882 Commits

Author SHA1 Message Date
RW
a92bf12912 Remove unused errcheck directives 2025-08-21 14:53:43 +02:00
RW
03d4f9f66d use reflect.TypeAssert 2025-08-21 13:10:02 +02:00
Juan Calderon-Perez
f121fd3a20
🐛 bug: Fix CSRF subdomain wildcard boundary (#3694) 2025-08-21 08:35:59 +02:00
Juan Calderon-Perez
71e25524f5
🧹 chore: Return generic errors in KeyAuth middleware (#3692) 2025-08-20 08:13:30 +02:00
Juan Calderon-Perez
da726507c5
fix linter 2025-08-19 09:40:04 -04:00
Juan Calderon-Perez
b5bb60180f
Update subdomain match logic 2025-08-19 09:08:25 -04:00
Juan Calderon-Perez
73df613476
Update utils_test.go 2025-08-18 23:17:45 -04:00
Juan Calderon-Perez
4796a52ec7
Update middleware/cors/utils.go
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-08-18 22:29:50 -04:00
Juan Calderon-Perez
de2b14d56d
Apply suggestion from @Copilot
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-08-18 22:11:45 -04:00
Juan Calderon-Perez
43482d92d1
Update middleware/cors/utils.go
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2025-08-18 19:58:46 -04:00
Juan Calderon-Perez
8e33e5deb4
Update cors.go 2025-08-17 23:46:40 -04:00
Juan Calderon-Perez
79d9971e00 fix: derive wildcard subdomain segments from normalized origin 2025-08-17 23:23:59 -04:00
Juan Calderon-Perez
6b1725a1e5 harden cors subdomain wildcard matching 2025-08-17 18:50:54 -04:00
Juan Calderon-Perez
5463d6ec30 fix cors subdomain wildcard boundary 2025-08-17 17:42:35 -04:00
René
c5deff84d7 remove unneeded message for not found error 2025-08-14 21:28:08 +02:00
RW
06339a4642
Merge branch 'main' into codex/2025-08-13-15-47-17 2025-08-14 21:09:46 +02:00
Jason McNeil
8f2c4e2c72
Refactor KeyAuth Middleware: Extractor-Based Configuration and Enhanced Flexibility (#3685)
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-08-14 21:05:59 +02:00
René
5ecc8aaabd remove unneeded message for not found error 2025-08-14 17:08:09 +02:00
M. Efe Çetin
c3ecca1e2f
🐛 bug: Fix Static middleware browser support for subdirectories (#3673) 2025-08-11 12:32:31 +02:00
Juan Calderon-Perez
fcd66f5a71
🔥 feat: Add KeepConnectionHeader option to Proxy middleware (#3662)
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
2025-08-06 17:05:43 +02:00
Juan Calderon-Perez
9674101c61
📒docs: Fix KeyAuth middleware docs (#3641)
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-08-04 10:13:15 +02:00
Juan Calderon-Perez
67a2166788
📒 docs: Fix Healthcheck middleware documentation (#3657)
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-08-04 09:13:54 +02:00
Juan Calderon-Perez
a838dfbf9a
🧹 chore: Fix CSRF error message mismatch with documentation (#3636) 2025-08-01 16:57:52 +02:00
Juan Calderon-Perez
28eabcb83a
🧹 chore: Fix CORS docs and comments (#3637)
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2025-08-01 16:55:13 +02:00
Juan Calderon-Perez
ceacde5ca4
🧹 chore: Remove support for PasswordFromContext from BasicAuth middleware (#3638) 2025-08-01 12:48:42 +02:00
Juan Calderon-Perez
e8345f92a6
📒docs: Fix pprof middleware docs and default config (#3642) 2025-08-01 12:46:25 +02:00
Juan Calderon-Perez
ab34d1d70a
📒docs: Fix Cache middleware docs (#3644) 2025-08-01 12:43:04 +02:00
Juan Calderon-Perez
c01bcca593
📒docs: Fix Compress middleware docs (#3645) 2025-08-01 12:42:29 +02:00
Juan Calderon-Perez
8770286e0a
📒docs: Fix Skip middleware docs (#3649) 2025-08-01 08:43:34 +02:00
Juan Calderon-Perez
4882721546
📒docs: Fix EarlyData middleware docs (#3646) 2025-08-01 08:43:09 +02:00
Juan Calderon-Perez
c309d46c3a
🧹 chore: Remove SHA-1/MD5 support in BasicAuth middleware (#3634)
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2025-07-30 15:58:00 +02:00
Juan Calderon-Perez
2e544aecab
🔥 feat: Support hashed BasicAuth passwords (#3631) 2025-07-30 08:45:09 +02:00
Jason McNeil
1d9eca383c
feat(csrf): Enhance extractor functionality with metadata and security validation (#3630) 2025-07-30 08:40:56 +02:00
Jason McNeil
979e7cd6b1
feat(middleware/session): Introduce Extractor pattern for session ID retrieval (#3625)
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
2025-07-28 16:48:22 +02:00
Copilot
8444880dd1
🐛 Fix limiter middleware not counting fiber.NewErrorf responses as failed requests (#3623)
Co-authored-by: ReneWerner87 <7063188+ReneWerner87@users.noreply.github.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
2025-07-28 09:21:37 +02:00
Copilot
c0b2617e07
Fix Cookie SameSite constants to Pascal case per RFC specification (#3608)
Co-authored-by: sixcolors <6501251+sixcolors@users.noreply.github.com>
Co-authored-by: gaby <835733+gaby@users.noreply.github.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: Jason McNeil <sixcolors@mac.com>
2025-07-27 17:12:57 +02:00
Juan Calderon-Perez
b839032cf2
🔥 feat: Add HeaderLimit option to BasicAuth middleware (#3620)
Co-authored-by: RW <rene@gofiber.io>
2025-07-27 16:56:15 +02:00
Juan Calderon-Perez
96674dc591
🔥 feat: Add Fiber Context to BasicAuth Authorizer (#3621) 2025-07-27 16:25:31 +02:00
RW
856fdf2e66
Enable govet shadow (#3617) 2025-07-25 14:43:02 +02:00
Juan Calderon-Perez
56b5e6bb76
🔥 feat: Support for disabling response headers in Limiter Middleware (#3618) 2025-07-25 14:38:41 +02:00
RW
05f8ac0255
🔥 feat: Add config for Timeout middleware (#3604)
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2025-07-20 15:22:08 +02:00
RW
5dffcb6d84
[Static]: Improve sanitizePath performance (#3601) 2025-07-20 13:50:44 +02:00
Juan Calderon-Perez
93be63c229
🧹 chore: Improve static middleware security (#3595) 2025-07-20 10:35:53 +02:00
Jason McNeil
e17bab7946
Refactor CSRF middleware and enhance documentation (#3598)
Co-authored-by: RW <rene@gofiber.io>
2025-07-19 20:11:33 +02:00
René
d5842860eb fix Benchmark_MemoryLock
panic: runtime error: index out of range [1] with length 1

