release: v1.7.0 (coordinated lockstep bump)

release: v1.6.0 (coordinated lockstep bump)
chore(auth): framework version alignment to v1.5.0
2026-08-18 17:58:31 -06:00 · 2026-08-13 23:13:56 -06:00 · 2026-08-12 17:57:26 -06:00 · 2026-08-12 15:31:32 -06:00 · 2026-08-08 10:50:05 -06:00 · 2026-08-08 02:26:29 -06:00
4 changed files with 91 additions and 30 deletions
@@ -1,5 +1,61 @@
 # Changelog

+## [1.7.0] — 2026-08-14
+
+Minor — coordinated framework release (lockstep versioning). No changes to this module's own API.
+
+### Changed
+
+- Bumped einherjar dependencies to v1.7.0. The behavioural changes in this release are in `spa-server`
+  (per-file Cache-Control, a navigation-scoped SPA fallback, nosniff, and a non-root image).
+
+## [1.6.0] — 2026-08-13
+
+Minor — coordinated framework release (lockstep versioning). No changes to this module's own API.
+
+### Changed
+
+- Bumped einherjar dependencies to v1.6.0. The framework-wide change in this release is
+  `web`'s new `httputil.Bind` / `httputil.BindEmpty` request-binding adapters.
+
+## [1.5.0] — 2026-08-09
+
+Minor — coordinated framework version alignment. No code or API changes in this module.
+
+### Changed
+
+- Bumped `contracts`, `core`, `web` to v1.5.0.
+
+## v1.1.3 — 2026-08-08
+
+Patch — coordinated framework version alignment. Bumped einherjar dependencies (\`contracts\`, \`core\`, \`web\`) to v1.1.3.
+No code or API changes.## v1.1.2 — 2026-08-08
+
+Patch — documentation fix plus coordinated framework version alignment.
+
+### Fixed
+
+- README wiring example: `rbac.NewClaimsPermissionProvider("perms", authmw.GetClaims)` (was
+  missing the `getClaims` argument); install line updated to v1.1.2.
+
+### Changed
+
+- Bumped `contracts`, `core`, `web` to v1.1.2.
+
+## v1.1.1 — 2026-08-07
+
+Patch — coordinated framework version alignment. Bumped `contracts`, `core`, `web` to v1.1.1.
+No code or API changes.
+
+## v1.1.0 — 2026-08-07
+
+Coordinated framework version alignment — released in lockstep at v1.1.0.
+
+### Changed
+
+- Bumped einherjar dependencies (`contracts`, `core`, `web`) to v1.1.0 via `go get` + `go mod tidy`.
+  No code or API changes.
+
 ## v1.0.0

 Initial release.
@@ -1,6 +1,6 @@
 # einherjar/auth

-[![version](https://img.shields.io/badge/version-v1.0.0-5C4EE5?style=flat-square)](https://code.nochebuena.dev/einherjar/auth)
+[![version](https://img.shields.io/badge/version-v1.7.0-5C4EE5?style=flat-square)](https://code.nochebuena.dev/einherjar/auth)
 [![license](https://img.shields.io/badge/license-AGPL--3.0-22863A?style=flat-square)](LICENSE)
 [![go](https://img.shields.io/badge/Go-1.26+-00ADD8?style=flat-square&logo=go&logoColor=white)](https://go.dev)

@@ -40,7 +40,7 @@ enricher := userservice.NewIdentityEnricher(userRepo)

 // Build permission resolution chain.
 permissions := rbac.NewChainPermissionProvider(
-    rbac.NewClaimsPermissionProvider("perms"),                                // JWT fast-path
+    rbac.NewClaimsPermissionProvider("perms", authmw.GetClaims),               // JWT fast-path
    rbac.NewCachedPermissionProvider(dbProvider, valkeyCache, 5*time.Minute), // DB fallback
 )

@@ -128,5 +128,5 @@ None. Auth middleware is wired in code, not configured via environment.
 ## Install

 ```bash
-go get code.nochebuena.dev/einherjar/auth@v1.0.0
+go get code.nochebuena.dev/einherjar/auth@v1.1.2
 ```
@@ -3,18 +3,19 @@ module code.nochebuena.dev/einherjar/auth
 go 1.26

 require (
-	code.nochebuena.dev/einherjar/contracts v1.0.0
-	code.nochebuena.dev/einherjar/core v1.0.0
-	code.nochebuena.dev/einherjar/web v1.0.0
+	code.nochebuena.dev/einherjar/contracts v1.7.0
+	code.nochebuena.dev/einherjar/core v1.7.0
+	code.nochebuena.dev/einherjar/web v1.7.0
 )

