Issues

• security: make identity reservation and YAML policy parsing fail closed

  buggo
  Altinity/altinity-oauth-helper#71 · Filter by author BorisTyshkevich opened on Sep 30, 2026

• security: prevent unauthenticated LDAP requests from exhausting connection slots

  buggo
  Altinity/altinity-oauth-helper#70 · Filter by author BorisTyshkevich opened on Sep 30, 2026

• security: coalesce and rate-limit JWKS refreshes after unknown kid

  buggo
  Altinity/altinity-oauth-helper#69 · Filter by author BorisTyshkevich opened on Sep 30, 2026

• security: bound verification-cache memory for oversized username aliases

  buggo
  Altinity/altinity-oauth-helper#68 · Filter by author BorisTyshkevich opened on Sep 30, 2026

• ADR: Own the ClickHouse LDAP compatibility profile and remove general LDAP dependencies

  adr
  Altinity/altinity-oauth-helper#32 · Filter by author BorisTyshkevich opened on Aug 29, 2026
  1

• LDAPS/TLS auth-proxy deployment mode: standalone ch-oauth-ldap on customer premises for any ClickHouse's native LDAP auth

  Altinity/altinity-oauth-helper#31 · Filter by author BorisTyshkevich opened on Aug 29, 2026

• ClickHouse version compatibility: track upstream external-role fixes (#79099, #116840) and restore full 24.8 Altinity Stable support

  Altinity/altinity-oauth-helper#30 · Filter by author BorisTyshkevich opened on Aug 29, 2026
  1

• ADR: Separate ClickHouse edge protection from OAuth authorization

  adr
  Altinity/altinity-oauth-helper#17 · Filter by author BorisTyshkevich opened on Aug 27, 2026

• ADR: Add LDAP↔OAuth bridge for ephemeral ClickHouse users and dynamic role mapping

  adr
  Altinity/altinity-oauth-helper#16 · Filter by author BorisTyshkevich opened on Aug 27, 2026