diff --git a/CHANGELOG.md b/CHANGELOG.md index 5642eb4..88d290a 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,13 @@ # Unreleased +# 0.12.1 + +**Important Security Update** + +- Ensure ID cycling invokes `create`. #188 + +Because cycling the session ID involves creating a new ID, this must follow the same semantics as normal session creation. Therefore prior to this fix session ID collision could occur through this vector. + # 0.12.0 **Important Security Update** diff --git a/Cargo.toml b/Cargo.toml index f076daa..c9eb581 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -3,7 +3,7 @@ members = [".", "memory-store", "tower-sessions-core"] resolver = "2" [workspace.package] -version = "0.12.0" +version = "0.12.1" edition = "2021" authors = ["Max Countryman "] license = "MIT" @@ -40,10 +40,10 @@ signed = ["tower-cookies/signed"] private = ["tower-cookies/private"] [workspace.dependencies] -tower-sessions = { version = "=0.12.0", path = ".", default-features = false } +tower-sessions = { version = "=0.12.1", path = ".", default-features = false } -tower-sessions-core = { version = "=0.12.0", path = "tower-sessions-core", default-features = false } -tower-sessions-memory-store = { version = "=0.12.0", path = "memory-store" } +tower-sessions-core = { version = "=0.12.1", path = "tower-sessions-core", default-features = false } +tower-sessions-memory-store = { version = "=0.12.1", path = "memory-store" } async-trait = "0.1.74" parking_lot = { version = "0.12.1", features = ["serde"] } diff --git a/README.md b/README.md index cb6896f..66aa70a 100644 --- a/README.md +++ b/README.md @@ -57,7 +57,7 @@ That said, a number of session store implmentations already exist and may be useful starting points. | Crate | Persistent | Description | -|------------------------------------------------------------------------------------------------------------------|------------|-------------------------------------------------------------| +| ---------------------------------------------------------------------------------------------------------------- | ---------- | ----------------------------------------------------------- | | [`tower-sessions-dynamodb-store`](https://github.com/necrobious/tower-sessions-dynamodb-store) | Yes | DynamoDB session store | | [`tower-sessions-firestore-store`](https://github.com/AtTheTavern/tower-sessions-firestore-store) | Yes | Firestore session store | | [`tower-sessions-libsql-store`](https://github.com/daybowbow-dev/tower-sessions-libsql-store) | Yes | libSQL session store | @@ -82,7 +82,7 @@ To use the crate in your project, add the following to your `Cargo.toml` file: ```toml [dependencies] -tower-sessions = "0.12.0" +tower-sessions = "0.12.1" ``` ## 🤸 Usage