Changelog
Other Work
- 6112417: added ErrBadCredentials, to disambiguate the case or parseable vs incorrect credentials (@johnabass)
- bbec630: added HTTP-specific AsValidator (@johnabass)
- fb457ec: added a general purpose unauthorized error (@johnabass)
- 0b6dd02: added examples around authentication and authorization (@johnabass)
- 9f4da81: bump to go1.23 (@johnabass)
- e19d904: capability support (@johnabass)
- 92ae145: custom HTTP capabilities moved to their own subpackage (@johnabass)
- caaa627: custom HTTP capabilities moved to their own subpackage (@johnabass)
- 2307f48: made the API and its implementation easier to reason about; fixed a bug with multiple capabilities (@johnabass)
- 925d08d: refactored the Challenge API to better comply with the RFC; removed support for token68 (@johnabass)
- be4ff5c: updated default error handling to include the new bascule.ErrBadCredentials error (@johnabass)