v2.5.0 -- API endpoint to rotate API key

What's Changed

• Move U2F decryption into Load by @briskt in #116
• move the storage client out of the Context by @briskt in #117
• use string argument and return value by @briskt in #118
• Release -- refactoring for easier maintenance by @briskt in #119
• add functions to re-encrypt using a new key to prepare for key rotation by @briskt in #120
• re-encrypt WebAuthn records by @briskt in #121
• Merge main back to develop by @briskt in #122
• use AWS CDK for deployment by @briskt in #123
• Finish conversion from Serverless Framework to AWS CDK by @briskt in #124
• Release 2.5.0 -- rotate an API key by @briskt in #125

Full Changelog: v2.4.1...v2.5.0

v2.4.1 -- internal refactoring and preparatory work

What's Changed

• add the ability to scan the WebAuthn table by apiKey by @briskt in #106
• remove redundant bool return value from IsCorrect by @briskt in #107
• extract function newCipherBlock by @briskt in #109
• add new function EncryptLegacy to prepare for credential rotation by @briskt in #110
• include check for key activation in IsCorrect by @briskt in #111
• use GitHub Actions environments by @briskt in #113
• add configuration for TOTP table by @briskt in #114
• remove pkg/errors by @briskt in #115
• Release -- more groundwork for credential rotation by @briskt in #112

Full Changelog: v2.4.0...v2.4.1

v2.4.0 -- add api-key endpoints and a small bugfix

What's Changed

• fix bug in DecryptData function and remove workarounds by @briskt in #105
• add endpoints to create and activate API keys by @briskt in #103
• Release - key management API by @briskt in #108

Full Changelog: v2.3.8...v2.3.9

v2.3.8 -- bugfix

Changed

• Internal refactoring to prepare for additional features for API Key management

Fixed

• Added a missing return in BeginRegistration

What's Changed

• Create an OpenAPI spec by @briskt in #91
• add code docs for functions in webauthn.go and user.go by @briskt in #93
• add code docs for functions in apikey.go and rename a couple functions by @briskt in #94
• minor fixes by @briskt in #95
• remove workaround for bug in webauthn library, now fixed by @briskt in #98
• rename DynamoUser to WebauthnUser by @briskt in #99
• Release 2.3.8 -- cleanup and docs by @briskt in #97
• move webauthn functions into separate files by @briskt in #102
• Release 2.3.8 -- refactoring to prepare for api-key features by @briskt in #104

Full Changelog: v2.3.7...v2.3.8

v2.3.7 -- security patch and other cleanup

Fixed

• Update Serverless to the latest 3.x version
• Dependency updates, esp. CVE-2025-30204 (IDP-1489)
• Simplify syntax and remove dead code

What's Changed

• dependency and Go 1.23 update by @briskt in #88
• update aws-sdk to v2 by @briskt in #89
• Production release - update AWS SDK to v2 by @briskt in #90
• cleanup and update by @briskt in #92
• Release 2.3.7 by @briskt in #96

Full Changelog: v2.3.6...v2.3.7

bump x/crypto to v0.31.0

What's Changed

• bump x/crypto to v0.31.0 by @briskt in #86
• bump x/crypto to v0.31.0 by @briskt in #87

Full Changelog: v2.3.5...v2.3.6

more errors logged with detail

What's Changed

• Release - Run golangci-lint and govulncheck in CI workflow by @briskt in #81
• Feature concurrency by @Praveenraj-K in #83
• Changing the package naming by @Praveenraj-K in #84
• Release - log more error detail by @briskt in #82

Full Changelog: v2.3.4...v2.3.5

add detail in webauthn failure log messages

Changed

• Deploy to 2 regions at the same time.
• Add detail to log messages for webauthn fail

Release v2.3.3 --GHCR.io image push

Added
-Pushing the Docker images to ghcr.io (Git Container Registry)

increase log retention to 60 days

Changed

• Increased log retention to 60 days