Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package apache2-mod_auth_openidc for openSUSE:Factory checked in at 2022-10-18 16:06:48 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/apache2-mod_auth_openidc (Old) and /work/SRC/openSUSE:Factory/.apache2-mod_auth_openidc.new.2275 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "apache2-mod_auth_openidc" Tue Oct 18 16:06:48 2022 rev:26 rq:1029694 version:2.4.12 Changes: -------- --- /work/SRC/openSUSE:Factory/apache2-mod_auth_openidc/apache2-mod_auth_openidc.changes 2022-08-24 15:11:12.044506698 +0200 +++ /work/SRC/openSUSE:Factory/.apache2-mod_auth_openidc.new.2275/apache2-mod_auth_openidc.changes 2022-10-18 16:06:49.241212222 +0200 @@ -1,0 +2,21 @@ +Mon Oct 17 14:32:15 UTC 2022 - Michael Str??der <mich...@stroeder.com> + +- update to 2.4.12 + * Features + - allow storing the id_token in a client-cookie based session; see #812 and #888 + - allow setting connection pool parameters for Memcache server connections; see #916 + - add option to set a username for Redis authentication via OIDCRedisCacheUsername + - register request_object_signing_alg in dynamic client registration when using request_uri + * Bugfixes + - increase size of the output buffer when using libpcre2 for substitution; closes #915 + - support OIDCSessionInactivityTimeout values greater than 30 days + when using Memcache; see #936 + - allow for step-up discovery with an external URL using HTML refresh; + fixes behaviour on CentOS 7/8 when combined with ProxyPass + - apply exact length matching for at_hash and c_hash validation + - store access token obtained from backchannel in session over the one + returned in the frontchannel for code token and code id_token token flows + - check ID token signed response algorithm on backchannel logout_token + and retrieve its configuration value from the client metadata file + +------------------------------------------------------------------- Old: ---- mod_auth_openidc-2.4.11.3.tar.gz New: ---- mod_auth_openidc-2.4.12.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ apache2-mod_auth_openidc.spec ++++++ --- /var/tmp/diff_new_pack.TH16Hx/_old 2022-10-18 16:06:49.729212827 +0200 +++ /var/tmp/diff_new_pack.TH16Hx/_new 2022-10-18 16:06:49.733212832 +0200 @@ -17,7 +17,7 @@ Name: apache2-mod_auth_openidc -Version: 2.4.11.3 +Version: 2.4.12 Release: 0 Summary: Apache2.x module for an OpenID Connect enabled Identity Provider License: Apache-2.0 ++++++ mod_auth_openidc-2.4.11.3.tar.gz -> mod_auth_openidc-2.4.12.tar.gz ++++++ ++++ 4296 lines of diff (skipped)