From e434d25f064ce0a1b96f26e955498ba11ff8d8f3 Mon Sep 17 00:00:00 2001 From: Sergiu Ghitea Date: Thu, 4 Nov 2021 09:46:38 +0100 Subject: [PATCH 1/2] Add warning to README --- README.md | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index cf7af3e..6baeb08 100644 --- a/README.md +++ b/README.md @@ -8,6 +8,12 @@ [![Stars](https://img.shields.io/github/stars/auth0/go-jwt-middleware.svg)](https://github.com/auth0/go-jwt-middleware/stargazers) [![Contributors](https://img.shields.io/github/contributors/auth0/go-jwt-middleware)](https://github.com/auth0/go-jwt-middleware/graphs/contributors) +**WARNING**: This branch is a major _BETA_ release that includes breaking changes and thus not production ready - use at your +own risk. Please see [MIGRATION_GUIDE](MIGRATION_GUIDE.md) before upgrading. This release will require changes to your +application. + +--- + Golang middleware to check and validate [JWTs](jwt.io) in the request and add the valid token contents to the request context. @@ -27,7 +33,7 @@ context. ## Installation ```shell -go get github.com/auth0/go-jwt-middleware +go get github.com/auth0/go-jwt-middleware@v2.0.0-beta ``` [[table of contents]](#table-of-contents) From dd54a7cc85e498f1e6ab6025bcf10adf636c4953 Mon Sep 17 00:00:00 2001 From: Sergiu Ghitea Date: Mon, 1 Nov 2021 10:31:09 +0100 Subject: [PATCH 2/2] Add Changelog and release v2.0.0-beta --- CHANGELOG.md | 99 ++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 99 insertions(+) create mode 100644 CHANGELOG.md diff --git a/CHANGELOG.md b/CHANGELOG.md new file mode 100644 index 0000000..ff34288 --- /dev/null +++ b/CHANGELOG.md @@ -0,0 +1,99 @@ +# Change Log + + + +## [v2.0.0-beta](https://github.com/auth0/go-jwt-middleware/tree/v2.0.0-beta) (2021-12-08) + +[Full Changelog](https://github.com/auth0/go-jwt-middleware/compare/v1.0.1...v2.0.0-beta) + +**BEFORE YOU UPGRADE** + +- This is a major release that includes breaking changes. Please see [MIGRATION_GUIDE](MIGRATION_GUIDE.md) before +upgrading. This release will require changes to your application. + +### Added + +* Use github.com/pkg/errors ([#98](https://github.com/auth0/go-jwt-middleware/issues/98)) +* Add a migration guide ([#99](https://github.com/auth0/go-jwt-middleware/issues/99)) +* Add cookie token extractor ([#93](https://github.com/auth0/go-jwt-middleware/issues/93), [#63](https://github.com/auth0/go-jwt-middleware/issues/63)) +* Add token validator using square/go-jose.v2 ([#84](https://github.com/auth0/go-jwt-middleware/issues/84), [#81](https://github.com/auth0/go-jwt-middleware/issues/81), [#79](https://github.com/auth0/go-jwt-middleware/issues/79), [#74](https://github.com/auth0/go-jwt-middleware/issues/74), [#53](https://github.com/auth0/go-jwt-middleware/issues/53)) +* Add allowed signing algorithms in validator ([#128](https://github.com/auth0/go-jwt-middleware/pull/128)) +* Add issuer and audience as required params in validator ([#119](https://github.com/auth0/go-jwt-middleware/pull/119)) +* Add support for jwks + +### Changed + +* Update docs ([#72](https://github.com/auth0/go-jwt-middleware/issues/72)) +* Reorganize imports across the project +* Reorder fields to use less memory +* Split jwtmiddleware into multiple files + +### Breaking + +* Simplify JWT library functionality into an interface ([#77](https://github.com/auth0/go-jwt-middleware/issues/77)) +* Rename Claims to RegisteredClaims in validator pkg +* Refactor main middleware ([#90](https://github.com/auth0/go-jwt-middleware/issues/90), [#51](https://github.com/auth0/go-jwt-middleware/issues/51), [#51](https://github.com/auth0/go-jwt-middleware/issues/52)) +* Write back error messages on DefaultErrorHandler + +### Fixed + +* Fix code smells and code style + + + +## [v1.0.1](https://github.com/auth0/go-jwt-middleware/tree/v1.0.1) (2021-06-21) + +[Full Changelog](https://github.com/auth0/go-jwt-middleware/compare/v1.0.0...v1.0.1) + +### Added + +* Add .github Setup ([#85](https://github.com/auth0/go-jwt-middleware/issues/85)) + +### Changed + +* Update how to handle jwtMiddleware in Martini ([#78](https://github.com/auth0/go-jwt-middleware/issues/78)) +* Isolate example-only dependencies ([#94](https://github.com/auth0/go-jwt-middleware/issues/94)) + +### Fixed + +* Fix broken blog link ([#83](https://github.com/auth0/go-jwt-middleware/issues/83)) + + + +## [v1.0.0](https://github.com/auth0/go-jwt-middleware/tree/v1.0.0) (2021-01-06) + +### Added + +* Add algorithm check as option +* Wrap errors with %w instead of %v ([#68](https://github.com/auth0/go-jwt-middleware/issues/68)) +* Use builtin request context +* Support Go modules ([#65](https://github.com/auth0/go-jwt-middleware/issues/65)) +* Add a simple function for logging +* Add ability to disable auth for preflight requests +* Add JWT Middleware for Go +* Add valid check +* Add a bunch of different ways to extract a token from a request +* Add additional documentation +* Add Martini example +* Add a test case using negroni + +### Changed + +* Update FromAuthHeader to use strings.Fields instead of splitting strings by space to make parsing logic more robust +([#11](https://github.com/auth0/go-jwt-middleware/issues/11)) +* Replace "github.com/codegangsta/negroni" ([#32](https://github.com/auth0/go-jwt-middleware/issues/32)) +* Reformat examples to use new Claims type ([#57](https://github.com/auth0/go-jwt-middleware/issues/57)) +* Refactor code to use logf method +* Disabling auth on OPTIONS now default behavior +* Basic cleanups for golint ([#56](https://github.com/auth0/go-jwt-middleware/issues/56)) + + +### Fixed + +* Fix CredentialsOptional flag being ignored +* Fix the examples + + +### Security + +* Update jwt-go to v4 to address CVE-2020-26160 ([#69](https://github.com/auth0/go-jwt-middleware/issues/69))