OPA v1.15.0 adds pluggable logging and AWS web-identity signing support, changes the custom HTTPAuthPlugin lifecycle contract, and adds TLS certificate reread configuration. It also includes correctness fixes and dependency updates; no security advisories or vulnerability disclosures are stated.
Check if affected (1)
breakingCustom
HTTPAuthPluginlifecycle contractApplies if you use custom
HTTPAuthPluginimplementations.In v1.15.0, all per-request authentication logic for custom
HTTPAuthPluginimplementations must move fromNewClient()toPrepare().