Milos Gajdos 52d68216c0 feature: Bump go-jose and require signing algorithms in auth ... This bumps go-jose to the latest available version: v4.0.3. This slightly breaks the backwards compatibility with the existing registry deployments but brings more security with it. We now require the users to specify the list of token signing algorithms in the configuration. We do strive to maintain the b/w compat by providing a list of supported algorithms, though, this isn't something we recommend due to security issues, see: * https://github.com/go-jose/go-jose/issues/64 * https://github.com/go-jose/go-jose/pull/69 As part of this change we now return to the original flow of the token signature validation: 1. X2C (tls) headers 2. JWKS 3. KeyID Signed-off-by: Milos Gajdos <milosthegajdos@gmail.com>		2024-05-30 20:44:35 +01:00
..
content	feature: Bump go-jose and require signing algorithms in auth	2024-05-30 20:44:35 +01:00
data/menu	docs: add github link in header	2023-10-12 10:00:43 +02:00
i18n	Add a trademarks and docs license link	2024-02-06 16:36:46 +00:00
layouts/_default/_markup	docs: fix broken links and improve link resolution	2024-01-14 21:33:55 +01:00
static	docs: remove unused images	2023-10-26 13:04:56 +02:00
themes/hugo-geekdoc	docs: add hugo site	2023-10-11 16:45:16 +02:00
.htmltest.yml	docs: add tests	2023-10-12 09:32:55 +02:00
dockerhub.md	update: readme cleanup and fxes	2023-12-21 22:05:56 +00:00
hugo.yaml	Add a trademarks and docs license link	2024-02-06 16:36:46 +00:00