Changelog

Features

• ec56c15: feat: refresh UI branding and footer versioning (@appleboy)
• a2b8193: feat: redirect authentication flows to account sessions page (@appleboy)
• 3b1fcae: feat: add first-class documentation site with rendered Markdown (#66) (@appleboy)
• 1b74c8d: feat: refactor authentication and add optional auth middleware (@appleboy)
• 1c8f183: feat: support displaying user full names across the app (@appleboy)
• 59f597c: feat: refactor OAuth providers and add Microsoft support (#69) (@appleboy)
• 3533740: feat: add and standardize OAuth provider support (#70) (@appleboy)
• 7b74037: feat: update default OAuth scopes and admin scope management (#72) (@appleboy)

Bug fixes

• a55e2c8: fix: fix docs navbar to highlight individual active pages (@appleboy)

Refactor

• 0a669ad: refactor: refactor auth and handlers to use shared utilities (#68) (@appleboy)
• 81d4089: refactor: refactor dependency wiring with unified service sets (#71) (@appleboy)

Build process updates

• 3f459d2: build: streamline build targets and defaults (@appleboy)
• 688c914: build(deps): bump aquasecurity/trivy-action from 0.34.1 to 0.34.2 (#67) (@dependabot[bot])

Documentation updates

• bbf7f78: docs: improve documentation formatting and navigation (@appleboy)
• 33e544c: docs: update OAuth docs to use email and profile scopes (@appleboy)

Changelog

Enhancements

• 2e2faf5: chore: update Go and dependencies to latest stable versions (@appleboy)
• 31c067d: chore: upgrade OpenTelemetry dependencies to version 1.40.0 (@appleboy)
• 4b2d79e: chore: automate and unify dev tool installation and dependency tracking (@appleboy)
• 372c60d: chore: streamline tool installation and dependency management (@appleboy)
• f2f6116: chore: update OpenTelemetry dependencies to v1.40.0 (@appleboy)

Refactor

• 7f17135: refactor: unify cache and metrics interfaces under internal/core (#62) (@appleboy)
• 3c907bd: refactor: refactor cache handling and improve test sequencing (@appleboy)
• 5985f73: refactor: refactor authentication logic to use core types and interfaces (#63) (@appleboy)
• 8adec2f: refactor: unify token handling with core TokenProvider interface (#64) (@appleboy)
• 79d80da: refactor: hash access tokens before storing in the database (#65) (@appleboy)

Build process updates

• ee0be95: ci: enable Codecov token for coverage reporting (@appleboy)

Documentation updates

• 4f13563: docs: add Go Report Card badge to highlight code quality (@appleboy)
• 71beaac: docs: add Go Reference badge to README (@appleboy)
• c7da6e8: docs: add code coverage badge to project documentation (@appleboy)
• 6bdc5bd: docs: clarify generate task to reflect go:generate usage (@appleboy)

Others

• 50d36c0: test: adopt gomock for interfaces and migrate tests to generated mocks (#61) (@appleboy)
• fc76a7f: test: improve cache key accuracy in user-related tests (@appleboy)
• 891a514: test: add comprehensive tests for authentication edge cases (@appleboy)

Changelog

Features

• 7d122b5: feat: add strongly-typed user and IP context management (#57) (@appleboy)
• ef6ab61: feat: strengthen OAuth redirect validation and error response safety (#58) (@appleboy)
• eb24e67: feat: add configurable, cache-backed user lookup with validation and tests (#59) (@appleboy)

Refactor

• a3d62f0: refactor: refactor cache system to support generics and arbitrary value types (#54) (@appleboy)
• c414c74: refactor: centralize URL redirect safety checks in util package (@appleboy)
• 98371a2: refactor: unify cache access by requiring direct GetWithFetch (#60) (@appleboy)

Changelog

Features

• c849ae8: feat: add OpenID Connect ID Token support to OAuth flows (#56) (@appleboy)
• f982b19: feat: improve ID token issuance logging and validation (@appleboy)

Documentation updates

• 1afd1c5: docs: document AuthGate features for enterprise identity management (@appleboy)

Others

• eadb577: style: improve function argument readability (@appleboy)

Changelog

Features

• a4eddc1: feat: add OAuth 2.0 client credentials grant for M2M authentication (#55) (@appleboy)
• 901ae63: feat: enforce Client Credentials Flow restrictions for public clients (@appleboy)

Changelog

Features

• 0f2164b: feat: add OpenID Connect discovery and userinfo endpoint support (#51) (@appleboy)
• 6d1f29a: feat: enforce robust token state management and validation (@appleboy)

Bug fixes

• 77dd192: fix: encode redirect URLs in login links for security (@appleboy)

Enhancements

• 35841ae: chore: update CI workflows to use latest action versions (@appleboy)

Changelog

Features

• 832c3c9: feat: serve favicon.ico from embedded static assets (#48) (@appleboy)
• 3678a63: feat: add context-based timeout configuration for resource lifecycle (#49) (@appleboy)
• 50e2cf2: feat: default OAuth clients to public and improve device flow handling (@appleboy)
• e0c9441: feat: add dynamic navbar to login page with authentication awareness (@appleboy)
• 2241935: feat: improve handling of external links in navbar and dropdowns (@appleboy)
• 416af67: feat: redesign site footer and update navbar branding (@appleboy)
• 92110aa: feat: link RFC references in footer with styled external links (@appleboy)

