IMPORTANT:
- default TLS version is 1.3, this might break your existing deployments so please be careful when deploying
- sha256 is replaced with sha512 for token hashed for storing refresh tokens is redis, so it is not backward compatible
- we are introducing enable-default-deny-strict option which should be favorable compared to enable-default-deny-strict, please read about differences in user guide
Changelog
- a51352d Add enable-default-deny-strict (#180)
- 339fbae Add user docs for enable-default-deny-strict (#181)
- 30e6724 Fix linting varname length (#189)
- f46d3fb Fix refresh token tests (#183)
- 565982c Fix tests (#185)
- 726cc7e Fix tests tmpdir to be cross OS (#186)
- fb8c26a Move errors to package, move storage to pkg (#188)
- 6389b9a Set specific default TLS min version to 1.3 (#184)
- d6a10d4 Update some dependencies (#182)
- b92c703 Use chi gzip middleware (#190)
- 0f8b421 Use sha512 to make token hashes (#187)