 require (
-	github.com/gabriel-vasile/mimetype v1.4.12 // indirect
+	github.com/gabriel-vasile/mimetype v1.4.15 // indirect
+	github.com/go-chi/chi/v5 v5.3.1 // indirect
 	github.com/go-playground/locales v0.14.1 // indirect
 	github.com/go-playground/universal-translator v0.18.1 // indirect
-	github.com/go-playground/validator/v10 v10.30.1 // indirect
-	github.com/leodido/go-urn v1.4.0 // indirect
-	golang.org/x/crypto v0.46.0 // indirect
-	golang.org/x/sys v0.39.0 // indirect
-	golang.org/x/text v0.32.0 // indirect
+	github.com/go-playground/validator/v10 v10.30.3 // indirect
+	github.com/leodido/go-urn v1.5.0 // indirect
+	golang.org/x/crypto v0.55.0 // indirect
+	golang.org/x/sys v0.47.0 // indirect
+	golang.org/x/text v0.41.0 // indirect
 )
@@ -1,32 +1,36 @@
-code.nochebuena.dev/einherjar/contracts v1.0.0 h1:hRudEtOIqU7vwedYLsCh8+9q5dCnKb61qX+zibqImRU=
-code.nochebuena.dev/einherjar/contracts v1.0.0/go.mod h1:ccltUtrFb5+MEJdkx2VVEUL+xC5pupVlVVsMM8AlCWI=
-code.nochebuena.dev/einherjar/core v1.0.0 h1:AueZgfjp3+rQmDKOxmJQ945TTh+sqC1l/xJdTOdbr9w=
-code.nochebuena.dev/einherjar/core v1.0.0/go.mod h1:0IywfRnJXX9xXQO6iPVaq2QDlXbbpXrB8A4T7gO8nE4=
-code.nochebuena.dev/einherjar/web v1.0.0 h1:OaHfDP2vNlnPTsWfmf1GRvl5EWMhCgIxHkEwYg8qH3Y=
-code.nochebuena.dev/einherjar/web v1.0.0/go.mod h1:2dbELcS5G1T1+YDAUt4hfn3wg+EmbJ7HOrKSo01CRQE=
+code.nochebuena.dev/einherjar/contracts v1.7.0 h1:yhbtmvE8u6KXcuG95p888+4tDIiTXDf5z/siKrjGbrc=
+code.nochebuena.dev/einherjar/contracts v1.7.0/go.mod h1:ccltUtrFb5+MEJdkx2VVEUL+xC5pupVlVVsMM8AlCWI=
+code.nochebuena.dev/einherjar/core v1.7.0 h1:gdjNEgO8E/ALppyBldj27iKQQlWbL/OWV6asdxWLXqU=
+code.nochebuena.dev/einherjar/core v1.7.0/go.mod h1:IvSCG7XL4gNyoylwlClKj3jepWBLAKb2QKAgumTRkug=
+code.nochebuena.dev/einherjar/web v1.7.0 h1:oYhU6st1uySbJI58RLrPflwwSZbUdIRd1Z0YM1L1rkk=
+code.nochebuena.dev/einherjar/web v1.7.0/go.mod h1:3eVd92LyLxViCHZB64zHzN5WSiNIk5i4IIMZTodUPNI=
 github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
-github.com/gabriel-vasile/mimetype v1.4.12 h1:e9hWvmLYvtp846tLHam2o++qitpguFiYCKbn0w9jyqw=
-github.com/gabriel-vasile/mimetype v1.4.12/go.mod h1:d+9Oxyo1wTzWdyVUPMmXFvp4F9tea18J8ufA774AB3s=
+github.com/gabriel-vasile/mimetype v1.4.15 h1:05iP/CYtZ/w455R/KZM6rZ5ieAdh99UPtd+d3YzLmaI=
+github.com/gabriel-vasile/mimetype v1.4.15/go.mod h1:azpTcoLcDZRNgFou5j+APrqQx9HqVPWa6ijYQIIVswQ=
+github.com/go-chi/chi/v5 v5.3.1 h1:3j4HZLGZQ3JpMCrPJF/Jl3mYJfWLKBfNJ6quurUGCf8=
+github.com/go-chi/chi/v5 v5.3.1/go.mod h1:R+tYY2hNuVUUjxoPtqUdgBqevM9s9njzkTLutVsOCto=
 github.com/go-playground/assert/v2 v2.2.0 h1:JvknZsQTYeFEAhQwI4qEt9cyV5ONwRHC+lYKSsYSR8s=
 github.com/go-playground/assert/v2 v2.2.0/go.mod h1:VDjEfimB/XKnb+ZQfWdccd7VUvScMdVu0Titje2rxJ4=
 github.com/go-playground/locales v0.14.1 h1:EWaQ/wswjilfKLTECiXz7Rh+3BjFhfDFKv/oXslEjJA=
 github.com/go-playground/locales v0.14.1/go.mod h1:hxrqLVvrK65+Rwrd5Fc6F2O76J/NuW9t0sjnWqG1slY=
 github.com/go-playground/universal-translator v0.18.1 h1:Bcnm0ZwsGyWbCzImXv+pAJnYK9S473LQFuzCbDbfSFY=
 github.com/go-playground/universal-translator v0.18.1/go.mod h1:xekY+UJKNuX9WP91TpwSH2VMlDf28Uj24BCp08ZFTUY=
-github.com/go-playground/validator/v10 v10.30.1 h1:f3zDSN/zOma+w6+1Wswgd9fLkdwy06ntQJp0BBvFG0w=
-github.com/go-playground/validator/v10 v10.30.1/go.mod h1:oSuBIQzuJxL//3MelwSLD5hc2Tu889bF0Idm9Dg26cM=
-github.com/leodido/go-urn v1.4.0 h1:WT9HwE9SGECu3lg4d/dIA+jxlljEa1/ffXKmRjqdmIQ=