Enhancements

• 806b709: chore: migrate repository references to go-authgate/authgate (@appleboy)
• 3773ba4: chore: migrate import paths to go-authgate/authgate repository (@appleboy)

Refactor

• 73d4bfc: refactor: refactor context extraction and reorganize utility functions (@appleboy)
• 6be91b0: refactor: refactor client secret handling with model-based validation (@appleboy)
• 496fde6: refactor: propagate context throughout database and store operations (@appleboy)
• be7aff0: refactor: unify types and modernize code and test style across the repo (#50) (@appleboy)

Changelog

Bug fixes

• 47ff688: fix: enforce URL encoding in authentication redirects and tests (#47) (@appleboy)

Changelog

Features

• b11e4c9: feat: introduce hybrid CLI supporting adaptive OAuth authentication (#43) (@appleboy)

Enhancements

• d7de5b3: chore: remove bundled device CLI; reference external repo in docs (@appleboy)

Refactor

• e98272e: refactor: refactor Redis rate limiter initialization and configuration (#44) (@appleboy)
• ee38e2e: refactor: modularize application startup with dedicated bootstrap package (#46) (@appleboy)

Build process updates

• 0a8532b: ci: simplify workflow image tagging and authentication (@appleboy)

Documentation updates

• efff8ba: docs: deprecate hybrid CLI and update docs for new recommendations (@appleboy)
• c5a4e32: docs: deprecate bundled OAuth CLI in favor of external repo (@appleboy)
• e98f3da: docs: revise and expand documentation for OAuth flows and project setup (#45) (@appleboy)

Changelog

Features

• 70a322d: feat: support configurable default admin password (#28) (@appleboy)
• cea5c6d: feat: make session expiration configurable via env variable (@appleboy)
• d7a7518: feat: enforce configurable session idle timeouts across user sessions (@appleboy)
• 95d8d9d: feat: add configurable session fingerprinting for enhanced security (@appleboy)
• fcc6769: feat: optimize HTTP and database connection pooling configuration (@appleboy)
• ac95aff: feat: integrate automatic Swagger/OpenAPI documentation for APIs (@appleboy)
• 2c7d27a: feat: integrate Prometheus metrics and secure monitoring endpoint (#30) (@appleboy)
• df5266a: feat: integrate configurable metrics and refactor for readability (#31) (@appleboy)
• 7a919d8: feat: improve database error handling and logging in metric collection (@appleboy)
• a8717f9: feat: add unified metrics caching with configurable backends (#34) (@appleboy)
• 4fdc5bd: feat: unify and optimize cache-aside logic with GetWithFetch method (@appleboy)
• 75242c0: feat: add OAuth 2.0 Authorization Code Flow with PKCE and consent management (#35) (@appleboy)
• 1106f2b: feat: strengthen OAuth authorization validation and expand test coverage (#36) (@appleboy)
• 75c597c: feat: refactor navbar to add dropdowns and improve mobile usability (#38) (@appleboy)
• 7956fe2: feat: enable navbar rendering on OAuth consent and authorize pages (#41) (@appleboy)

Bug fixes

• 492b0d1: fix: relax session cookie SameSite policy for OAuth compatibility (@appleboy)
• 40dd1c3: fix: eliminate audit service log output on shutdown (@appleboy)
• 0b46283: fix: make authorization code usage atomic and race-free (#37) (@appleboy)
• 4c1d3f6: fix: fix access token response to use remaining seconds (#39) (@appleboy)
• 84543e1: fix: prevent callback handler goroutine blocking with sync.Once (#42) (@appleboy)

Enhancements

• 47fca47: chore: upgrade dependencies for enhanced stability and feature support (@appleboy)
• b98fd0b: chore: update Go dependencies to latest stable versions (@appleboy)
• 28b81ac: chore: upgrade Go version and dependencies for improved compatibility (@appleboy)

Refactor

• f18c4b6: refactor: unify search and empty state UI across admin and account pages (@appleboy)
• 91a200a: refactor: remove unused JWT claims and related dependencies (@appleboy)
• be261d4: refactor: refactor navbar to remove admin controls and improve usability (@appleboy)
• 80a63f0: refactor: refactor device authorization flow and improve error handling (@appleboy)

Build process updates

• 77c5a3e: build: integrate air hot reload support into local development workflow (@appleboy)
• 0df8dcb: build: expand and streamline Makefile targets for tooling and Docker (@appleboy)
• a5ce46c: build: add .dockerignore to optimize Docker build context (@appleboy)
• be92c27: ci: expand Go version support in CI workflow (@appleboy)
• 0984402: build(deps): bump aquasecurity/trivy-action from 0.33.1 to 0.34.0 (#32) (@dependabot[bot])
• cd17585: build: update Docker ignore settings for release directory (@appleboy)

Documentation updates

• 92b89a1: docs: overhaul documentation structure and content for clarity and usability (@appleboy)
• bae2c8c: docs: document recording token refresh failure handling (@appleboy)
• fc43adf: docs: require Go 1.25 as minimum supported version (@appleboy)
• dadb528: docs: standardize RFC citations across documentation files (@appleboy)
• 08dd023: docs: document Authorization Code Flow and PKCE support (@appleboy)
• c525287: docs: add Authorization Code Flow CLI example and rename existing CLI (#40) (@appleboy)

Others

• d752e48: style: improve spacing in audit list grid (@appleboy)
• 900bc67: test: expand and refine CountDeviceCodes test coverage (@appleboy)
• 0345612: style: format function signatures and calls for readability (@appleboy)