Issues

• Consolidate pull request verification behind a fail-closed gate

  Task

  Cratis/AuthProxy#320 · Filter by author woksin opened on Nov 11, 2026
  

• Code Health: raise AuthProxy files to 9.5

  Feature

  Cratis/AuthProxy#319 · Filter by author woksin opened on Nov 11, 2026
  

• Forwarded identity v2: PAT, bearer and DPoP adapters

  Task

  Cratis/AuthProxy#294 · Filter by author woksin opened on Nov 9, 2026
  

• Allow a client-credentials prefix and a bearer route on the same path

  Cratis/AuthProxy#288 · Filter by author woksin opened on Nov 8, 2026
  1

  

• Require TLS on identity hops by default

  security
  Task

  Cratis/AuthProxy#272 · Filter by author woksin opened on Nov 8, 2026
  

• External issuer tokens: refuse without a verified tenant constraint, or exchange for a tenant-bound session

  security
  Cratis/AuthProxy#270 · Filter by author woksin opened on Nov 6, 2026
  2

  

• Require HTTPS on every identity-bearing hop regardless of signing

  security
  Bug

  Cratis/AuthProxy#265 · Filter by author woksin opened on Nov 6, 2026
  

• Enforce assurance policy at tenant selection and on sessions

  securitytype: feature
  Cratis/AuthProxy#261 · Filter by author woksin opened on Nov 5, 2026
  

• DPoP verification at the edge

  securitytype: feature
  Cratis/AuthProxy#258 · Filter by author woksin opened on Nov 5, 2026
  

• Credential dispatch on machine routes with no fallback

  securitytype: feature
  Cratis/AuthProxy#257 · Filter by author woksin opened on Nov 5, 2026
  3

  

• Local projection of Access facts at the edge with policy epochs

  securitytype: feature
  Cratis/AuthProxy#255 · Filter by author woksin opened on Nov 5, 2026
  

• Sign forwarded identity with envelope v2 (ES256)

  securitytype: feature
  Cratis/AuthProxy#254 · Filter by author woksin opened on Nov 5, 2026
  1

  

• Authenticated TLS on every AuthProxy-to-backend hop

  securitytype: feature
  Task

  Cratis/AuthProxy#251 · Filter by author woksin opened on Nov 5, 2026
  

• Per-app signing keys and audiences for forwarded identity

  securitytype: feature
  Cratis/AuthProxy#250 · Filter by author woksin opened on Nov 5, 2026
  

• W1: signed identity and authorization hardening

  security
  Cratis/AuthProxy#249 · Filter by author woksin opened on Nov 5, 2026
  

• Sign forwarded identity automatically in trusted AuthProxy–Arc integrations

  Task

  Cratis/AuthProxy#139 · Filter by author woksin opened on Sep 27, 2026
  3