Issues

• verification: an unreadable or malformed AUTH_JWT_VERIFY_CERT source boots with local verification off

  LerianStudio/lib-auth#199 · Filter by author fredcamaral opened on Sep 30, 2026

• fix(middleware): Close does not stop a JWKS fetch already in flight

  LerianStudio/lib-auth#198 · Filter by author jeffersonrodrigues92 opened on Sep 30, 2026

• middleware: export a Principal publisher for tests and the principal type constants

  LerianStudio/lib-auth#192 · Filter by author fredcamaral opened on Sep 22, 2026

• feat(middleware): expose the token's string claims on Principal

  LerianStudio/lib-auth#186 · Filter by author fredcamaral opened on Sep 15, 2026

• fix(middleware): stop authorizing unknown token types under a fabricated editor role by default

  bug
  LerianStudio/lib-auth#181 · Filter by author fredcamaral opened on Sep 12, 2026

• middleware: return the token expiry from GetApplicationToken instead of discarding it

  LerianStudio/lib-auth#179 · Filter by author fredcamaral opened on Sep 11, 2026

• middleware: refuse instead of passing through when Authorize has a nil receiver

  LerianStudio/lib-auth#178 · Filter by author fredcamaral opened on Sep 11, 2026

• middleware: add RequirePrincipal() to authenticate without deciding

  LerianStudio/lib-auth#177 · Filter by author fredcamaral opened on Sep 11, 2026

• middleware: propagate tenant claims on the HTTP path, not only on gRPC

  LerianStudio/lib-auth#176 · Filter by author fredcamaral opened on Sep 11, 2026

• middlewareGRPC: publish the derived Principal on the gRPC path

  LerianStudio/lib-auth#175 · Filter by author fredcamaral opened on Sep 11, 2026

• middleware: make Required environment-aware instead of reading only AUTH_REQUIRED

  LerianStudio/lib-auth#174 · Filter by author fredcamaral opened on Sep 11, 2026

• Bump lib-commons to >= v5.0.2 (observability fix)

  dependencies
  LerianStudio/lib-auth#92 · Filter by author gandalf-at-lerian opened on Apr 27, 2026