CHANGES
=======

0.5.0
-----

- introduced scope.sign(user, opts) to get a jwt without reference to express
- refactor how variants are stored - use the same shared dictionnary
- update nginx config to allow more memory for the shared dictionnaries
- pass HttpError from http-errors module for throwing forbidden/unauthorized errors.
  The corresponding scope() options are no longer in use.

0.6.0
-----

- factored restrict and allowed, renamed allowed to `test`
- parametrized scopes now correctly return wildcard headers

0.7.0
-----

- issuer is the hostname and cannot be configured

0.8.0
-----

- scope.serializeBearer(req, user, opts)
- `make luarocks` installs lua modules in a local tree

0.9.0
-----

- nothing is cached unless tagged
- no particular peremption is set (used to be 1 day by default if nothing was set)

1.0.0
-----

- major breaking changes: scopes are now locks and has been simplified a lot.

2.2.0
-----

- upcache.disabled (the lua module) let lua-ngx code disable upcache

2.6.0
-----

- more es6 javascript
- fix Vary handling when no response header is set
- test Vary with Map

2.7.0
-----

- tag.for cannot override tag.disable
- better support for headers lists

2.8.0
-----

- lock: req.user.grants is always set