On May 7, 2025, we released iapheaders v0.4.2. This maintenance release focuses on bolstering the security foundation of the tool and refining the user experience to ensure that developers can inspect GCP Identity-Aware Proxy (IAP) headers with confidence and clarity.

What’s new

This update brings several key improvements to the stability and usability of iapheaders:

  • UI & Documentation Polish: We’ve refined the interface for better clarity, including a new page title (“GCP Identity-Aware Proxy Headers”) and more descriptive status messages. When your headers are correct, you’ll now see the explicit confirmation: “All IAP headers are present and the JWT is verified.” Additionally, the documentation for the HIDE_SIGNATURE configuration has been improved to help you manage your view more effectively.
  • Critical Security Updates: Security is paramount when dealing with JWT verification. This release updates the jwx library for JWT handling and the x/crypto package, ensuring the application uses the latest cryptographic standards and security fixes.
  • Toolchain Upgrade: We have upgraded the underlying Go runtime to version 1.24.3, providing the latest performance and stability improvements from the Go ecosystem.

Why it matters

While this release doesn’t introduce new functional features, it addresses the “invisible” but essential aspects of software health. By updating core cryptographic libraries, we ensure that the validation of IAP assertions remains robust against emerging threats. The UI refinements remove ambiguity, allowing security engineers and developers to verify their IAP configurations at a glance without guessing what a status message implies.

Getting Started

There are no breaking changes in this release, and no manual migration is required. To upgrade to v0.4.2, simply pull the latest Docker image from GitHub Packages:

ghcr.io/unitvectory-labs/iapheaders

This post was AI-generated using the model unsloth/gemma-4-31B-it-GGUF:UD-Q5_K_XL. It is based on the release v0.4.2 of the iapheaders repository, generated on April 12, 2026. Author: release-storyteller