Releases: pilinux/gorest
Releases · pilinux/gorest
v1.4.4
v1.4.3
v1.4.2
v1.4.1
⚡ Bump to gorm 1.22.5
⚡ More error checks during gin engine setup
⚡ New action workflows added to examine, build, and static analysis of the code
What's Changed
- Bump gorm.io/driver/mysql from 1.2.2 to 1.2.3 by @dependabot in #8
- Bump gorm.io/gorm from 1.22.4 to 1.22.5 by @dependabot in #9
New Contributors
- @dependabot made their first contribution in #8
Full Changelog: v1.4.0...v1.4.1
v1.4.0
Breaking changes!! If your application is built on one of the previous releases, you need to do some adjustments to your codes before switching to v1.4.
- Now it is possible to serve both JSON response and HTML pages (Django-like syntax)
- To serve HTML pages, the template files must be located in the
templates
directory - Newly added:
Basic Auth
. Users can use either one of them or both -JWT
andBasic Auth
- At the application level, it is now possible to allow/block requests from user-defined IPs using
Firewall
v1.3.1
Critical security holes fixed
- During the login process, if the provided email is not found, API still tried to search the database. Now it will abandon the operation.
- Using a valid JWT, one user was able to modify resources related to other users. This issue is now fixed in the controllers.
v1.3.0
All features and improvements
- database drivers included:
- SQLite3
- MySQL
- PostgreSQL
- Redis
- RDBMS examples:
- one to one
- one to many
- many to many
- Redis examples:
- key:value (CRUD)
- key:hashes (CRUD)
- Logger
- file-system
- sentry.io
- Middleware
- CORS
- JWT
- Password hashing algorithm:
Argon2id
- Known security vulnerability: none detected
GORM v1 is replaced by v2
Dependencies
- github.com/dgrijalva/jwt-go v3.2.0+incompatible
- github.com/gin-gonic/gin v1.7.2
- github.com/jinzhu/gorm v1.9.16
- github.com/joho/godotenv v1.3.0
- gorm.io/driver/mysql v1.1.0
- gorm.io/driver/postgres v1.1.0
- gorm.io/driver/sqlite v1.1.4
- gorm.io/gorm v1.21.11