Changelog (Page 4)
6.31.0 (2021-01-19)
Section titled “6.31.0 (2021-01-19)”Features
Section titled “Features”- end_session_endpoint now recognizes client_id and logout_hint (9dd2b0e)
Bug Fixes
Section titled “Bug Fixes”Performance
Section titled “Performance”- use native node’s base64url encoding when available (6149bd3)
6.30.1 (2021-01-13)
Section titled “6.30.1 (2021-01-13)”Bug Fixes
Section titled “Bug Fixes”- botched 6.30.0 release with a syntax error (cd5f02a)
6.30.0 (2021-01-13)
Section titled “6.30.0 (2021-01-13)”Features
Section titled “Features”- Authorization Server Issuer Identifier in Authorization Response (3f67ee9)
- update JARM feature draft version to Implementer’s Draft 01 (0a021de)
6.29.11 (2021-01-12)
Section titled “6.29.11 (2021-01-12)”Bug Fixes
Section titled “Bug Fixes”6.29.10 (2021-01-04)
Section titled “6.29.10 (2021-01-04)”Bug Fixes
Section titled “Bug Fixes”- html safe guard the action attribute in form post responses (7cd6025)
6.29.9 (2020-12-10)
Section titled “6.29.9 (2020-12-10)”Bug Fixes
Section titled “Bug Fixes”- typescript: interaction result may be undefined (#833) (44aa53e)
- unrecognized EC curves and OKP subtypes are ignored (660f46d)
6.29.8 (2020-11-30)
Section titled “6.29.8 (2020-11-30)”Bug Fixes
Section titled “Bug Fixes”6.29.7 (2020-11-10)
Section titled “6.29.7 (2020-11-10)”Bug Fixes
Section titled “Bug Fixes”6.29.6 (2020-11-08)
Section titled “6.29.6 (2020-11-08)”Bug Fixes
Section titled “Bug Fixes”6.29.5 (2020-10-03)
Section titled “6.29.5 (2020-10-03)”Bug Fixes
Section titled “Bug Fixes”6.29.4 (2020-09-19)
Section titled “6.29.4 (2020-09-19)”Bug Fixes
Section titled “Bug Fixes”- typescript: findAccount may return undefined (#786) (6689cdb)
- updated request object mime-type as per draft-ietf-oauth-jwsreq-30 (f15524a)
6.29.3 (2020-08-25)
Section titled “6.29.3 (2020-08-25)”Bug Fixes
Section titled “Bug Fixes”6.29.2 (2020-08-20)
Section titled “6.29.2 (2020-08-20)”Bug Fixes
Section titled “Bug Fixes”6.29.1 (2020-08-13)
Section titled “6.29.1 (2020-08-13)”Bug Fixes
Section titled “Bug Fixes”- typescript: add missing rpInitiatedLogout types (59c389b)
6.29.0 (2020-08-12)
Section titled “6.29.0 (2020-08-12)”Features
Section titled “Features”- allow RP-Initiated Logout 1.0 feature to be disabled (a2ef044)
- update backchannelLogout feature draft version (9a9dd7e)
- update frontchannelLogout feature draft version (d54cc8f)
- update sessionManagement feature draft version (aa62927)
6.28.0 (2020-07-14)
Section titled “6.28.0 (2020-07-14)”Bug Fixes
Section titled “Bug Fixes”- ensure client is still valid after custom metadata processing (fded7c6)
Features
Section titled “Features”- incorporate behaviours and metadata from jwsreq-25 (cb12761)
- update PAR implementation to ietf draft 02 (fd2ccee)
6.27.5 (2020-07-06)
Section titled “6.27.5 (2020-07-06)”6.27.4 (2020-06-30)
Section titled “6.27.4 (2020-06-30)”6.27.3 (2020-06-19)
Section titled “6.27.3 (2020-06-19)”Bug Fixes
Section titled “Bug Fixes”6.27.2 (2020-06-16)
Section titled “6.27.2 (2020-06-16)”Bug Fixes
Section titled “Bug Fixes”- remove unintended client_id from post_logout_redirect_uri callbacks (57d07cd)
6.27.1 (2020-06-15)
Section titled “6.27.1 (2020-06-15)”Bug Fixes
Section titled “Bug Fixes”- correct jwtIntrospection draft ack version (#735) (62b97d4)
- typescript: static IdToken.validate (#733) (a0d997e)
6.27.0 (2020-06-01)
Section titled “6.27.0 (2020-06-01)”Bug Fixes
Section titled “Bug Fixes”- allow any JSON numeric value for timestamp values for DPoP JWTs (0700fde)
Features
Section titled “Features”- secp256k1 EC curve and ES256K JWS alg feature flag removed (f74f6bd)
BREAKING CHANGES
Section titled “BREAKING CHANGES”- secp256k1 and ES256K have been registered in IANA a few days ago so the flag is not needed anymore.
Note: Updates to draft specification versions are released as MINOR
library versions, if you utilize these specification implementations
consider using the tilde ~ operator in your package.json since
breaking changes may be introduced as part of these version updates.
Alternatively, acknowledge the version and
be notified of breaking changes as part of your CI.
6.26.1 (2020-05-18)
Section titled “6.26.1 (2020-05-18)”Bug Fixes
Section titled “Bug Fixes”- typescript: claims/scopes as Set in rejected/prompted functions (#719) (950c21d)
- typescript: undefined return for DefaultPolicy.get and Checks.get (b61e9d8)
6.26.0 (2020-05-12)
Section titled “6.26.0 (2020-05-12)”Bug Fixes
Section titled “Bug Fixes”- A192CBC-HS384 and A256CBC-HS512 direct encryption key derivation (ead23a7)
Features
Section titled “Features”- helper to define PKCE use requirement (0c2e208)
6.25.0 (2020-05-05)
Section titled “6.25.0 (2020-05-05)”Bug Fixes
Section titled “Bug Fixes”Features
Section titled “Features”- update DPoP implementation to ietf draft 01 (330d13c)
BREAKING CHANGES
Section titled “BREAKING CHANGES”- DPoP implementation updated to draft-ietf-oauth-dpop-01
Note: Updates to draft specification versions are released as MINOR
library versions, if you utilize these specification implementations
consider using the tilde ~ operator in your package.json since
breaking changes may be introduced as part of these version updates.
Alternatively, acknowledge the version and
be notified of breaking changes as part of your CI.
6.24.0 (2020-04-27)
Section titled “6.24.0 (2020-04-27)”Bug Fixes
Section titled “Bug Fixes”- typescript: added types of prompt.checks in interaction policy (3b97bde)
Features
Section titled “Features”- typescript: export the DefaultPolicy interface (b36190b), closes #707
- add server-wide policy configuration on accepting tokens in query (90b400a)
- introspection response allowedPolicy helper function added (e59cc66), closes #642
- update features.jwtIntrospection to draft 09 (219e8c3)
6.23.5 (2020-04-09)
Section titled “6.23.5 (2020-04-09)”Bug Fixes
Section titled “Bug Fixes”6.23.4 (2020-04-03)
Section titled “6.23.4 (2020-04-03)”Bug Fixes
Section titled “Bug Fixes”- typescript: added revokeByGrantId types to appropriate models (883b038)
6.23.3 (2020-03-22)
Section titled “6.23.3 (2020-03-22)”Bug Fixes
Section titled “Bug Fixes”- client jwks_uri are now fetched with a lock, cooldown improvements (b193010)