Forward Auth Changelog
Released changes to the Forward Auth plugin (`forward-auth`), newest release first.
17 released changes name forward-auth, newest release first — 8 in Apache APISIX, 9 in API7 Gateway. Each row links to the change itself.
| Release | Date | Type | Change |
|---|
| 3.10.3 (opens in API7 Gateway docs) | 2026-07-14 | Fix | Fixed issue: When request_method was POST, the authorization request could forward the client's Transfer-Encoding, Content-Length, and Expect headers after the body had already been buffered, producing inconsistent re… (opens in API7 Gateway docs) |
| 3.10.1 (opens in API7 Gateway docs) | 2026-06-15 | Change | forward-auth, ai-proxy, ai-proxy-multi: the body is limited by a new max_req_body_size option (default 67108864 bytes, i.e. 64 MiB); requests over the limit are rejected with HTTP 413. (opens in API7 Gateway docs) |
| 3.9.16 (opens in API7 Gateway docs) | 2026-07-10 | Fix | Fixed issue: When request_method was POST, the authorization request could forward the client's Transfer-Encoding, Content-Length, and Expect headers after the body had already been buffered, producing inconsistent re… (opens in API7 Gateway docs) |
| 3.9.9 (opens in API7 Gateway docs) | 2026-04-10 | Fix | Fixed issue: When the auth service responded with HTTP 200 but omitted a header listed in upstream_headers, the original client-supplied value was forwarded to the upstream instead of being cleared. This could allow c… (opens in API7 Gateway docs) |
| 3.8.7 (opens in API7 Gateway docs) | 2025-07-17 | Fix | Fixed issue: Forwarding POST requests with forward-auth plugin may result in 504 errors caused by the request body being lost. Resolved by introducing extra_headers. (opens in API7 Gateway docs) |
| 3.4.0 (opens in API7 Gateway docs) | 2025-01-07 | Feature | Added exception configuration status_on_error. (opens in API7 Gateway docs) |
| 3.4.0 (opens in API7 Gateway docs) | 2025-01-07 | Fix | Fixed issue: Plugin does not work if the request is POST and authentication service API is GET. (opens in API7 Gateway docs) |
| 3.4.0 (opens in API7 Gateway docs) | 2025-01-07 | Fix | Fixed issue: Request body is too large. (opens in API7 Gateway docs) |
| 3.4.0 (opens in API7 Gateway docs) | 2025-01-07 | Feature | Supported degradation.. (opens in API7 Gateway docs) |
