Releases · leodip/goiabada

In JWT middleware, the check for token expiration is no longer including the refresh token (fixes a bug in token refresh).
When accessing the Account area, it's now requesting the 'admin' scope, so that if the user is an admin, the admin area will be accessible for them.
Added a background worker service that will clean up old/unnecessary DB data.
Fixed empty brackets in the UI for 'grant permission to user'
When the issuer changes, in settings, the user is now being warned, and logged out.
Updated docs and dependencies.

Docker images available here.

Assets 7

27 Oct 17:29

leodip

v0.7

d150e3d

Release 0.7 Pre-release

Pre-release

This release includes significant refactoring and various bug fixes.

We've split the application into two components - authserver and adminconsole. This separation adds flexibility for potentially migrating the admin console to a different frontend technology in the future.

Please note that configuration variables have been updated. Have a look at the docs.

A lot of automated tests have been added, bringing test coverage to a high level.

We’re approaching the first official release and don’t anticipate any breaking changes going forward unless there's a strong reason to do.

Docker images available here.

Assets 7

02 Jun 17:31

leodip

v0.6

8502cfd

Release 0.6 Pre-release

Pre-release

Fixed a bug where the application crashed when admin was searching for members of a group.
Improved error message when there's a panic.
Added integration tests.
Bumped dependencies.
Other minor UI/text updates.

Assets 4

24 Feb 21:39

leodip

v0.5

e90ac93

Release 0.5 Pre-release

Pre-release

Removed GORM. It's a great library, but it was causing issues while I was trying to add support to Microsoft SQL server. Some of the update statements generated by GORM were huge, and the MSSQL engine was unable to process them. I think having control over the generated SQL is more important than the development convenience given by GORM.
Added an HTTP rate limiter, to enhance security against brute force attacks.
Improved errors output in the console log. They will now show the stack trace, to help with troubleshooting.
Replaced the HTML sanitization library for better protection against XSS.
Introduced max length for password, and max string length for some user-agent strings, for security (thanks @aboyadzhiev).
Updated docs.
Added more integration tests.
Bumped dependencies.
Changed the Goiabada version schema. We're cutting out the middle number, so from v0.0.4 we're jumping to v0.5.

Breaking change ⚠️

The GORM dependency removal involved some serious refactoring. As part of that, the DB schema has changed and Goiabada won't migrate it automatically from v0.0.4 to this release. The next releases will support automatic migrations, but not this one.

To mitigate issues for current users, I'm making available two SQL scripts (for MySQL and SQLite). You can use the scripts to migrate the database schema if you need to keep your v0.0.4 data in this new version. The scripts are attached to this release.