Skip to content
This repository was archived by the owner on Jul 12, 2023. It is now read-only.

v0.3.0

Compare
Choose a tag to compare
@sethvargo sethvargo released this 11 Aug 13:43
· 2 commits to release-0.3 since this release
bee3756

WARNING: This release has a migration that will fail if existing verification codes are present in the database during migration. It also has a bug with rate limiting. You should use tag v0.3.2 (which fixes these issues.

This release introduces v2 API keys and security, logging, and observability
improvements.

Changelog since v0.2.1

Potentially breaking

  • Environment variable configurable spelling fixes (#207, @whaught)
    • COLISSION_RETRY_COUNT -> COLLISION_RETRY_COUNT
    • SESSION_DUATION to SESSION_DURATION
  • Introduce v2 API keys and switch to rate-limiting by realm instead of by key (#192, @sethvargo)

Infrastructure

  • Allow customizing database backup location (defaults unchanged) (#195, @sethvargo)

Security

  • Always reset render buffer before use. (#191, @sethvargo)
  • Use Key Manager to encrypt SMS configurations (#190, @sethvargo)
    • Support providing a local key as the database encryption key for local development (#203, @sethvargo)

Other

  • Adds a /healthz to all server binaries for healthchecking. (#196, @icco)
  • Adds default request tracing and http metrics to all four servers. (#183, @icco)
  • Allow configuring the rate limiter to succeed on backend connection failures (default unchanged) (#212, @sethvargo)
  • Include ID in the issue VerificationCode response (#215, @whaught)
  • Migrate to the main verification server's observability package. (#205, @sethvargo)
  • Return UUID with verification tokens (#217, @sethvargo)
  • Standardize known HTTP response codes on 400, 401, 404, 405, 429, and 5xx. (#214, @sethvargo)
  • Use shared logging package, always configure a logger (#210, @sethvargo)
  • Verification and certificate APIs have well defined error codes for localization on the client side. (#216, @mikehelmick)

Dependencies

Added

Changed

Removed

Nothing has changed.