ResolveSpec

mirror of https://github.com/bitechdev/ResolveSpec.git synced 2026-10-01 12:31:59 +00:00

Author	SHA1	Message	Date
Hein	d3a99550d9	fix(security): name GetTemplate results to satisfy gocritic Tests / Race Detector (push) Failing after 25s Details Tests / Unit Tests (push) Failing after 25s Details Tests / Integration Tests (push) Failing after 27s Details Build , Vet Test, and Lint / Build (push) Successful in 1m3s Details Build , Vet Test, and Lint / Run Vet Tests (1.24.x) (push) Successful in 1m30s Details Build , Vet Test, and Lint / Lint Code (push) Successful in 1m31s Details Build , Vet Test, and Lint / Run Vet Tests (1.23.x) (push) Successful in 1m31s Details	2026-09-30 13:46:03 +02:00
Hein	8a94d884e7	fix(security): verify passwords, bind row-security args, fail closed on panic Verify bcrypt passwords in Direct mode and the shipped procedures, hash on register/reset, ignore client-supplied roles and level at registration and drop the password from the jwt_login payload. Legacy cleartext upgrade is opt-in. Row security templates now bind the user as a parameter, validate identifiers, attach via common.SelectQuery and fail the request if the filter cannot be attached. ApplyColumnSecurity and GetRowSecurityTemplate convert panics to errors and the hooks fail closed. Update audit status.	2026-09-30 13:44:59 +02:00
Hein	164ba2b240	fix(security): remove lock contention, cache rules, stop leaked goroutines Load column/row security without holding locks across provider calls, honour pOverwrite with a 30s TTL and pruning, cap tokens per Authorization header, detach session activity updates with a timeout, stop OAuth2 cleanup goroutines via Close, move nil-map checks inside locks, and drop O(n^2) string building. Update audit status.	2026-09-30 13:31:03 +02:00
Hein	598fd687f6	feat(security): add GetUserRef method for opaque user identifiers Tests / Integration Tests (push) Failing after 1s Details Build , Vet Test, and Lint / Run Vet Tests (1.24.x) (push) Successful in 2m6s Details Build , Vet Test, and Lint / Lint Code (push) Successful in 2m21s Details Tests / Unit Tests (push) Failing after 21s Details Build , Vet Test, and Lint / Build (push) Successful in 50s Details Build , Vet Test, and Lint / Run Vet Tests (1.23.x) (push) Successful in 54s Details	2026-07-10 13:47:32 +02:00
copilot-swe-agent[bot]andwarkanum	e10e2e1c27	Fix recover() usage in CatchPanic functions by returning deferred function Co-authored-by: warkanum <208308+warkanum@users.noreply.github.com>	2025-12-30 11:06:43 +00:00
Hein	b2115038f2	Fixed providers	2025-12-09 11:18:11 +02:00
Hein	b741958895	Code sanity fixes, added middlewares Tests / Run Tests (1.23.x) (push) Has been cancelled Details Tests / Run Tests (1.24.x) (push) Has been cancelled Details Tests / Lint Code (push) Has been cancelled Details Tests / Build (push) Has been cancelled Details	2025-12-08 08:28:43 +02:00
Hein	08050c960d	Optional Authentication	2025-12-02 14:14:38 +02:00
Hein	e32ec9e17e	Updated the security package	2025-11-24 17:00:05 +02:00
Hein	ecd7b31910	Fixed linting issues	2025-11-11 11:32:30 +02:00
Hein	682716dd31	Linting fixes	2025-11-11 11:03:02 +02:00
Hein	ceaa251301	Updated logging, added getRowNumber and a few more	2025-11-10 17:02:37 +02:00