Highlights
A big infrastructure release: a new cooler cache module, cookie-based token auth across subdomains, per-route CORS profiles, Cloudflare Turnstile, and opt-in S3 uploads behind a build tag.
Added
cooler.Cachewith in-memory and Redis drivers, and a Redis store that shares rate limits across instances.- A site-cache purge after admin saves, configured with
site_cache.purge_urlandpurge_token. - Token refresh through cookies across subdomains in
bouncer, with hardened credentialed CORS. - Per-group CORS policies through
cors:<profile>middleware, with preflights registered on the router. - Cloudflare Turnstile verification as
turnstile:openorturnstile:closedmiddleware. - An opt-in
/api-docsSwagger UI page. build.tagsinsummer.yaml, and asummercms_s3tag that links the S3 uploads driver.storage.uploads.public_urlfor direct bucket or CDN file URLs.pact.ReorderAfterSave, a hook that runs inside the reorder transaction.
Fixed
- Stored uploads are named after their sniffed content type rather than the client's extension.