Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 10 additions & 1 deletion CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,14 @@ All notable changes to backendkit are documented here. Format:

## [Unreleased]

## [1.27.0] - 2026-10-11

Minor release on the **v1** line: additive API only. `socrate.Client.ServiceTokenWithScopes`
requests a service-account token carrying given scopes (for example an application-defined scope
such as `swingdrift:worker`, granted in Socrate v1.14.0 or later), cached per scope set; a scope
Socrate does not grant is `ErrScopeNotGranted`. The README and the integration guides follow the
current code and Socrate v1.14. No changed signature and no changed default.

### Added
- **`socrate.Client.ServiceTokenWithScopes` and `socrate.ErrScopeNotGranted`: a service-account
token carrying given scopes.** `ServiceToken` requests no scope, so Socrate issues its default
Expand Down Expand Up @@ -858,7 +866,8 @@ are rejected. Confirm your Socrate server populates `aud` before enabling it in
production. Making audience validation required-by-default is deferred to a future
major (v2.0) and tracked separately.

[Unreleased]: https://github.com/ovander/backendkit/compare/v1.26.1...HEAD
[Unreleased]: https://github.com/ovander/backendkit/compare/v1.27.0...HEAD
[1.27.0]: https://github.com/ovander/backendkit/compare/v1.26.1...v1.27.0
[1.26.1]: https://github.com/ovander/backendkit/compare/v1.26.0...v1.26.1
[1.26.0]: https://github.com/ovander/backendkit/compare/v1.25.0...v1.26.0
[1.25.0]: https://github.com/ovander/backendkit/compare/v1.24.0...v1.25.0
Expand Down
4 changes: 2 additions & 2 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -140,7 +140,7 @@ to Socrate (`bff`, `pep`) and `ailang` for `aigateway`.
## Installation

```bash
go get github.com/ovander/backendkit@v1.26.1
go get github.com/ovander/backendkit@v1.27.0
```

```go
Expand All @@ -149,7 +149,7 @@ module github.com/your-org/my-service

go 1.26.0

require github.com/ovander/backendkit v1.26.1
require github.com/ovander/backendkit v1.27.0
```

---
Expand Down
2 changes: 1 addition & 1 deletion docs/CLIENT-INTEGRATION.md
Original file line number Diff line number Diff line change
Expand Up @@ -258,7 +258,7 @@ token without every listed scope gets **403** `insufficient_scope`. Socrate
v1.14.0 or later issues such application-defined scopes (`<namespace>:<name>`)
to the clients whose `allowed_scopes` list them, when they request them.

On the calling side (backendkit later than v1.26.1):
On the calling side (backendkit v1.27.0 or later):
first register the scope in the calling client's `allowed_scopes` in Socrate
(v1.14.0 or later), then request it with `ServiceTokenWithScopes`; the plain
`ServiceToken` requests no scope and gets Socrate's default, `api`:
Expand Down
Loading