9 Releases 9 Tags

RSS Feed

• v0.1.7 b1f754831a

  Compare

  v0.1.7 Stable

  ryan released this 2026-03-11 20:19:03 +00:00 | 5 commits to main since this release

  Bug Fixes

  • Fix login/register/logout session cookies — Datastar's NewSSE() was flushing HTTP headers before SCS could attach the Set-Cookie header, so session cookies never reached the browser. Converted auth flows from SSE to standard HTML forms with HTTP redirects. (#14)
  • Fix return_url redirect after login — The login page now captures the ?return_url= query parameter into the session, so users are redirected back to where they came from after logging in.
  • Limit auth form request body size — Added http.MaxBytesReader to login and register handlers to prevent unbounded memory allocation (gosec G120).

  Tests

  • Added 10 handler tests covering login, register, and logout flows.

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)