v3.3.0 b164fe9

history of internal/adapters/in/http/auth/handler.go at v3.3.0

2026-04-08

0986ec3refactor: resolve pre-release hexarch follow-ups GPG Verifiedbrice

2026-03-22

b9504fcfix(security): reject ephemeral tokens as credentials on /auth/token GPG Verifiedbrice
e4d9ea0fix: address CodeRabbit review — internal auth scope restriction, IPv6 redirect, TTL cap, docs GPG Verifiedbrice
c8a82f0fix: address CodeRabbit PR review — error wrapping, redirect, validation, dedup GPG Verifiedbrice
175d6d6refactor(auth): move scope matching helpers to domain layer GPG Verifiedbrice
8d39436feat(auth): configurable TTL (default 15m) and admin scope support in /auth/token GPG Verifiedbrice
d22746brefactor(auth): remove password authentication from domain and service layer GPG Verifiedbrice
28746f8fix(security): harden auth, container limits, input validation, and proxy GPG Verifiedbrice

2026-03-19

2b4c159fix(auth): try JWT validation before password in token exchange brice

2026-02-25

c35e93dRevert "fix(lint): G117 annotate intentional secret-pattern fields in DTOs and config structs" bnema
b5f59d8fix(lint): G117 annotate intentional secret-pattern fields in DTOs and config structs bnema

2026-02-24

fc00677refactor(http): consolidate isLocalhostRequest into shared httputil package bnema

2026-02-09

de49ef1fix(auth): support local-only mode when auth is disabled brice
18fc433fix(security): enforce always-on auth and block scope/IP escalation bnema

2026-02-06

19b1a24fix(security): harden auth validation, token store, and error messages brice

2026-02-03

ef62f35fix(auth): use UTC timestamps for token generation and validation bnema

2026-01-18

951d694chore: update module path to github.com/bnema/gordon and bump dependencies brice
ee95a80feat(auth): add unified /auth endpoints for password and token auth bnema

Keyboard shortcuts

Single-key shortcuts are on. ctrl k and esc work whatever this says.

ctrl k :
go to a section, branch, tag, file or repository
?
this list
j k
move the row cursor down / up
enter
open the row under the cursor; on Files, a directory opens or closes in place
↑ ↓ ← → home end
in the file tree (focus on a row): previous / next row, close / open a directory or go to its parent / first entry, first / last row. They never open a file
l h
on Files: open a directory or a file / close a directory or go up to its parent, then to the parent page. Elsewhere: into the side panel (on a merge request, its files) / back to the content; there j k move between its controls
g g G
first / last row
/
filter the list; on Files, find a file anywhere in the repository (esc clears, enter opens the best match)
b
switch branch or tag
g s g f g c g b g m g i g r g a
tabs: summary, files, commits, branches & tags, merge requests, issues, releases, actions (when available)
g h
home
w
wide mode: use the whole width of the screen, or not (remembered)
y
copy a permalink pinned to the commit
d u x
diff: split / unified / collapse or expand all
e E
diff: the whole file in view / every file, with the lines the hunks hide
n
merge request: next note in the diff
esc
close a dialog, leave a field

Branches 7

Tags 106

↑↓ moveenter openesc close