v1.1.2: Request bodies can now be re-used, after being read in an `AuthenticationFunc` and Go 1.22+-only

🔊 Notable features

Go 1.22+ requirement

This module now requires Go 1.22 to build (previously we supported Go 1.20+).

Go 1.22 is still fairly old, and was marked as unsupported by the Go team in 2025-02-11, and is a new requirement as part of a dependency bump from kin-openapi.

This shouldn't technically be a breaking change given the age of the Go version used and it being unsupported - so ideally isn't being used heavily - but we wanted to flag it as such in case this came as a surprise.

Request body can now be re-used, after being read in an AuthenticationFunc

A longstanding issue with the openapi3filter from kin-openapi, that we build on top of for this middleware, resulted in cases where the request body could not be re-parsed after being consumed in a middleware's AuthenticationFunc.

This could lead to errors such as:

request body has an error: value is required but missing

Or:

request body has an error: reading failed: http: invalid Read on closed Body

This has now been fixed upstream, and therefore fixed for users of this middleware as part of this release.

👻 Maintenance

• build: build against Go 1.23 and 1.24 (#45) @jamietanna

📦 Dependency updates

• fix(deps)!: update module github.com/getkin/kin-openapi to v0.132.0 (#19) @renovate[bot]

Sponsors

We would like to thank our sponsors for their support during this release.