Issues

• Injection timing tests fail intermittently under CPU load

  o3co/auth.proxy#198 · Filter by author y1o1 opened on Oct 21, 2026

• Configurable server keep-alive timeout, for load balancers whose idle timeout is longer than 5 s

  o3co/auth.proxy#197 · Filter by author y1o1 opened on Oct 21, 2026

• WebSocket: Upgrade is dropped and the handshake goes up as a plain GET

  o3co/auth.proxy#194 · Filter by author y1o1 opened on Oct 21, 2026

• Admission limits: cap in-flight provider calls and upstream requests, revisit the default body limit

  o3co/auth.proxy#193 · Filter by author y1o1 opened on Oct 21, 2026

• Upstream: opt-in response-header timeout and mTLS

  o3co/auth.proxy#192 · Filter by author y1o1 opened on Oct 21, 2026

• Metrics on a separate listener, and trace context on provider calls

  o3co/auth.proxy#191 · Filter by author y1o1 opened on Oct 21, 2026

• Log a completion line per request, and a debug line for a refused CORS origin

  o3co/auth.proxy#190 · Filter by author y1o1 opened on Oct 21, 2026

• Forward-auth front end: answer the mode's decision to an ingress instead of proxying

  o3co/auth.proxy#189 · Filter by author y1o1 opened on Oct 21, 2026

• Validation mode: count introspection against the caller, not the instance

  o3co/auth.proxy#188 · Filter by author y1o1 opened on Oct 21, 2026