Issues

• Tenancy docs: bearer routes forward the tenant as x-cratis-tenant-id too

  Cratis/AuthProxy#190 · Filter by author woksin opened on Oct 7, 2026

• Restrict invitation-page email substitutions to a conservative character set

  Cratis/AuthProxy#189 · Filter by author woksin opened on Oct 6, 2026
  

• Show an error page for 404 when solution is down

  Cratis/AuthProxy#181 · Filter by author cratis-direct opened on Oct 5, 2026
  1

• Allow services using request-derived Arc identity to stop emitting the readable identity cookie

  Cratis/AuthProxy#178 · Filter by author woksin opened on Oct 2, 2026
  

• Align tenant and service header names with Arc defaults (Tenant-ID vs x-cratis-tenant-id, Service-ID vs x-cratis-microservice)

  bug
  Cratis/AuthProxy#154 · Filter by author woksin opened on Sep 29, 2026
  2

  

• Emit OpenTelemetry traces and metrics

  enhancement
  Cratis/AuthProxy#152 · Filter by author woksin opened on Sep 29, 2026
  2

  

• Add a per-service forwarding path allow-list for authenticated routes

  enhancementsecurity
  Cratis/AuthProxy#146 · Filter by author woksin opened on Sep 28, 2026
  

• Validate lobby invitation tokens from published issuer metadata (issuer, audience, JWKS)

  Cratis/AuthProxy#142 · Filter by author woksin opened on Sep 28, 2026
  1

• Sign forwarded identity automatically in trusted AuthProxy–Arc integrations

  Cratis/AuthProxy#139 · Filter by author woksin opened on Sep 27, 2026
  1

  

• Legacy identity key drops provider — same-subject/different-provider collision (product decision)

  bugminor
  Bug

  Cratis/AuthProxy#121 · Filter by author einari opened on Sep 8, 2026

• IdentityDetailsResolver discards the app's roles from /.cratis/me, and the docs claim otherwise

  bug
  Bug

  Cratis/AuthProxy#119 · Filter by author einari opened on Sep 5, 2026
  1

• Readable .cratis-identity cookie not refreshed when the sealed authorization cookie is reused, can display a stale (different) user's name

  bug
  Bug

  Cratis/AuthProxy#115 · Filter by author einari opened on Aug 28, 2026
  2

• Security specs

  security
  Feature

  Cratis/AuthProxy#42 · Filter by author einari opened on Apr 30, 2026
  3