Fire Arrow 2.5.1
· One min read
Fire Arrow 2.5.1 has been released.
- (bugfix) Refresh Azure Identity key stores on every request
Azure Identity is a variant of the OAuth authentication method. Fire Arrow uses it to authenticate backend services. To validate incoming requests, authentication tokens are cryptographically validated against public keys found in a key store. An implementation difference between OAuth and Azure Identity caused the key stores not to be refreshed for every incoming request, which led to a situation where a client signed their token with a newer key than was known to Fire Arrow.
This release ensures that the key store is always up to date before validating incoming tokens.