v2.5.0-rc.1

Changelog

New features

• : feat(hooks): Config.LifecycleHooks surface (OnSignup, OnSignin, ...) + UserByID (#76, #77) (#83) (@thegdsks)
• : feat(hooks): wire OnSignup + OnSignin at OAuth callback (#76) (#86) (@thegdsks)
• : feat(hooks): wire OnSignup + OnSignin at magic-link consume (#76) (#85) (@thegdsks)
• : feat(tenancy): Config.Tenancy auto-provision personal org on signup (#77) (#87) (@thegdsks)

Bug fixes

• : fix(middleware): RequireAuth emits RFC 7807 problem+json (#78) (#82) (@thegdsks)

Other changes

• : chore(release): prepare v2.5.0-rc.1 (#88) (@thegdsks)
• : ci: bench workflow to manual + weekly (was per-PR, ~15min burn) (#75) (@thegdsks)
• : docs(readme): replace primitive ASCII with ANSI Shadow logo (#72) (@thegdsks)
• : refactor(root): consolidate root files for cleaner repo home page (#71) (@thegdsks)

Verify this release

# Download the SBOM and its Sigstore signature from the release assets, then:
cosign verify-blob \
  --certificate-identity "https://github.com/glincker/theauth-go/.github/workflows/release.yml@refs/tags/v2.5.0-rc.1" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  --signature theauth-go-v2.5.0-rc.1.tar.gz.sbom.json.sig \
  --certificate theauth-go-v2.5.0-rc.1.tar.gz.sbom.json.cert \
  theauth-go-v2.5.0-rc.1.tar.gz.sbom.json

Use this library: go get github.com/glincker/theauth-go@v2.5.0-rc.1