@v0.32.7 @ekoby (#767)
• add support for network enrollment token enrollment @ekoby (#765)
• Network jwt api @ekoby (#764)
• Fix disable during pre auth @ekoby (#762)

v1.1.5

Changes

• check for disabled ztx before using ztx_get_controller @scareything (#761)