chore: go fix ./...

Apply Go modernization fixes from `go fix ./...` across both v1 and v2:

* `interface{}` -> `any` (Go 1.18+ alias)
* Other small idiomatic updates

No behaviour changes; this is a hygiene pass to make the build green
under stricter linters and bring the codebase up to modern Go style.
Run with Go 1.25+ as required by CLAUDE.md and go.mod.

Author: paskal

avatar/avatar.go

@@ -243,7 +243,7 @@ func GetGravatarURL(email string) (res string, err error) {
 }
 
 func retry(retries int, delay time.Duration, fn func() error) (err error) {
-	for i := 0; i < retries; i++ {
+	for range retries {
 		if err = fn(); err == nil {
 			return nil
 		}

logger/interface.go

@@ -6,17 +6,17 @@ import "log"
 
 // L defined logger interface used everywhere in the package
 type L interface {
-	Logf(format string, args ...interface{})
+	Logf(format string, args ...any)
 }
 
 // Func type is an adapter to allow the use of ordinary functions as Logger.
-type Func func(format string, args ...interface{})
+type Func func(format string, args ...any)
 
 // Logf calls f(id)
-func (f Func) Logf(format string, args ...interface{}) { f(format, args...) }
+func (f Func) Logf(format string, args ...any) { f(format, args...) }
 
 // NoOp logger
-var NoOp = Func(func(string, ...interface{}) {})
+var NoOp = Func(func(string, ...any) {})
 
 // Std logger sends to std default logger directly
-var Std = Func(func(format string, args ...interface{}) { log.Printf(format, args...) })
+var Std = Func(func(format string, args ...any) { log.Printf(format, args...) })

logger/interface_test.go

@@ -13,7 +13,7 @@ import (
 
 func TestLogger(t *testing.T) {
 	buff := bytes.NewBufferString("")
-	lg := Func(func(format string, args ...interface{}) {
+	lg := Func(func(format string, args ...any) {
 		fmt.Fprintf(buff, format, args...)
 	})
 

middleware/auth.go

@@ -28,8 +28,8 @@ type Authenticator struct {
 
 // RefreshCache defines interface storing and retrieving refreshed tokens
 type RefreshCache interface {
-	Get(key interface{}) (value interface{}, ok bool)
-	Set(key, value interface{})
+	Get(key any) (value any, ok bool)
+	Set(key, value any)
 }
 
 // TokenService defines interface accessing tokens
@@ -49,7 +49,7 @@ type BasicAuthFunc func(user, passwd string) (ok bool, userInfo token.User, err
 var adminUser = token.User{
 	ID:   "admin",
 	Name: "admin",
-	Attributes: map[string]interface{}{
+	Attributes: map[string]any{
 		"admin": true,
 	},
 }

middleware/auth_test.go

@@ -44,7 +44,7 @@ func TestAuthJWTCookie(t *testing.T) {
 		assert.NoError(t, err)
 		assert.Equal(t, token.User{Name: "name1", ID: "provider1_id1", Picture: "http://example.com/pic.png",
 			IP: "127.0.0.1", Email: "me@example.com", Audience: "test_sys",
-			Attributes: map[string]interface{}{"boola": true, "stra": "stra-val"}}, u)
+			Attributes: map[string]any{"boola": true, "stra": "stra-val"}}, u)
 		w.WriteHeader(201)
 	}
 	mux.Handle("/auth", a.Auth(http.HandlerFunc(handler)))
@@ -179,7 +179,7 @@ func TestAuthJWTRefreshConcurrentWithCache(t *testing.T) {
 	var wg sync.WaitGroup
 	a.RefreshCache = newTestRefreshCache()
 	wg.Add(100)
-	for i := 0; i < 100; i++ {
+	for range 100 {
 		time.Sleep(1 * time.Millisecond) // TODO! not sure how testRefreshCache may have misses without this delay
 		go func() {
 			defer wg.Done()
@@ -467,7 +467,7 @@ func TestRBAC(t *testing.T) {
 		assert.NoError(t, err)
 		assert.Equal(t, token.User{Name: "name1", ID: "provider1_id1", Picture: "http://example.com/pic.png",
 			IP: "127.0.0.1", Email: "me@example.com", Audience: "test_sys",
-			Attributes: map[string]interface{}{"boola": true, "stra": "stra-val"},
+			Attributes: map[string]any{"boola": true, "stra": "stra-val"},
 			Role:       "employee"}, u)
 		w.WriteHeader(201)
 	})
@@ -558,16 +558,16 @@ func makeTestAuth(_ *testing.T) Authenticator {
 }
 
 type testRefreshCache struct {
-	data map[interface{}]interface{}
+	data map[any]any
 	sync.RWMutex
 	hits, misses int32
 }
 
 func newTestRefreshCache() *testRefreshCache {
-	return &testRefreshCache{data: make(map[interface{}]interface{})}
+	return &testRefreshCache{data: make(map[any]any)}
 }
 