-github.com/leodido/go-urn v1.4.0/go.mod h1:bvxc+MVxLKB4z00jd1z+Dvzr47oO32F/QSNjSBOlFxI=
+github.com/go-playground/validator/v10 v10.30.3 h1:4MU6YkEwx7GbcPJOZxrtbu+QfF3pJLJuaYTeAH0DYy8=
+github.com/go-playground/validator/v10 v10.30.3/go.mod h1:4Axh7oCNGcoGkqLoE4YWt6n20mcEIsPRlB7vPk3lpyc=
+github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
+github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
+github.com/leodido/go-urn v1.5.0 h1:pLqT2kq1zpHW/1D18QMjMpdtX7cekxqtJJjg5ANyWw0=
+github.com/leodido/go-urn v1.5.0/go.mod h1:9BORnCDhdPBJNDEX+w1bJisa8yOKYi116VeO96s4ifE=
 github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
 github.com/stretchr/testify v1.8.4 h1:CcVxjf3Q8PM0mHUKJCdn+eZZtm5yQwehR5yeSVQQcUk=
 github.com/stretchr/testify v1.8.4/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo=
-golang.org/x/crypto v0.46.0 h1:cKRW/pmt1pKAfetfu+RCEvjvZkA9RimPbh7bhFjGVBU=
-golang.org/x/crypto v0.46.0/go.mod h1:Evb/oLKmMraqjZ2iQTwDwvCtJkczlDuTmdJXoZVzqU0=
-golang.org/x/sys v0.39.0 h1:CvCKL8MeisomCi6qNZ+wbb0DN9E5AATixKsvNtMoMFk=
-golang.org/x/sys v0.39.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
-golang.org/x/text v0.32.0 h1:ZD01bjUt1FQ9WJ0ClOL5vxgxOI/sVCNgX1YtKwcY0mU=
-golang.org/x/text v0.32.0/go.mod h1:o/rUWzghvpD5TXrTIBuJU77MTaN0ljMWE47kxGJQ7jY=
+golang.org/x/crypto v0.55.0 h1:+KWHjbgOaAQ66dh/YlkZKHlz9ZUlq61AFirAR9ntP8M=
+golang.org/x/crypto v0.55.0/go.mod h1:uq0V9dE/fzQuJtbnL+2EhWOE63vo164FY8xqEnV9xis=
+golang.org/x/sys v0.47.0 h1:o7XGOvZQCADBQQ4Y7VNq2dRWQR7JmOUW8Kxx4ZsNgWs=
+golang.org/x/sys v0.47.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=
+golang.org/x/text v0.41.0 h1:vz/seA0lnX87Othu2f/0L24RcgrXD9/YFTSuGjj3rH8=
+golang.org/x/text v0.41.0/go.mod h1:jvf1O8ajNzZqhSrQBPbutR/EB83Cc0CFrezNQIwbb5M=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
Author	SHA1	Message	Date
Rene Nochebuena	2290cad97c	release: v1.7.0 (coordinated lockstep bump)	2026-08-18 17:58:31 -06:00
Rene Nochebuena	2eb0c90212	release: v1.6.0 (coordinated lockstep bump)	2026-08-13 23:13:56 -06:00
Rene Nochebuena	e44581169c	chore(auth): framework version alignment to v1.5.0	2026-08-12 17:57:26 -06:00
Rene Nochebuena	c259e8fad7	chore(auth): dependency refresh; framework version alignment to v1.4.0	2026-08-12 15:31:32 -06:00
Rene Nochebuena	ade34d5ffb	chore(auth): framework version alignment to v1.3.0	2026-08-08 10:50:05 -06:00
Rene Nochebuena	97be926423	chore(auth): framework version alignment to v1.2.0	2026-08-08 02:26:29 -06:00
Rene Nochebuena	514eabbc63	chore(auth): framework version alignment to v1.1.3	2026-08-08 01:27:50 -06:00
Rene Nochebuena	8bc98968ef	docs(auth): fix rbac wiring example; align to v1.1.2	2026-08-08 00:45:16 -06:00
Rene Nochebuena	96d44b37eb	chore(auth): framework version alignment to v1.1.1	2026-08-07 23:34:09 -06:00
Rene Nochebuena	1ee92df63c	chore(auth): bump einherjar deps to v1.1.0 (framework version alignment) (#1 ) Patch of the coordinated framework release: einherjar modules move to v1.1.0 in lockstep, so auth is bumped alongside the rest. - go.mod: contracts, core, web -> v1.1.0 (via go get + go mod tidy) No code or API changes. ModuleVersion() reports v1.1.0 automatically from build info once tagged. Badge bumped to v1.1.0. Reviewed-on: #1 Co-authored-by: Rene Nochebuena Guerrero <rene@nochebuena.dev> Co-committed-by: Rene Nochebuena Guerrero <rene@nochebuena.dev>	2026-08-07 19:31:22 -06:00