v0.5.0

Changelog

Features

• 054be61: feat(jwt): verify Actor Chain tokens (J12, draft-mw-oauth-actor-chain-02) (@kanywst)

Fixes

• a565f79: fix(jwt): leave a Declared actor chain not applicable rather than passed (@kanywst)
• 8610cd6: fix(jwt): leave an actc from another server unchecked unless preserved (@kanywst)
• 516488c: fix(jwt): leave introspected Actor Chain evidence unchecked (@kanywst)

v0.4.1

Changelog

Fixes

• 548edde: fix(deps): bump go to 1.27.3 for GO-2026-6809 (@kanywst)

v0.4.0

Changelog

Features

• 5376bf6: feat(jwt): verify actor proofs (J11, draft-mcguinness-oauth-actor-proofs-01) (@kanywst)
• 2be74a3: feat(trust): name actor keys by (act.iss, act.sub) in the trust file (@kanywst)

Fixes

• 8ad6d80: fix(jwt): claim every actor signed only for a single token (@kanywst)
• b0a3ab3: fix(jwt): fail a token whose sub_iss is not a string (@kanywst)
• af2f4c3: fix(jwt): hold the newest actor proof's sub_iss to the token's own (@kanywst)
• 0d5c6fd: fix(jwt): keep an actor proof's signature result when its time is unknown (@kanywst)
• 7ca3081: fix(jwt): name every reason an actor proof was not checked (@kanywst)
• d19c32b: fix(jwt): say when an exchange drops the actor proofs it inherited (@kanywst)

v0.3.0

Changelog

Features

• 1639d52: feat!: drop the Mandatum format (@kanywst)

Fixes

• a274d8c: fix(biscuit): drop the ignored-input reason for a flag that no longer exists (@kanywst)

Documentation

• 023e4ad: docs: describe whosent as a viewer for JWT, Biscuit, UCAN and macaroons (@kanywst)

Other

• 4ad6fc7: ci(review): fail visibly when a pull request changes the review workflow (@kanywst)
• 976aa7f: ci(review): post review comments without an attribution footer (@kanywst)

v0.2.2

Changelog

Fixes

• 9a75a31: fix(macaroon): judge the request guard on the tokens the walk reached (@kanywst)
• 46fa35c: fix(macaroon): keep the signature guard's inconsistency when the request guard also disagrees (@kanywst)
• bf6eeeb: fix(macaroon): leave Fly.io caveats unchecked without a request, and check one given with --fact (@kanywst)
• b8861b2: fix(macaroon): let ask resolve only an INCOMPLETE Fly.io chain, and carry its inconsistency (@kanywst)
• 9348105: fix(macaroon): refuse a Fly.io request key given twice, and test the request guard (@kanywst)

Documentation

• 50bea45: docs: shorten the README and move format details to docs/formats.md (@kanywst)

v0.2.1

Changelog

Features

• 5b731dc: feat(macaroon): treat Fly.io caveats as authority and answer requests against them (@kanywst)

Fixes

• e86856b: fix(check): say what VALID covers when a Fly.io token's requests were not tested (@kanywst)
• f4a5841: fix(macaroon): carry a predicate question's inconsistency into the answer (@kanywst)
• a827fc9: fix(macaroon): exit 70 when the library and the caveats answer a request differently (@kanywst)
• 5784b9a: fix(macaroon): refuse a Fly.io request when the library and the caveats disagree (@kanywst)
• 4b9e087: fix(ui): window the matrix columns when a chain has more links than fit (@kanywst)

Other

• 58faa9b: refactor: share the fixture writers across formats (@kanywst)
• f4ac959: test(datalog): give the limit tests enough time on a busy machine (@kanywst)

v0.2.0

Changelog

Features

• bc1297a: feat(cmd): describe --root-key and --fact for macaroons (@kanywst)
• 54a074b: feat(macaroon): read, verify and explain macaroons and Fly.io tokens (@kanywst)
• 807c6a0: feat(ucan): name principals in findings and label policies plainly (@kanywst)
• 4ecc778: feat(ucan): read and verify UCAN 1.0 delegation chains (@kanywst)
• 357ff6d: feat: register UCAN and let ask map --action onto its command (@kanywst)

Fixes

• c508003: fix(ucan): do not claim every rule was checked when no invocation was given (@kanywst)
• 3bc5d97: fix(ucan): leave the policy unchecked when it holds only through a negated missing selector (@kanywst)

Documentation

• eec0d1e: docs: describe the UCAN format (@kanywst)
• da5ef49: docs: describe the macaroon format (@kanywst)

