v1.4.0

Changelog

New Features

• bfcf1f0: feat: allow a request's url to be normalized before matching (@schmidtw)
• acbb66d: feat: cache compiled capability url patterns (@schmidtw)

Bug Fixes

• 3bdfee8: fix: make the token's capability the authority for url matching (@schmidtw)

Other Work

• 32ecc57: Fix simple linter issues. (@schmidtw)
• b926e75: docs: describe the cache's actual eviction policy (@schmidtw)
• 12366a6: patch: address potential panics during url path normalization (@denopink)
• 49480f3: patch: address potential panics on an empty credential value (@denopink)
• 0410a01: patch: undo token interface change (@denopink)
• b928780: refactor: simple improvements (@denopink)
• 0f3495c: refactor: take the url and method as the last two subexpressions (@schmidtw)
• 859ab70: security: replace github.com/lestrrat-go/jwx/v2 with github.com/lestrrat-go/jwx/v4 (@denopink)
• 3325ada: security: use configured capability regexes as the main approver in order to cache regex and address active capability uses cases (@denopink)