6 Commits

Author	SHA1	Message	Date
Jakub Zych	f1218f2c84	test(06-14): regression coverage for surf and bouncer gap closure	2026-09-21 19:47:16 +02:00
Jakub Zych	8a9449df63	fix(06-12): reject typed-nil guards and fractional JWT subjects	2026-09-21 19:43:35 +02:00
Jakub Zych	98dd09847a	test(06-05): close framework coverage gaps in bouncer, surf, wire, fetchguard ... - Registry neither-interface, nil-registry, and authenticate default - MemoryStore sweep actually drops expired entries - RegisterHouseMiddlewareFactory duplicate-name failure - pathScopedCORS unmatched path plus empty-raw-group introspection - Time UnmarshalJSON +00:00/Z and PublicOnlyMode host/IP cases	2026-09-19 21:08:04 +02:00
Jakub Zych	d376b1be2d	feat(06-01): grow router verbs, factories, and guard registry ... - Add Post/Put/Patch/Delete on pact.Router and surf Router/Group - Resolve name:param middleware via RegisterMiddlewareFactory - Add bouncer.Registry with Guard, CredentialGuard, UnauthorizedWriter - Re-express jwt as NewJWTGuard without changing Middleware bodies	2026-09-19 18:59:12 +02:00
Jakub Zych	92255a46ed	test(03-04): cover framework database, routing and JWT boundaries ... - Shared pgx/GORM pool, ICU locale fail, and isolated plugin migrations - Seven-stage middleware order, missing-guard boot failure, typed 404s - Adversarial JWT matrix including alg:none, empty secret, and no leak Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-17 20:29:46 +02:00
Jakub Zych	4ee4c4a2fc	feat(03-01): add ServeMux groups, JWT verifier, and serve command ... Named middleware resolves at boot, HS256 tokens are pinned with required exp/sub, and both binaries expose a signal-aware serve command. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-17 20:04:13 +02:00