Skip to content

Changelog (Page 4)

  • end_session_endpoint now recognizes client_id and logout_hint (9dd2b0e)
  • keep grants that persist if logged out by that grant’s client (26449f5), closes #857
  • use native node’s base64url encoding when available (6149bd3)
  • botched 6.30.0 release with a syntax error (cd5f02a)
  • Authorization Server Issuer Identifier in Authorization Response (3f67ee9)
  • update JARM feature draft version to Implementer’s Draft 01 (0a021de)
  • html safe guard the action attribute in form post responses (7cd6025)
  • typescript: interaction result may be undefined (#833) (44aa53e)
  • unrecognized EC curves and OKP subtypes are ignored (660f46d)
  • ignore client metadata valued undefined when applying defualts (d0ee50a), closes #824
  • client keystore refresh keeps the derived octet keys in store (024841e), closes #816
  • ensure decrypted request object is accessed in PAR responses (09751d7), closes #813
  • loopback redirectUriAllowed protocol check (#794) (da99330)
  • typescript: findAccount may return undefined (#786) (6689cdb)
  • updated request object mime-type as per draft-ietf-oauth-jwsreq-30 (f15524a)
  • typescript: allows adapter factory in typings (#776) (3cfcd77)
  • typescript: extend AdapterPayload from AnyClientMetadata (6631a2d), closes #774
  • typescript: add missing rpInitiatedLogout types (59c389b)
  • allow RP-Initiated Logout 1.0 feature to be disabled (a2ef044)
  • update backchannelLogout feature draft version (9a9dd7e)
  • update frontchannelLogout feature draft version (d54cc8f)
  • update sessionManagement feature draft version (aa62927)
  • ensure client is still valid after custom metadata processing (fded7c6)
  • incorporate behaviours and metadata from jwsreq-25 (cb12761)
  • update PAR implementation to ietf draft 02 (fd2ccee)
  • re-allow transfer-encoding chunked (f88447b), closes #739
  • remove unintended client_id from post_logout_redirect_uri callbacks (57d07cd)
  • correct jwtIntrospection draft ack version (#735) (62b97d4)
  • typescript: static IdToken.validate (#733) (a0d997e)
  • allow any JSON numeric value for timestamp values for DPoP JWTs (0700fde)
  • secp256k1 EC curve and ES256K JWS alg feature flag removed (f74f6bd)
  • secp256k1 and ES256K have been registered in IANA a few days ago so the flag is not needed anymore.

Note: Updates to draft specification versions are released as MINOR library versions, if you utilize these specification implementations consider using the tilde ~ operator in your package.json since breaking changes may be introduced as part of these version updates. Alternatively, acknowledge the version and be notified of breaking changes as part of your CI.

  • typescript: claims/scopes as Set in rejected/prompted functions (#719) (950c21d)
  • typescript: undefined return for DefaultPolicy.get and Checks.get (b61e9d8)
  • A192CBC-HS384 and A256CBC-HS512 direct encryption key derivation (ead23a7)
  • helper to define PKCE use requirement (0c2e208)
  • typescript: fix metaFor “value” argument type (0b31b69), closes #711
  • update DPoP implementation to ietf draft 01 (330d13c)

Note: Updates to draft specification versions are released as MINOR library versions, if you utilize these specification implementations consider using the tilde ~ operator in your package.json since breaking changes may be introduced as part of these version updates. Alternatively, acknowledge the version and be notified of breaking changes as part of your CI.

  • typescript: added types of prompt.checks in interaction policy (3b97bde)
  • typescript: export the DefaultPolicy interface (b36190b), closes #707
  • add server-wide policy configuration on accepting tokens in query (90b400a)
  • introspection response allowedPolicy helper function added (e59cc66), closes #642
  • update features.jwtIntrospection to draft 09 (219e8c3)
  • revert “chore: update tree router” (13e4142), closes #696
  • typescript: added revokeByGrantId types to appropriate models (883b038)
  • client jwks_uri are now fetched with a lock, cooldown improvements (b193010)
  • return iss to introspection responses (f1b6fb4), closes #676

← Newer entries | Older entries →