Posts
-
IAP Headers v0.3.0 Released
Introduction On December 14, 2024, we’re pleased to announce the release of IAP Headers v0.3.0. This maintenance release focuses on strengthening the application’s security foundation through dependency updates and CI/CD infrastructure improvements. While it doesn’t introduce new features, it represents an important step in maintaining a secure and reliable tool for developers working with Google Cloud Platform’s Identity-Aware Proxy. What’s New Dependency Updates v0.3.0 includes several important dependency upgrades that improve the application’s security posture: JWT Library Update: The lestrrat-go/jwx/v2...
Read article -
clip4llm v0.0.3: Strengthening Security and Build Infrastructure
Introduction On December 9, 2024, we released clip4llm v0.0.3, a maintenance release focused on strengthening the project’s security foundation and build infrastructure. While this version doesn’t introduce new user-facing features, it represents an important step in maturing our DevSecOps practices and ensuring the highest quality and trustworthiness of our releases. For users downloading pre-built binaries, v0.0.3 is functionally identical to v0.0.2—your workflow continues uninterrupted. For those who build from source, there’s an important update to note regarding Go version requirements....
Read article -
iapheaders v0.2.0: Enhanced Header Verification for GCP IAP
We’re excited to announce the release of iapheaders v0.2.0, published on November 25, 2024. This update brings a significant improvement to how the tool validates Identity-Aware Proxy headers, making it even more reliable for developers debugging GCP IAP configurations. What’s New Cross-Verification of Unsigned Headers The standout feature in v0.2.0 is the new ability to verify that unsigned IAP headers match the claims inside the verified JWT assertion. Previously, the tool would mark headers as “good” simply if they were...
Read article -
Introducing gologhttpbinary: Debug Binary HTTP Payloads with Confidence
A New Tool for HTTP Binary Debugging Today we’re excited to announce the initial release of gologhttpbinary, a lightweight HTTP server designed specifically for developers who need to debug and inspect binary HTTP payloads. Released on November 23, 2024, this tool solves a common pain point in API development: properly capturing and logging binary request bodies like protobufs that traditional tools often mishandle. What’s New As the first public release of gologhttpbinary, version 0.1.0 introduces a purpose-built debugging solution with...
Read article -
firestoreproto2json v0.0.6 Released
We’re pleased to announce the release of firestoreproto2json v0.0.6, published on November 23, 2024. This maintenance release continues our commitment to keeping the library’s dependencies up-to-date and our build infrastructure reliable. What’s New v0.0.6 focuses on dependency updates and build improvements rather than new features. Here’s what changed: Dependency Updates: Lombok upgraded to 1.18.36 JUnit Jupiter API updated to 5.11.3 jsonassertify test library bumped to 0.0.2 Build Infrastructure: Maven Surefire and Javadoc plugins updated for improved test execution and documentation...
Read article -
Introducing kubetogoogleidtoken v0.1.0 - Simplify Kubernetes-to-Google Cloud Authentication
Introducing kubetogoogleidtoken v0.1.0 Released on November 21, 2024, the first public version of kubetogoogleidtoken is now available. This Java library bridges a critical gap for organizations running Kubernetes workloads that need to authenticate with Google Cloud services—providing a clean, developer-friendly API for obtaining Google ID tokens through GCP Workload Identity Federation. For teams operating multi-cloud infrastructure or migrating workloads between clouds, authenticating from Kubernetes to Google APIs has often involved complex token exchange workflows. kubetogoogleidtoken abstracts these complexities into a...
Read article -
simplegoogleidtoken v0.0.5 Released: Improved Reliability and Better Error Handling
We’re excited to announce the release of simplegoogleidtoken v0.0.5, now available on GitHub! This maintenance release, published on November 18, 2024, brings important improvements to error handling and reliability when exchanging Google Cloud Service Account credentials for Google ID tokens. What’s New Enhanced HTTP Connection Handling The standout feature in v0.0.5 is improved HTTP connection handling when communicating with Google’s OAuth token endpoint. The library now: Validates response codes before attempting to read responses, ensuring only successful (HTTP 200) responses...
Read article -
Introducing iapheaders v0.1.0 - A Tool for Debugging GCP IAP Headers
Released: November 16, 2024 We’re excited to announce the launch of iapheaders, a new open-source tool designed to help developers inspect, debug, and understand GCP (Google Cloud Platform) Identity-Aware Proxy (IAP) authentication headers. The initial v0.1.0 release is now available on GitHub. What’s New This inaugural release brings a fully functional web application that makes working with IAP headers straightforward and visual: Real-time IAP Header Inspection — View the three critical IAP headers (x-goog-authenticated-user-email, x-goog-authenticated-user-id, and x-goog-iap-jwt-assertion) as they arrive...
Read article -
Introducing authzgcpk8stokeninjector v0.1.0 - GCP Identity Token Injection for Kubernetes
We’re excited to announce the launch of authzgcpk8stokeninjector v0.1.0, a new open-source tool that brings passwordless authentication from Kubernetes workloads to Google Cloud Platform services. Released on November 13, 2024, this initial release introduces a gRPC-based ExtAuthz service designed to seamlessly inject GCP identity tokens into HTTP requests running in any Kubernetes environment. What’s New This v0.1.0 release marks the first public version of authzgcpk8stokeninjector, introducing several key capabilities: GCP Identity Token Injection The core functionality enables automatic injection of...
Read article -
Announcing gcpidentitytokenportal v0.1.0
We’re excited to announce the launch of gcpidentitytokenportal, now available in its initial release (v0.1.0)! This web portal simplifies obtaining Google Cloud Platform (GCP) identity tokens for developers and administrators who need to test or debug GCP integrations. Released on November 10, 2024, this tool provides a clean, user-friendly interface for vending tokens with flexible audience configuration options. What’s New As the first release of gcpidentitytokenportal, v0.1.0 introduces the complete core functionality that makes GCP token generation accessible through a...
Read article
subscribe via RSS