Added
- Added configuration for the server shutdown timeout. #2976
Changed
- Made some minor changes in ListObjects to reduce heap allocations. Results in minor latency reduction. #3043
- Improve cache key generation performance by removing
fmtusage and extend control-character sanitization to all cache key inputs (tuples, conditions, context). #3006
Security
- Fixed AuthZEN discovery metadata to publish endpoint URLs from the configured
authzen.baseURLinstead of request-supplied host headers, preventing host-header poisoning of/.well-known/authzen-configuration/{store_id}. - Removed the vulnerable
github.com/docker/dockerpackage (used only in tests) and replaced it with Moby (client & api). #3047
Thanks to @rafanaskin for [#2976] and [#3047]!
Full Changelog: https://github.com/openfga/openfga/compare/v1.14.0...v1.14.1