v1.0.4

Added Cross Site Request Forgery (XSRF) protection to the UI.

RESTful requests now must add both X-XSRF-TOKEN cookie and X-XSRF-TOKEN header.

See README.md for example.

v1.0.3

Added support for external IAM via trusted header.

Example in your application.properties:

Allow users identified by x-user

authentication.mode=request-header
request-header.name.username=x-user
#request-header.name.group=x-group
request-header.group.admin.name=$any
request-header.group.viewer.name=$any

Allow users identified by x-user and group identified by x-group

authentication.mode=request-header
request-header.name.username=x-user
request-header.name.group=x-group
request-header.group.admin.name=my_iam_role_admin
request-header.group.viewer.name=my_iam_role_viewer
# Requests with heders: x-user: steve, x-group: my_iam_abc,my_iam_role_admin will be allowed full access

v1.0.2

Added certificate renewal support.

Now you can

POST /ca/<ca-id>/cert/<cert-id>/<days>

With no body to renew the certificate represented by <cert-id> under ca <ca-id> for <days> days!

v1.0.1

We merged UI files as static files into the Springboot jar. Now the application is a monolithic app.

v1.0.0

The initial release of the minica program