Releases: UzStack/relay
Releases · UzStack/relay
Release list
v0.3.1 — token'ga name (yorliq)
Scoped token'larga ixtiyoriy nom qo'shildi:
relay token create --name billing-service --kinds http— nom bilan tokenrelay token listendi NAME ustunini ko'rsatadi- Nom reyestrda saqlanadi (auth'ga ta'sir qilmaydi, faqat yorliq)
v0.3.0 — scoped, revocable JWT token'lar
Kind bo'yicha cheklangan, bekor qilinadigan token'lar qo'shildi.
relay token create --kinds http,email [--ttl 720h]— scoped JWT tokenrelay token list/relay token revoke <jti>— ro'yxat va bekor qilish- POST /tasks: scoped token faqat ruxsatidagi kind'ni yubora oladi (aks holda 403)
- API_TOKEN — barcha kind'larga ruxsat beruvchi root token bo'lib qoladi
- Fail-closed: imzo + muddat + reyestrda mavjud & revoke qilinmagan bo'lishi shart
- TOKEN_SECRET, TOKEN_STORE env'lari
golang-jwt/jwt/v5 (HS256, alg qat'iy tekshiriladi).
v0.2.1 — barqarorlik va xavfsizlik tuzatishlari
- Task store TTL eviction (TASK_TTL) — yakunlangan task'lar avtomatik tozalanadi, xotira cheksiz o'smaydi
- Server WS SetReadLimit (MAX_MESSAGE_SIZE) — worker'dan cheksiz katta xabar himoyasi
- Token solishtirish constant-time (timing-attack himoyasi)
- README: yangi env'lar + in-memory (persistence yo'q) eslatmasi
Persistence ataylab qo'shilmadi (in-memory dizayn).
v0.2.0 — fayl upload/download
Fayl upload/download qo'shildi (blob store + reference):
- POST /files (multipart) → file_id, GET /files/{id} — stream download
- Disk blob store: TTL + GC, hajm limiti, filename sanitizatsiya
- authAny: /files ikkala tomon (API va WORKER token) uchun
- Config: BLOB_DIR, BLOB_TTL, MAX_FILE_SIZE
- Worker: fileClient (Download/Upload) + namuna 'file' kind handler
- Upload va download ikkala yo'nalish qo'llab-quvvatlanadi
Fayl baytlari task pipeline'iga (WS/JSON) kirmaydi — payload'da faqat file_id uzatiladi.
v0.1.1
v0.1.0
Full Changelog: https://github.com/UzStack/relay/commits/v0.1.0