changelog

hashicorp · Jun 13, 2024 · 8314eef · 8314eef
1 parent 39ff6b1
commit 8314eef
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,15 @@
 ## Unreleased
 
+## 0.17.4
+
+CHANGES:
+* Revert [GH-295](https://github.com/hashicorp/vault-plugin-auth-jwt/pull/295) which changed the way JWT `aud` claims were validated [GH-308](https://github.com/hashicorp/vault-plugin-auth-jwt/pull/308)
+
+## 0.17.3
+
+IMPROVEMENTS:
+* Invalidate JWT with single non-empty string aud on empty bound audiences https://github.com/hashicorp/vault-plugin-auth-jwt/pull/295
+
 ## 0.17.2
 FIXES:
 * Ensure SIGTSTP is only used in unix builds [[GH-255](https://github.com/hashicorp/vault-plugin-auth-jwt/pull/255)]