Release v0.5.3

🚀 Enhanced Security and Observability

What's New

✨ Structured Logging System

• JSON-formatted logs with correlation ID tracking for better observability
• Request tracing middleware that automatically tracks HTTP requests with timing and context
• Specialized logging helpers for OAuth events, authentication, admin actions, and security incidents
• Environment-configurable logging with support for both JSON and text formats

🔒 Security Headers Middleware

• Comprehensive security headers including HSTS, Content Security Policy, and frame protection
• OAuth-optimized CSP policies that balance security with authentication UI requirements
• Configurable security settings via environment variables
• Cross-origin protection with COEP, COOP, and CORP headers

🔧 Infrastructure Improvements

• Fixed OAuth discovery service dependency injection for more reliable database connections
• Updated Docker configurations with proper secrets management for production
• Fixed Redis Commander connection issues in development environment
• Enhanced test coverage with comprehensive security and logging tests

Breaking Changes

None - this release is fully backward compatible.

Migration Notes

• The new structured logging is enabled by default. To disable JSON logging, set LOG_JSON=false
• Security headers are automatically applied to all endpoints
• OAuth discovery endpoints now require proper database connectivity

Technical Details

• Added correlation ID tracking across all requests
• Implemented environment-based security configuration
• Enhanced error handling and request tracing
• Improved Docker Compose setup for development and production