eyazici90/go-ddd

Practical implementation of Domain Driven Design in go

go-ddd's Issues

Upgrade dependency "go.mongodb.org/mongo-driver"

Background

Repo github.com/eyazici90/go-ddd depends on go.mongodb.org/[email protected].

https://github.com/eyazici90/go-ddd/blob/master/go.mod#L33

However, comparing version v1.4.5 of go.mongodb.org/mongo-driver from proxy.golang.org and github, there are inconsistencies.

commit time of the copy on github.com

"committer": {
      "name": "Benjamin Rewis",
      "email": "[email protected]",
      "date": "2021-01-19T19:46:06Z"
    }

commit time of the copy on proxy.golang.org

{"Version":"v1.4.5","Time":"2021-01-19T19:12:43Z"}

So the checksum from the code in github does not match the checksum saved in sum.golang.org. The v1.4.5 tag of go.mongodb.org/mongo-driver might have been retagged after a minor edition on github. I guess you use proxy.golang.org to get dependencies, but that also shows that your project is depending on the copy of go.mongodb.org/[email protected] before its edition. Depending upon such inconsistent tag version may also result in some unexpected errors as well as build errors due to different proxy settings.

For example, when someone who does not use proxy.golang.org, say GOPROXY=direct, attempts to get go.mongodb.org/[email protected], the following error occurs.

go: downloading go.mongodb.org/mongo-driver v1.4.5
go: go.mongodb.org/mongo-driver@v1.4.5: verifying module: checksum mismatch
        downloaded: h1:z4/YQzLTxI+ymcrS//Wc2JBn2b9ojvpVH3BaYT8rqUc=
        sum.golang.org: h1:TLtO+iD8krabXxvY1F1qpBOHgOxhLWR7XsT7kQeRmMY=

SECURITY ERROR
This download does NOT match the one reported by the checksum server.
The bits may have been replaced on the origin server, or an attacker may
have intercepted the download attempt.

For more information, see 'go help module-auth'.

So, this is a reminder in the hope that you can get rid of this problematic version of project go.mongodb.org/mongo-driver.

Solution

1. Bump the version of dependency go.mongodb.org/mongo-driver

I would recommend bumping the version of go.mongodb.org/mongo-driver to a new release to ensure dependency copy in proxy.golang.org and github in sync.

References

• https://proxy.golang.org/

Beginner Friendly Documentation

Can you please update the readme? So users can understand the concept of DDD properly. I don't know how to use the project after hitting the container endpoint.