Issues

• Allow services using request-derived Arc identity to stop emitting the readable identity cookie

  Cratis/AuthProxy#178 · Filter by author woksin opened on Oct 2, 2026
  

• Token forwarding: include the backend destination in the access-token cache key

  Cratis/AuthProxy#177 · Filter by author woksin opened on Oct 2, 2026
  

• Security specs fail on main after host routing and fail-closed identity verification merged

  Cratis/AuthProxy#176 · Filter by author woksin opened on Oct 1, 2026
  

• Align service-routing security fixtures with fail-closed identity verification

  Cratis/AuthProxy#174 · Filter by author woksin opened on Oct 1, 2026
  

• Activity timeout docs range and Unicode host normalisation

  Task

  Cratis/AuthProxy#173 · Filter by author woksin opened on Oct 1, 2026
  

• Document deploying AuthProxy on Azure (App Service, Container Apps) with backend isolation

  documentation
  Cratis/AuthProxy#156 · Filter by author woksin opened on Sep 29, 2026
  

• Align tenant and service header names with Arc defaults (Tenant-ID vs x-cratis-tenant-id, Service-ID vs x-cratis-microservice)

  bug
  Cratis/AuthProxy#154 · Filter by author woksin opened on Sep 29, 2026
  2

  

• Emit OpenTelemetry traces and metrics

  enhancement
  Cratis/AuthProxy#152 · Filter by author woksin opened on Sep 29, 2026
  2

  

• Add a per-service forwarding path allow-list for authenticated routes

  enhancementsecurity
  Cratis/AuthProxy#146 · Filter by author woksin opened on Sep 28, 2026
  

• Validate lobby invitation tokens from published issuer metadata (issuer, audience, JWKS)

  Cratis/AuthProxy#142 · Filter by author woksin opened on Sep 28, 2026
  1

• Sign forwarded identity automatically in trusted AuthProxy–Arc integrations

  Cratis/AuthProxy#139 · Filter by author woksin opened on Sep 27, 2026
  1

  

• Provide invited and asserted email substitutions to invitation pages

  Cratis/AuthProxy#133 · Filter by author woksin opened on Sep 24, 2026

• Resolve canonical identity for OIDC providers in sign-in notification, subject linking and legacy invite exchange

  bugpatch
  Bug

  Cratis/AuthProxy#122 · Filter by author woksin opened on Sep 8, 2026
  2

• Legacy identity key drops provider — same-subject/different-provider collision (product decision)

  bugminor
  Bug

  Cratis/AuthProxy#121 · Filter by author einari opened on Sep 8, 2026

• IdentityDetailsResolver discards the app's roles from /.cratis/me, and the docs claim otherwise

  bug
  Bug

  Cratis/AuthProxy#119 · Filter by author einari opened on Sep 5, 2026
  1

• Readable .cratis-identity cookie not refreshed when the sealed authorization cookie is reused, can display a stale (different) user's name

  bug
  Bug

  Cratis/AuthProxy#115 · Filter by author einari opened on Aug 28, 2026
  2

• Security specs

  security
  Feature

  Cratis/AuthProxy#42 · Filter by author einari opened on Apr 30, 2026
  3