v2.31.0-dev2 4b72742

history of internal/adapters/in/http/middleware/auth.go at v2.31.0-dev2

2026-03-23

2c89614fix: address CodeRabbit review — context propagation, sentinels, mutex, CLI patterns GPG Verifiedbrice

2026-03-22

589c4c3fix(security): reject long-lived tokens on admin and registry endpoints GPG Verifiedbrice
175d6d6refactor(auth): move scope matching helpers to domain layer GPG Verifiedbrice
d22746brefactor(auth): remove password authentication from domain and service layer GPG Verifiedbrice

2026-03-19

9cd24ccfix: resolve deploy context cancellation, spurious auth warnings, and local CLI auth gate brice

2026-02-25

c35e93dRevert "fix(lint): G117 annotate intentional secret-pattern fields in DTOs and config structs" bnema
b5f59d8fix(lint): G117 annotate intentional secret-pattern fields in DTOs and config structs bnema

2026-02-24

d7ba6d9refactor(auth): remove dead RegistryAuth middleware and deprecated GetRegistryAuthConfig bnema
fc00677refactor(http): consolidate isLocalhostRequest into shared httputil package bnema

2026-02-06

8238857fix(logic): invalidate proxy cache on config reload, remove dead code brice

2026-02-01

e27d337fix(security): sanitize WWW-Authenticate realm URL and prevent header injection via X-Forwarded headers bnema

2026-01-28

546e1a6refactor(auth): move context keys to domain and fix review feedback bnema

2026-01-18

951d694chore: update module path to github.com/bnema/gordon and bump dependencies brice
c11bf1dfix(auth): add token cache and fix scope validation brice
6b5b414fix(auth): add token cache and fix scope validation brice
fb60addrefactor(auth): support both password and token auth in password mode bnema

2026-01-17

0749babfix(security): redact usernames in debug logs bnema
785ab68refactor: centralize HTTP DTO responses for consistency brice

2026-01-16

e0a75b4fix(auth): use X-Forwarded-Host for token realm URL brice

2026-01-15

c4ce6e0fix(auth): use X-Forwarded-Host for token realm URL brice

2026-01-14

04d8163test(security): add tests and improvements per code review bnema
0a0361ffix(security): address 9 vulnerabilities from security audit brice
b91fac7fix(auth): properly handle HTTP scheme and load secrets from pass brice

2026-01-13

67b31fcfix(registry): secure internal loopback auth bnema
1eea3effeat(registry): internal deploy bypass for self-registry pulls brice

2026-01-12

136d617feat(adapters/in): add authentication middleware, token endpoint and CLI commands brice
f452917refactor: replace legacy monolithic code with clean architecture brice

Keyboard shortcuts

Single-key shortcuts are on. ctrl k and esc work whatever this says.

ctrl k :
go to a section, branch, tag, file or repository
?
this list
j k
move the row cursor down / up
enter
open the row under the cursor; on Files, a directory opens or closes in place
↑ ↓ ← → home end
in the file tree (focus on a row): previous / next row, close / open a directory or go to its parent / first entry, first / last row. They never open a file
l h
on Files: open a directory or a file / close a directory or go up to its parent, then to the parent page. Elsewhere: into the side panel (on a merge request, its files) / back to the content; there j k move between its controls
g g G
first / last row
/
filter the list; on Files, find a file anywhere in the repository (esc clears, enter opens the best match)
b
switch branch or tag
g s g f g c g b g m g i g r g a
tabs: summary, files, commits, branches & tags, merge requests, issues, releases, actions (when available)
g h
home
w
wide mode: use the whole width of the screen, or not (remembered)
y
copy a permalink pinned to the commit
d u x
diff: split / unified / collapse or expand all
e E
diff: the whole file in view / every file, with the lines the hunks hide
n
merge request: next note in the diff
esc
close a dialog, leave a field

Branches 7

Tags 106

↑↓ moveenter openesc close