Repository Issue Activity (beta)

#669 feat: Enrich auth pipeline trace spans with decision attributes and per-evaluator child spans

#663 Evaluator cache stampede prevention

#607 TelemetryPolicy does not parse CEL and fails on Authorino

#664 feat(jwt): validate the aud (audience) claim on authentication.jwt

#656 Add `checkIssuerClaim` to enforce the JWT `iss` claim on the `issuerUrl` path

#614 API key authentication 2.0

#651 OAuth2 token introspection panics and crashes the whole Authorino process on a non-200 / missing-`active` introspection response

#649 Authorization fails open (silent ALLOW) when the request context times out mid-pipeline

#546 Migrate to opa v1.x

#641 Remove hardcoded Go version from docs

#628 Completely remove deprecated AuthConfig CRD v1beta2 version

#627 OLM upgrade blocked by v1beta2 oneOf validation rejecting CEL predicate conditions

#599 Add CRD XValidation rules for mutually exclusive fields in AuthConfig

#620 Add configurable HTTP client timeouts to AuthConfig

#619 Validate URLs in metadata and callback evaluators to prevent malformed URLs

#564 Add AGENTS.md

#617 Sensitive credentials logged in debug mode without redaction

#555 Enable using data race detector for testing

#605 Support public-key-only Secrets in wristband `signingKeyRefs` for verification

#584 [GRPCRoute] gRPC Well-Known Attributes

#460 Add vX.Y tags to releases

#459 Build and push vX.Y tags

#350 Refactor structs guarded by mutexes

#418 Setup CodeCov integration

#601 Test issue - hook trigger verification (delete me)