What's Changed
- Avoid use both futures_core and futures_util by @chrislearn in #1299
- Add unit tests for DiskStore and related components by @chrislearn in #1300
- Add more unit tests by @chrislearn in #1301
- docs(jwt-auth): add security warning about JWT tokens in URL query by @chrislearn in #1302
- security(csrf): remove sensitive token values from logs by @chrislearn in #1305
- security(csrf): prevent timing attacks in bcrypt CSRF verification by @chrislearn in #1304
- fix(basic-auth): use proper UTF-8 decoding for credentials by @chrislearn in #1303
- feat(rate-limiter): add RealIpIssuer for proxy environments by @chrislearn in #1306
- fix(core): add logging for temporary upload file cleanup failures by @chrislearn in #1307
- docs(cors): add security warnings for permissive configurations by @chrislearn in #1308
- security(session): add warning for short secret keys by @chrislearn in #1309
- security(tus): add upload ID and path validation functions by @chrislearn in #1310
- security(serve-static): enhance path traversal protection by @chrislearn in #1311
- docs: fix shell commands for Windows compatibility by @chrislearn in #1312
- test(acme): add comprehensive unit tests for acme module by @chrislearn in #1314
- test(oapi-macros): add comprehensive unit tests for oapi-macros module by @chrislearn in #1315
- test(jwt-auth): add comprehensive unit tests for jwt-auth module by @chrislearn in #1313
- refactor: performance optimizations by @chrislearn in #1316
- docs: update README and examples for new port configuration and features by @chrislearn in #1317
Full Changelog: v0.89.0...v0.89.1