You'll noticeTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
Gateway ProxyArea: what it touches
ImprovementsKind: in v2.1.314,
ImprovementsSection of the release
What
The gateway can sign people in through an identity provider (IdP), the service that confirms who someone is. When a login is refreshed, the IdP may leave out the list of groups the person belongs to. If some upstreams need those groups, the gateway now logs an info message instead of silently leaving the groups empty. Upstreams are the services the gateway forwards requests to.
The message suggests setting oidc.userinfo_fallback: true if your IdP leaves groups out of the refreshed id_token. An id_token is the signed record of who the person is.
Why
Gateway admins get a clue when an upstream stops being served after a login refresh, and can fix it without guessing.
