« Changelog History


Echo v4.5.0 Release Notes

Release Date: 2021-08-01 // 3 months ago

  • Important notes

    💥 A BREAKING CHANGE is introduced for JWT middleware users. The JWT library used for the JWT middleware had to be changed from github.com/dgrijalva/jwt-go to 🔒 github.com/golang-jwt/jwt due former library being unmaintained and affected by security issues. ✅ The github.com/golang-jwt/jwt project is a drop-in replacement, but supports only the latest 2 Go versions. So for JWT middleware users Go 1.15+ is required. For detailed information please read #1940

    To change the library imports in all .go files in your project replace all occurrences of dgrijalva/jwt-go with golang-jwt/jwt.

    🐧 For Linux CLI you can use:

    find -type f -name "*.go" -exec sed -i "s/dgrijalva\/jwt-go/golang-jwt\/jwt/g" {} \;
go mod tidy

    🛠 Fixes

    • 🔄 Change JWT library to github.com/golang-jwt/jwt #1946

Previous changes from v4.4.0

  • 🛠 Fixes

    • Split HeaderXForwardedFor header only by comma #1878
    • 🛠 Fix Timeout middleware Context propagation #1910

    ✨ Enhancements

    • Bind data using headers as source #1866
    • ➕ Adds JWTConfig.ParseTokenFunc to JWT middleware to allow different libraries implementing JWT parsing. #1887
    • ➕ Adding tests for Echo#Host #1895
    • ➕ Adds RequestIDHandler function to RequestID middleware #1898
    • 👍 Allow for custom JSON encoding implementations #1880