Skip to content

Release 0.5.4

Choose a tag to compare

View all tags
@oranheim oranheim released this 01 Aug 21:07
· 85 commits to master since this release
v0.5.4
c8bffa0

🔧 Security Middleware Improvements

What's Changed

🔄 Middleware Consolidation

  • Removed duplicate security middleware from auth router to prevent conflicts
  • Centralized security headers management in dedicated middleware module
  • Cleaned up module exports by removing redundant SecurityHeadersMiddleware from API exports

📚 Documentation Support

  • Path-specific CSP policies that adapt based on request endpoints
  • Enhanced documentation access with relaxed CSP for /docs and /redoc endpoints
  • CDN resource support for Swagger UI and ReDoc functionality from cdn.jsdelivr.net
  • Maintained security for all other endpoints with strict default policies

Technical Improvements

  • Consolidated duplicate middleware implementations
  • Added intelligent CSP policy selection based on request path
  • Improved documentation endpoint functionality without compromising overall security
  • Better separation of concerns between auth logic and security headers

Breaking Changes

None - this is a refactoring release that maintains all existing functionality.

For Developers

The /docs and /redoc endpoints now properly load external resources needed for the interactive API documentation while maintaining strict security policies for all authentication and OAuth endpoints.

Assets 2
Loading