fiat 0.45.3

• fix(core): Explicitly create ObjectMapper (#235)
• fix(tests): Ensure that the UserRolesSyncer does not run mid-test (#236)

fiat 0.45.2

fix(core): Explicitly create `ObjectMapper` (#235)

This avoids a potential runtime issue wherein there are 3 or more
different object mappers to choose from.

fiat 0.45.1

fix(core): Explicitly create `ObjectMapper` (#235)

This avoids a potential runtime issue wherein there are 3 or more
different object mappers to choose from.

fiat 0.45.0

fix(core): Remove the circular dependency on `clouddriver` (#234)

This PR makes use of the locking support in `kork` and removes a
dependency on `clouddriver:cats-redis`.

Redis usage has migrated to the `RedisClientDelegate` which in theory
opens us up to using dynomite at Netflix.

BREAKING CHANGE

Introduces a new config fiat.writeMode.syncFailureDelayMs as a means
of controlling the lock delay on failure vs success of a sync. This was
previously managed by redis.poll.errorIntervalSeconds.

fiat 0.44.0

feat(api): Support enabling fiat at runtime (#233)

This PR will always register the `FiatAuthenticationFilter` in the
authentication chain _but_ allow for it to be disabled at runtime
depending on the dynamic config service.

The `FiatAuthenticationFilter` has been modified to no-op when
fiat would have previously been disabled.

A metric is also emitted (`fiat.enabled` to track whether fiat is
enabled on a service/instance basis).

fiat 0.43.0

• feat(api): Support running with management.security.enabled: false (#232)

fiat 0.42.1

fix(authn): invalidatePermission from cache

During login we want to read a fresh view of the permission
from fiat to support populating allowed accounts headers.

Also some cleanup in FiatAuthenticationConfig for easier autoconfigging.

fiat 0.42.0

• feat(web): Support defaulting to __unrestricted_user__ when no permissions found (#230)

fiat 0.41.3

fix(hystrix): prevent silent NPE after timeout (#228)

fiat 0.41.2

chore(dependencies): Update spinnaker-dependencies to 0.154.3 (#226)
fix(roles/file): Handle empty file-based roles. (#227)