v1.42.0

1.42.0 (2025-01-09)

Feature

• authz: add method to remove all policies for a subject (208056c)
• authz: add method to revoke all roles for a user (0166bdd)
• authz: add middleware (b5e28c9)
• authz: change policy effect to deny-override (5e44733)
• authz: use globMatch on actions (9f62785)
• user: add authz (161a83d)
• user: cleanup permissions when user is deleted (9098ed4)
• user: require authentication (8e24288)

Chore

• test: remove DriverFor method (b013e42)
• update deps (1cbdea5)
• update tools (b14f58d)

Refactor

• authn: move middleware to http module (39cbd6c)
• authz: add policy struct to allow deny policies (b879d9d)
• authz: change grant to accept many requests (38506e0)
• authz: rename enforcer to permission manager (a461bf5)
• authz: split grant into grant and grant all (ea9b7eb)
• authz: use refstring on middleware (2a8420c)
• ref: change order of constructor params (221e03d)
• user: extract permission service (9002fa8)
• user: move user ref constructor to user package (3a4d316)

Test

• add driver user, with the entity and its own driver (998a6d4)
• casdoor: add admin login test (8e5092e)