Changelog

All notable changes to this project are documented here. The format follows Keep a Changelog, and the project adheres to Semantic Versioning.

#Unreleased

#Added

• Opt-in authorization: Authorities (roles and permissions of an identity), Policy<T> and the Authorized<T, P> extractor, which rejects with 401 without an identity and 403 when the policy fails.
• macros feature with the #[authorize(..)] handler attribute, in the spirit of Spring's @PreAuthorize: has_role, has_any_role, has_all_roles, has_permission, has_any_permission, has_all_permissions, authenticated(), check(fn), combined with &&, || and !. New crate kerniq-macros.
• Require<T> middleware for router-level role and permission rules (Require::<User>::role("ADMIN"), any_role, permission, check, policy::<P>(), .and, .or, .message), the counterpart of Spring Security's requestMatchers(..).hasRole(..).
• Guide for connecting databases and message brokers (docs/integrations.md): PostgreSQL/MySQL/SQLite with sqlx, Redis, MongoDB, Kafka and RabbitMQ, with a summary in the README.
• Claude Code skill for building services with Kerniq (skills/kerniq-server/SKILL.md), with install instructions in the README.
• examples/error-handling: domain errors mapped with From, ?, error codes and details, internal errors that never leak, headers such as Retry-After, and a custom fallback.
• MIGRATION.md, a guide to upgrading across breaking releases.
• #![warn(missing_docs)] in every library crate, and docs for the variants of RequireFuture and RateLimitFuture.

#0.1.0 - 2026-11-07

First release.

#Added

• App builder: route registration for every standard HTTP method, typed state (App<S>), configuration, middleware, fallbacks, background tasks, shutdown signals; run, serve, run_blocking, into_axum_router.
• Router with prefixes, groups, mounting (mount, merge, mount_axum), nested fallbacks, route introspection, and :id / {id} path syntax.
• Error model: a single Error type with a JSON envelope, constructors for common statuses, details, headers, logged-but-hidden sources, and ResultExt / OptionExt.
• Extractors with JSON rejections: Path, Query, Json, Header<T> (UserAgent, ContentType, Authorization, BearerToken, XRequestId), ValidatedJson, ValidatedQuery; responses Created, NoContent.
• Deferred, ordered middleware composition (first declared = outermost) for both apps and routers; Middleware trait and TowerLayer adapter.
• Middleware: Logger, RequestId, Timeout, BodyLimit, ConcurrencyLimit, Cors, Compression, SecurityHeaders, RateLimit, Auth / Authenticator / Identity, Metrics (Prometheus format).
• Server runtime: Hyper HTTP/1 + HTTP/2 accept loop with connection limits, header read timeout, TCP_NODELAY, ConnectInfo, graceful shutdown with bounded drain, OS signal handling, BackgroundTasks.
• ServerConfig from code, KERNIQ_* environment variables and TOML files.
• WebSocket support (Axum), OpenAPI documents and Swagger UI (Utoipa).
• kerniq CLI: new (basic, rest, modular, production templates), dev, build, check, test.
• Twelve runnable examples, guides in docs/, and benchmarks against native Axum (criterion, allocation counts, real-HTTP load test).