goroutine 67 [running]:
github.com/gofiber/fiber/v3/middleware/idempotency_test.Benchmark_MemoryLock(0xc00012c2c8)
	/home/runner/work/fiber/fiber/middleware/idempotency/locker_test.go:74 +0x23d
testing.(*B).runN(0xc00012c2c8, 0x1)
	/opt/hostedtoolcache/go/1.24.4/x64/src/testing/benchmark.go:219 +0x190
testing.(*B).run1.func1()
	/opt/hostedtoolcache/go/1.24.4/x64/src/testing/benchmark.go:245 +0x48
created by testing.(*B).run1 in goroutine 1
	/opt/hostedtoolcache/go/1.24.4/x64/src/testing/benchmark.go:238 +0x90
exit status 2
2025-07-18 08:55:06 +02:00
René
16fd8edbf1 fix Benchmark_MemoryLock
panic: runtime error: index out of range [1] with length 1

goroutine 67 [running]:
github.com/gofiber/fiber/v3/middleware/idempotency_test.Benchmark_MemoryLock(0xc00012c2c8)
	/home/runner/work/fiber/fiber/middleware/idempotency/locker_test.go:74 +0x23d
testing.(*B).runN(0xc00012c2c8, 0x1)
	/opt/hostedtoolcache/go/1.24.4/x64/src/testing/benchmark.go:219 +0x190
testing.(*B).run1.func1()
	/opt/hostedtoolcache/go/1.24.4/x64/src/testing/benchmark.go:245 +0x48
created by testing.(*B).run1 in goroutine 1
	/opt/hostedtoolcache/go/1.24.4/x64/src/testing/benchmark.go:238 +0x90
exit status 2
2025-07-18 08:53:53 +02:00
M. Efe Çetin
192d1dff0d
feat: add context methods to fiber.Storage interface (#3566)
* feat: add context methods to fiber.Storage interface

* fix linter

* create new file for storage interface (storage_interface.go)

* add simple context check to internal storage

* update docs

* add fallback context for session

---------

Co-authored-by: René <rene@gofiber.io>
2025-07-18 03:19:50 +02:00
RW
2f8fdc454b
Add modernize lint (#3590) 2025-07-17 14:48:43 +02:00
Juan Calderon-Perez
c1e9ae3ff9
🐛 bug: Fix static/favicon middlewares file descriptor leaks (#3579) 2025-07-14 15:16:57 +02:00
Juan Calderon-Perez
8ef317cbae
🐛 bug: Fix missing Allow header in EnvVar middleware per RFC 9110 (#3570) 2025-07-11 08:42:57 +02:00