github.com/labstack/echo/v4

Enhancements

• Add start time to request logger middleware values #1991

Introduced a new request logger middleware to help with cases when you want to use some other logging library in your application.

Fixes

• fix timeout middleware warning: superfluous response.WriteHeader #1905

Enhancements

• Add Cookie to KeyAuth middleware's KeyLookup #1929
• JWT middleware should ignore case of auth scheme in request header #1951
• Refactor default error handler to return first if response is already committed #1956
• Added request logger middleware which helps to use custom logger library for logging requests. #1980
• Allow escaping of colon in route path so Google Cloud API "custom methods" could be implemented #1988

Important notes

A BREAKING CHANGE is introduced for JWT middleware users. The JWT library used for the JWT middleware had to be changed from github.com/dgrijalva/jwt-go to github.com/golang-jwt/jwt due former library being unmaintained and affected by security issues. The github.com/golang-jwt/jwt project is a drop-in replacement, but supports only the latest 2 Go versions. So for JWT middleware users Go 1.15+ is required. For detailed information please read #1940

To change the library imports in all .go files in your project replace all occurrences of dgrijalva/jwt-go with golang-jwt/jwt.

For Linux CLI you can use:

find -type f -name "*.go" -exec sed -i "s/dgrijalva\/jwt-go/golang-jwt\/jwt/g" {} \;
go mod tidy

Fixes

• Change JWT library to github.com/golang-jwt/jwt #1946

Fixes

• Split HeaderXForwardedFor header only by comma #1878
• Fix Timeout middleware Context propagation #1910

Enhancements

• Bind data using headers as source #1866
• Adds JWTConfig.ParseTokenFunc to JWT middleware to allow different libraries implementing JWT parsing. #1887
• Adding tests for Echo#Host #1895
• Adds RequestIDHandler function to RequestID middleware #1898
• Allow for custom JSON encoding implementations #1880

Important notes

• Route matching has improvements for following cases:
  1. Correctly match routes with parameter part as last part of route (with trailing backslash)
  2. Considering handlers when resolving routes and search for matching http method handler
• Echo minimal Go version is now 1.13.

Fixes

• When url ends with slash first param route is the match #1804
• Router should check if node is suitable as matching route by path+method and if not then continue search in tree #1808
• Fix timeout middleware not writing response correctly when handler panics #1864
• Fix binder not working with embedded pointer structs #1861
• Add Go 1.16 to CI and drop 1.12 specific code #1850

Enhancements

• Make KeyFunc public in JWT middleware #1756
• Add support for optional filesystem to the static middleware #1797
• Add a custom error handler to key-auth middleware #1847
• Allow JWT token to be looked up from multiple sources #1845