v1.1.3

What's Changed

• Reduce log level for debug messages by @Alphix in #154
• Add CI tests by @Alphix in #155
• Fix incorrect logging in krb5_parse_name() error handling by @Fahnenfluchtige in #156
• Fix potential NULL dereference in ngx_http_auth_spnego_store_delegated_creds() by @Fahnenfluchtige in #157
• (krb5_realm_length(principal->realm) * 2) has no explicit type cast by @StepanGulyaev in #159
• CI: update tests to also check basic auth fallback by @Alphix in #160
• Fix check of no realm in username by @simayosi in #148
• Add Windows/AD and UNIX commands and configuration to generate and use Keytabs with nginx by @vjt in #91

New Contributors

• @Alphix made their first contribution in #154
• @Fahnenfluchtige made their first contribution in #156
• @StepanGulyaev made their first contribution in #159
• @simayosi made their first contribution in #148

Full Changelog: v1.1.2...v1.1.3

v1.1.2

What's Changed

• Add support for unconstrained delegation, constrained delegation, and auth_gss_authorized_principal_regex by @medinski94 in #105
• corrected Heimdal compatibility by @itglob in #124
• Three minor fixes by @oxpa in #139

New Contributors

• @medinski94 made their first contribution in #105
• @itglob made their first contribution in #124
• @oxpa made their first contribution in #139

Full Changelog: v1.1.1...v1.1.2

Rollup of changes since v1.1

Includes minor bug and significant security fixes. All users should upgrade after appropriate testing.

Rollup through c85a38c595c6f45609f9984c3254a33996ed587d

Misc bugfixes.

Initial versioned release

Reasonable behavior for both SPNEGO and Basic authentication using GSSAPI/Kerberos
Proper HTTP handling
User whitelisting