-func (c *testRefreshCache) Get(key interface{}) (value interface{}, ok bool) {
+func (c *testRefreshCache) Get(key any) (value any, ok bool) {
 	c.RLock()
 	defer c.RUnlock()
 	value, ok = c.data[key]
@@ -579,7 +579,7 @@ func (c *testRefreshCache) Get(key interface{}) (value interface{}, ok bool) {
 	return value, ok
 }
 
-func (c *testRefreshCache) Set(key, value interface{}) {
+func (c *testRefreshCache) Set(key, value any) {
 	c.Lock()
 	defer c.Unlock()
 	c.data[key] = value

provider/apple.go

@@ -76,7 +76,7 @@ type AppleConfig struct {
 	ResponseMode string // changes method of receiving data in callback. Default value "form_post" (https://developer.apple.com/documentation/sign_in_with_apple/request_an_authorization_to_the_sign_in_with_apple_server?changes=_1_2#4066168)
 
 	scopes       []string         // for this package allow only username scope and UID in token claims. Apple service API provide only "email" and "name" scope values (https://developer.apple.com/documentation/sign_in_with_apple/clientconfigi/3230955-scope)
-	privateKey   interface{}      // private key from Apple obtained in developer account (the keys section). Required for create the Client Secret (https://developer.apple.com/documentation/sign_in_with_apple/generate_and_validate_tokens#3262048)
+	privateKey   any              // private key from Apple obtained in developer account (the keys section). Required for create the Client Secret (https://developer.apple.com/documentation/sign_in_with_apple/generate_and_validate_tokens#3262048)
 	publicKey    crypto.PublicKey // need for validate sign of token
 	clientSecret string           // is the JWT client secret will create after first call and then used until expired
 	jwkURL       string           // URL for fetch JWK Apple keys, need redefine for tests
@@ -228,7 +228,7 @@ func (ah *AppleHandler) initPrivateKey() error {
 }
 
 // tokenKeyFunc use for verify JWT sign, it receives the parsed token and should return the key for validating.
-func (ah *AppleHandler) tokenKeyFunc(jwtToken *jwt.Token) (interface{}, error) {
+func (ah *AppleHandler) tokenKeyFunc(jwtToken *jwt.Token) (any, error) {
 	if jwtToken == nil {
 		return nil, fmt.Errorf("failed to call token keyFunc, because token is nil")
 	}

provider/apple_pubkeys.go

@@ -162,7 +162,7 @@ func (aks *appleKeySet) get(kid string) (keys *applePublicKey, err error) {
 }
 
 // keyFunc use for JWT verify with specific public key
-func (aks *appleKeySet) keyFunc(token *jwt.Token) (interface{}, error) {
+func (aks *appleKeySet) keyFunc(token *jwt.Token) (any, error) {
 
 	keyID, ok := token.Header["kid"].(string)
 	if !ok {

provider/apple_pubkeys_test.go

@@ -131,7 +131,7 @@ func TestAppleKeySet_Get(t *testing.T) {
 
 func TestAppleKeySet_KeyFunc(t *testing.T) {
 
-	tokenHdr := map[string]interface{}{"kid": "86D88Kf"}
+	tokenHdr := map[string]any{"kid": "86D88Kf"}
 	validToken := jwt.Token{Header: tokenHdr}
 	testKeySet, err := parseAppleJWK([]byte(`{"keys":[{
 					  "kty": "RSA",

provider/apple_test.go

@@ -593,7 +593,7 @@ func prepareAppleOauthTest(t *testing.T, loginPort, authPort int, testToken *str
 	}
 }
 
-func createTestResponseToken(privKey interface{}) (string, error) {
+func createTestResponseToken(privKey any) (string, error) {
 	claims := &jwt.MapClaims{
 		"iss":   "http://go.localhost.test",
 		"iat":   time.Now().Unix(),

provider/custom_server_test.go

@@ -103,8 +103,7 @@ func TestCustomProvider(t *testing.T) {
 	router.Handle("/auth/customprov/", http.HandlerFunc(s.Handler))
 	ts := &http.Server{Addr: fmt.Sprintf("127.0.0.1:%d", 8080), Handler: router} //nolint:gosec
 
-	ctx, cancel := context.WithCancel(context.Background())
-	defer cancel()
+	ctx := t.Context()
 
 	go prov.Run(ctx)
 	go ts.ListenAndServe()