Skip to content

Releases: pilinux/gorest

v1.4.4

05 Jun 16:33
3f5700b
Compare
Choose a tag to compare

⚡ gorm postgres driver updated to 1.3.7

⚡ gorm mysql driver updated to 1.3.4

⚡ gorm mongo driver updated to 1.9.1

gorm updated to 1.23.5

Qmgo updated to 1.1.0

v1.4.3

22 Mar 21:09
00a559b
Compare
Choose a tag to compare

⚡ MongoDB driver switched to Qmgo

⚡ Controller examples for MongoDB updated

⚡ Critical security issues (CWE-089, CWE-943) fixed in controller examples

⚡ Code refactored in database config files

v1.4.2

14 Mar 12:42
bcaa297
Compare
Choose a tag to compare

⚡ MongoDB driver added

⚡ Bump to gorm 1.23.2

⚡ Error checks during initialization of redis

⚡ Option to enable/disable RDBMS

v1.4.1

15 Jan 09:55
97860f4
Compare
Choose a tag to compare

⚡ Bump to gorm 1.22.5

⚡ More error checks during gin engine setup

⚡ New action workflows added to examine, build, and static analysis of the code

What's Changed

New Contributors

Full Changelog: v1.4.0...v1.4.1

v1.4.0

07 Jan 23:20
25506bd
Compare
Choose a tag to compare

Breaking changes!! If your application is built on one of the previous releases, you need to do some adjustments to your codes before switching to v1.4.

  • Now it is possible to serve both JSON response and HTML pages (Django-like syntax)
  • To serve HTML pages, the template files must be located in the templates directory
  • Newly added: Basic Auth. Users can use either one of them or both - JWT and Basic Auth
  • At the application level, it is now possible to allow/block requests from user-defined IPs using Firewall

v1.3.1

31 Dec 16:39
e06bef9
Compare
Choose a tag to compare

Critical security holes fixed

  • During the login process, if the provided email is not found, API still tried to search the database. Now it will abandon the operation.
  • Using a valid JWT, one user was able to modify resources related to other users. This issue is now fixed in the controllers.

v1.3.0

28 Dec 10:51
04ec289
Compare
Choose a tag to compare

All features and improvements

  • database drivers included:
    • SQLite3
    • MySQL
    • PostgreSQL
    • Redis
  • RDBMS examples:
    • one to one
    • one to many
    • many to many
  • Redis examples:
    • key:value (CRUD)
    • key:hashes (CRUD)
  • Logger
    • file-system
    • sentry.io
  • Middleware
    • CORS
    • JWT
  • Password hashing algorithm: Argon2id
  • Known security vulnerability: none detected

GORM v1 is replaced by v2

17 Jun 16:33
6f54b91
Compare
Choose a tag to compare

Dependencies

  • github.com/dgrijalva/jwt-go v3.2.0+incompatible
  • github.com/gin-gonic/gin v1.7.2
  • github.com/jinzhu/gorm v1.9.16
  • github.com/joho/godotenv v1.3.0
  • gorm.io/driver/mysql v1.1.0
  • gorm.io/driver/postgres v1.1.0
  • gorm.io/driver/sqlite v1.1.4
  • gorm.io/gorm v1.21.11