gorest

🏆 cleanup of the codebase
🎁 example contains guidelines on how
gorest can be used to build RESTful API, but
developers are free to innovate and implement
their methods

⚡ optimized database configuration files

⚡ optimized web application firewall

⚡ JSON protection from hijacking

⚡ better handling of JWT

⚡ two-factor authentication

⚡ email verification

⚡ password recovery

⚡ password update

Full Changelog: https://github.com/pilinux/gorest/compare/v1.4.5...v1.5.1

⚡ gin updated to 1.8.1

⚡ gorm updated to 1.23.8

⚡ gorm mysql driver updated to 1.3.5

⚡ gorm sqlite driver updated to 1.3.6

⚡ mongodb mongo driver updated to 1.10.0

⚡ Qmgo updated to 1.1.1

⚡ radix driver updated to 4.1.0

⚡ gorm postgres driver updated to 1.3.7

⚡ gorm mysql driver updated to 1.3.4

⚡ gorm mongo driver updated to 1.9.1

⚡ gorm updated to 1.23.5

⚡ Qmgo updated to 1.1.0

⚡ MongoDB driver switched to Qmgo

⚡ Controller examples for MongoDB updated

⚡ Critical security issues (CWE-089, CWE-943) fixed in controller examples

⚡ Code refactored in database config files

⚡ MongoDB driver added

⚡ Bump to gorm 1.23.2

⚡ Error checks during initialization of redis

⚡ Option to enable/disable RDBMS

⚡ Bump to gorm 1.22.5

⚡ More error checks during gin engine setup

⚡ New action workflows added to examine, build, and static analysis of the code

What's Changed

• Bump gorm.io/driver/mysql from 1.2.2 to 1.2.3 by @dependabot in https://github.com/pilinux/gorest/pull/8
• Bump gorm.io/gorm from 1.22.4 to 1.22.5 by @dependabot in https://github.com/pilinux/gorest/pull/9

New Contributors

• @dependabot made their first contribution in https://github.com/pilinux/gorest/pull/8

Full Changelog: https://github.com/pilinux/gorest/compare/v1.4.0...v1.4.1

Breaking changes!! If your application is built on one of the previous releases, you need to do some adjustments to your codes before switching to v1.4.

• Now it is possible to serve both JSON response and HTML pages (Django-like syntax)
• To serve HTML pages, the template files must be located in the templates directory
• Newly added: Basic Auth. Users can use either one of them or both - JWT and Basic Auth
• At the application level, it is now possible to allow/block requests from user-defined IPs using Firewall

Critical security holes fixed

• During the login process, if the provided email is not found, API still tried to search the database. Now it will abandon the operation.
• Using a valid JWT, one user was able to modify resources related to other users. This issue is now fixed in the controllers.

All features and improvements

• database drivers included:
  • SQLite3
  • MySQL
  • PostgreSQL
  • Redis
• RDBMS examples:
  • one to one
  • one to many
  • many to many
• Redis examples:
  • key:value (CRUD)
  • key:hashes (CRUD)
• Logger
  • file-system
  • sentry.io
• Middleware
  • CORS
  • JWT
• Password hashing algorithm: Argon2id
• Known security vulnerability: none detected

Dependencies

• github.com/dgrijalva/jwt-go v3.2.0+incompatible
• github.com/gin-gonic/gin v1.7.2
• github.com/jinzhu/gorm v1.9.16
• github.com/joho/godotenv v1.3.0
• gorm.io/driver/mysql v1.1.0
• gorm.io/driver/postgres v1.1.0
• gorm.io/driver/sqlite v1.1.4
• gorm.io/gorm v1.21.11