kubelogin

• 79d8056 Check nonce of ID token in the authorization code flow (#112)
• ce61e09 Refresh the ID token if it has expired (#108)
• 391754e Cache oidc.Provider to reduce discovery requests (#107)

• 5063550 Add resource owner password credentials grant support (#87) (thanks @heikoettelbruecksap, @evgenyidf)
• f0cff5a Add password prompt (#91)
• ebe5fea Add transparently login feature (#95) (experimental)

• 93bb1d3 Add fallback ports for local server (#79)
• f2de8dd Refactor log messages and etc. (#77)
• 915fb35 Raise error on invalid certificate (as kubectl) (#73)
• 45f83b0 Add multiple kubeconfig support (#70) (thanks @creation-shin-chan)
• 83f85a9 Dump all claims of ID token to debug log (#68) (thanks @sstarcher)
• 072bee6 Add --certificate-authority option (#67)
• 5c07850 Add --user option (#66)
• 5c8c80f Add --context option (#65)

Breaking changes

• Port 18000 will be used instead if port 8000 is not available. You may need to add http://localhost:18000 to redirect URIs on the OIDC provider.
• Environment variables $KUBELOGIN_LISTEN_PORT, $KUBELOGIN_INSECURE_SKIP_TLS_VERIFY and $KUBELOGIN_SKIP_OPEN_BROWSER are no longer supported. Use the corresponding options instead.
• Invalid certificates are rejected now. This is same as kubectl.

• fc31d46 Dump all claims of ID token to debug log (#68) (thanks @sstarcher #64)

• 6ca0ee8 Skip login if kubeconfig has valid ID token (#52) (thanks @sstarcher #35)
• 356f0d5 Add debug log feature (#58)
• 5942c82 Fix expected binary name to kubelogin (#57) (thanks @irons)

• 000711f Add support of HTTP_PROXY, HTTPS_PROXY and NO_PROXY (#51)

• 7527737 Add yaml for krew installation (#42)
• 15d4041 HTTPS_PROXY support for kubelogin (#41)
• dbddd6a Rename plugin to kubectl oidc-login (#40)

#25 Add kubectl plugin support
b72cb63 Fix up #25

#22 Skip invalid CA certs instead of raising error (see also #20)
#21 Move to Go Modules
#23 Import github.com/int128/oauth2cli

#17 Allow to change listening port (by @stang)

#15 Fix refresh token is not set (#11 by @dannyvargas23)
#14 Improve error messages
8b6257d Add Homebrew tap installation

#13 Add extra-scopes support (#8 by @azurewraith)

#12 Add delay before opening browser

#10 Open browser automatically on authentication (#7 by @henricook)

#9 Add support of OIDC CA certificate (#1 by @dodgers, #5 by @azurewraith)

b776bac76451c295afee2eb85f3e751a21cfeb49 Add --insecure-skip-tls-verify option.

Improve user interface (OIDC flow and messages)

Initial release!