Skip to content

v3.0.0

Latest

Choose a tag to compare

@lerian-studio-midaz-push-bot lerian-studio-midaz-push-bot released this 22 Jul 13:28
0ec6822

3.0.0 (2026-07-22)

⚠ BREAKING CHANGES

  • middleware: module path is now github.com/LerianStudio/lib-auth/v3 and the
    Authorize middleware requires Fiber v3.

X-Lerian-Ref: 0x1

Features

  • middleware: add authz cache, circuit breaker, and bounded retry (c0469e6), closes #107 #127 #127 #108
  • middleware: add fail-closed AUTH_REQUIRED option (f7fff6c), closes #107
  • middleware: add M2M authentication gate (2034198)
  • middleware: add opt-in local JWT signature verification (#128) (48b81a3), closes #106
  • middleware: add optional issuer pinning to M2M gate (5afd305)
  • middleware: expose M2M identity via request context (c48393a), closes #125
  • middleware: forward product on M2M auth (flag-gated) (93c44db)
  • middleware: migrate to Fiber v3, cut /v3 major (024a909)
  • real M2M subject and token type whitelist (e31ac53)

Bug Fixes

  • middleware: return zero M2MIdentity when reporting absent (25fc4ec), closes #126