v2.11.6

What's Changed

• chore: remove deprected code from example by @shaj13 in #128
• upgraded go-jose library version to mitigate CVE-2024-28180 by @hmgowda in #132

New Contributors

• @hmgowda made their first contribution in #132

Full Changelog: v2.11.5...v2.11.6

v2.11.5

2.11.5 (2022-03-07)

Bug Fixes

• add oauth2 examples [issue ] (62f85b1)

v2.11.4

2.11.4 (2022-02-28)

Chores

• issue 107, fix secretskeeper example to store changes (da9b88a)
• issue 104 to split basic_bearer example into basic and token (5cfc50e)

Bug Fixes

• re-generate x509 test certs [issue 115] (9d1ed1c)

v2.11.3

2.11.3 (2021-03-12)

Chores

• creating a new StaticSecret in jwt example expects an Algorithm instead of a Method (b4ee370)

Bug Fixes

• issue 102 and prevent store user pass in ext (57ca76a)

v2.11.2

2.11.2 (2021-02-28)

Chores

• add github issue template (18d8af4)

Bug Fixes

• suppress jwt code duplication and use internal jwt (751bf61)

v2.11.1

2.11.1 (2021-02-27)

Chores

• fix issue 84 and use EqualFold (c9e7002)
• update circleci configuration (b4513b3)

Bug Fixes

• error ldap already encrypted when tls enabled (d566348)

v2.11.0

2.11.0 (2021-02-26)

Chores

• remove x file (8642557)
• refactor token startegy and consolidate static and cache logic overlaps under single core (1f53240)
• abstract requester marshal unmarshal (3a83a99)
• abstract requester marshal unmarshal (e384b54)
• add internal Requester (#79) (70a0c81)
• remove cache package (3a9dc08)
• update readme (716d43f)
• add /v2 to module (2a7bb72)
• try to fix release slug (8e3ddb3)
• try to fix release slug (09692f7)
• replace goreleaser with go-semantic (54fce01)
• move all parsing logic to internal (ece72c3)
• add kubernetes example (c162da0)
• remove skip publish (7cf9d7a)

Documentation

• update readme (e4b4fcb)
• update readme (59ba7fc)

Feature

• support oauth2 strategies (a597d9d)
• support jwt (2d97a18)
• add 2fa OTP Strategy (339f3cb)
• support kubernetes token review (b4f3bb0)
• add token pkg and support apikey, x header (4a114db)
• replicator cache (29d6874)
• filesystem cache (611491e)
• cache result of basic (d4e6508)
• add LRU cache (9191354)

Bug Fixes

• migrate to a different jwt library (e678879)
• basic bug does not cache info by user name hash (cba155f)
• add x (e733a3d)
• bug extensions clone return same instance (d7c27c0)
• add username hashing (ff9dbb7)
• add hash option to token strategy (61e7326)
• expose extensions clone method (5529aa7)
• improve x509 package and add more options (#78) (4921d95)
• improve jwt errors and validation (086565e)
• claims use jwt.StandardClaims (175ea3f)
• jwt kid type assertion bug (14d0164)
• add expiry date/time to token strategy (f509a3b)
• add lru peek and update (710ff6e)
• add lru update func (b69c1ab)
• remove .goreleaser.yml (8519544)
• refactor fifo tests and add update func (b86e6ae)
• expose otp errors (5661952)
• add Verify skew (a8da708)
• remove tfa package (72594cf)
• add no cache struct (5b73a2a)
• type in twofactor (1447e29)
• option interface honor interface{} instead of startegy for more flexibility (091444e)
• expose helper func to store/get user info in/from ctx (c31102b)
• cached basic strategy store pass as plain text unless user provide hashing algo (b0bb6af)
• support sem versioning and auto release (14a790e)
• deprecate bearer strategy (ffa0a71)
• add set WWW-Authenticate header (3f670b1)
• support gob/json Marshaling/Unmarshaling (9ec8cf3)
• expose cache keys (445b5fd)
• add fifo tests (1fd9228)
• remove sync.Map from authenticator and make it not safe for concurrent ac (512fa4b)

Code Refactoring

• basic and support custom password compare (ed638f8)
• move tfa to otp and enhance API (c220d5c)

Tests

• fix issue 40 (6ac97fb)
• fix misstake in test table for seesion (d872e60)

v2.10.0

2.10.0 (2021-02-26)

Feature

• support oauth2 strategies (2f5ed2c)

v2.9.0

2.9.0 (2021-02-14)

Chores

• remove x file (8642557)
• refactor token startegy and consolidate static and cache logic overlaps under single core (1f53240)
• abstract requester marshal unmarshal (3a83a99)
• abstract requester marshal unmarshal (e384b54)
• add internal Requester (#79) (70a0c81)
• remove cache package (3a9dc08)
• update readme (716d43f)
• add /v2 to module (2a7bb72)
• try to fix release slug (8e3ddb3)
• try to fix release slug (09692f7)
• replace goreleaser with go-semantic (54fce01)
• move all parsing logic to internal (ece72c3)
• add kubernetes example (c162da0)
• remove skip publish (7cf9d7a)

Documentation

• update readme (e4b4fcb)
• update readme (59ba7fc)

Feature

• support jwt (2d97a18)
• add 2fa OTP Strategy (339f3cb)
• support kubernetes token review (b4f3bb0)
• add token pkg and support apikey, x header (4a114db)
• replicator cache (29d6874)
• filesystem cache (611491e)
• cache result of basic (d4e6508)
• add LRU cache (9191354)

Bug Fixes

• migrate to a different jwt library (e678879)
• basic bug does not cache info by user name hash (cba155f)
• add x (e733a3d)
• bug extensions clone return same instance (d7c27c0)
• add username hashing (ff9dbb7)
• add hash option to token strategy (61e7326)
• expose extensions clone method (5529aa7)
• improve x509 package and add more options (#78) (4921d95)
• improve jwt errors and validation (086565e)
• claims use jwt.StandardClaims (175ea3f)
• jwt kid type assertion bug (14d0164)
• add expiry date/time to token strategy (f509a3b)
• add lru peek and update (710ff6e)
• add lru update func (b69c1ab)
• remove .goreleaser.yml (8519544)
• refactor fifo tests and add update func (b86e6ae)
• expose otp errors (5661952)
• add Verify skew (a8da708)
• remove tfa package (72594cf)
• add no cache struct (5b73a2a)
• type in twofactor (1447e29)
• option interface honor interface{} instead of startegy for more flexibility (091444e)
• expose helper func to store/get user info in/from ctx (c31102b)
• cached basic strategy store pass as plain text unless user provide hashing algo (b0bb6af)
• support sem versioning and auto release (14a790e)
• deprecate bearer strategy (ffa0a71)
• add set WWW-Authenticate header (3f670b1)
• support gob/json Marshaling/Unmarshaling (9ec8cf3)
• expose cache keys (445b5fd)
• add fifo tests (1fd9228)
• remove sync.Map from authenticator and make it not safe for concurrent ac (512fa4b)
• rename NewCachedToken to New (a69cb5e)

Code Refactoring

• basic and support custom password compare (ed638f8)
• move tfa to otp and enhance API (c220d5c)

Tests

• fix issue 40 (6ac97fb)
• fix misstake in test table for seesion (d872e60)

v2.8.3

2.8.3 (2021-02-14)

Chores

• remove x file (8642557)

Bug Fixes

• migrate to a different jwt library (25a23b7)