Skip to content

Conversation

@clambin
Copy link

@clambin clambin commented Apr 1, 2024

I noticed that some of the underlying dependencies are quite old, and in some cases deprecated or had security issues.

Main updates in this PR:

  • Bump github.com/coreos/go-oidc to v3
  • Bump gopkg.in/square/go-jose.v2 (deprecated; security issues) to github.com/go-jose/go-jose/v4
  • Bump github.com/traefik/traefik/v2 to v2.11.0 (some changes in API needed)

Some minor updates:

  • Go 1.22.1
  • Bump github.com/sirupsen/logrus to v1.9.3
  • Bump github.com/stretchr/testify to v1.9.0
  • Bump golang.org/x/oauth2 to v0.18.0
@j6b72
Copy link

j6b72 commented Apr 30, 2024

Thank you for your work! I hope this gets merged soon...

@clambin
Copy link
Author

clambin commented May 2, 2024

@j6b72: thanks! it's not looking good though, is it? :)

tbh, running 3y old security components made me a bit nervous, so I wrote my own version of this: https://github.com/clambin/traefik-simple-auth. I only covered the things I need, and not looking to support a big user base. But if you want, feel free to give it a try.

@toxic0berliner
Copy link

I fear as you it's safer to turn to something else. I picked authelia and am happy with it if that helps others choose

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

3 participants