Other

• 5889369: Merge branch 'feat/macaroon' (@kanywst)
• fe5ab51: Merge branch 'feat/ucan' (@kanywst)
• f4c4919: test(cmd): pin exit 70 for a macaroon disagreement (@kanywst)

v0.1.0

Changelog

Features

• 31576a3: feat(ask): ask each format its own question from the command line (kanywst 45947799+kanywst@users.noreply.github.com)
• 8bb06ba: feat(biscuit): evaluate Biscuit Datalog exactly as the reference does (kanywst 45947799+kanywst@users.noreply.github.com)
• eb73696: feat(biscuit): read, verify and explain Biscuit tokens (kanywst 45947799+kanywst@users.noreply.github.com)
• 5759638: feat(chain): add a format-neutral model of a delegation chain (kanywst 45947799+kanywst@users.noreply.github.com)
• 1ceca12: feat(diagnose): report every rule of a delegation chain, checked against mandatum's verifier (kanywst 45947799+kanywst@users.noreply.github.com)
• 228d068: feat(formats): add the JWT delegation adapter (kanywst 45947799+kanywst@users.noreply.github.com)
• ed0b26e: feat(formats): add the Mandatum adapter and a test-only fake format (kanywst 45947799+kanywst@users.noreply.github.com)
• 173a437: feat(ui): keep asserted links from reading as verified or empty (kanywst 45947799+kanywst@users.noreply.github.com)
• 4944a8d: feat: add the whosent CLI and interactive view (kanywst 45947799+kanywst@users.noreply.github.com)

Fixes

• 8847dee: fix(biscuit): answer questions with the session's authorizer (kanywst 45947799+kanywst@users.noreply.github.com)
• f2163e3: fix(biscuit): bound Datalog evaluation inside joins, queries and closures (kanywst 45947799+kanywst@users.noreply.github.com)
• 1f1b4dd: fix(biscuit): deny when no policy matches and disclose a supplied time fact (kanywst 45947799+kanywst@users.noreply.github.com)
• 5b18c62: fix(biscuit): do not show later blocks as verified without a root key (kanywst 45947799+kanywst@users.noreply.github.com)
• fa4ffdd: fix(biscuit): escape string terms in the Datalog the view lists (kanywst 45947799+kanywst@users.noreply.github.com)
• d998168: fix(biscuit): refuse a scope that names an undefined public key (kanywst 45947799+kanywst@users.noreply.github.com)
• 3540817: fix(biscuit): sign, verify and intern P-256 keys in compressed form (kanywst 45947799+kanywst@users.noreply.github.com)
• 3b2ffdd: fix(check): do not claim every link was checked when prior actors are only asserted (kanywst 45947799+kanywst@users.noreply.github.com)
• 1f8d5f9: fix(cmd): size the demo list's columns to the longest scenario name (kanywst 45947799+kanywst@users.noreply.github.com)
• c09c17c: fix(jwt): fail malformed dates, read scp with scope, and judge missing claims honestly (kanywst 45947799+kanywst@users.noreply.github.com)
• 67f21c1: fix(jwt): skip keys whose key_ops do not include verify (kanywst 45947799+kanywst@users.noreply.github.com)
• a95ed39: fix(mandatum): claim an untyped link only when it carries Mandatum claims (kanywst 45947799+kanywst@users.noreply.github.com)
• 46dce08: fix(ui): draw links whose format records an expiry but no start (kanywst 45947799+kanywst@users.noreply.github.com)
• 6aed4e6: fix: report ignored input flags the same way for every format (kanywst 45947799+kanywst@users.noreply.github.com)

Documentation

• fa29cdb: docs: add README, demo, license and contributor guides (kanywst 45947799+kanywst@users.noreply.github.com)
• 809ae4d: docs: describe the adapter contract and the new layout (kanywst 45947799+kanywst@users.noreply.github.com)
• e335509: docs: describe the embedded Mandatum reference verifier (kanywst 45947799+kanywst@users.noreply.github.com)
• 50fbfa0: docs: describe whosent as a viewer for JWT, Biscuit and Mandatum chains (kanywst 45947799+kanywst@users.noreply.github.com)

Other

• c53e033: Merge branch 'feat/biscuit' into feat/multi-format (kanywst 45947799+kanywst@users.noreply.github.com)
• dbd35e0: Merge branch 'feat/jwt' into feat/multi-format (kanywst 45947799+kanywst@users.noreply.github.com)
• 2d67124: build: add release, CI, completions and man page (kanywst 45947799+kanywst@users.noreply.github.com)
• 1f54929: build: describe the three formats in package metadata (kanywst 45947799+kanywst@users.noreply.github.com)
• 9b40b0a: build: fuzz every untrusted-input parser in make fuzz (kanywst 45947799+kanywst@users.noreply.github.com)
• 9921c90: build: leave generated protobuf code out of the coverage gate (kanywst 45947799+kanywst@users.noreply.github.com)
• 85ada68: refactor(trust): read key documents for formats that parse their own keys (kanywst 45947799+kanywst@users.noreply.github.com)
• e6005e8: refactor: embed the Mandatum v0.2.0 reference packages (kanywst 45947799+kanywst@users.noreply.github.com)
• 5033eb4: refactor: render and report the format-neutral model (kanywst 45947799+kanywst@users.noreply.github.com)
• 216faeb: test(jwt): do not read Unix permission bits on Windows (kanywst 45947799+kanywst@users.noreply.github.com)
• bc3c0a7: test: stop assuming Unix paths, permissions and error text (kanywst 45947799+kanywst@users.noreply.github.com)