Changelog (Page 5)

6.27.1 (2020-06-15)

Bug Fixes

correct jwtIntrospection draft ack version (#735) (62b97d4)
typescript: static IdToken.validate (#733) (a0d997e)

6.27.0 (2020-06-01)

Bug Fixes

allow any JSON numeric value for timestamp values for DPoP JWTs (0700fde)

Features

secp256k1 EC curve and ES256K JWS alg feature flag removed (f74f6bd)

BREAKING CHANGES

secp256k1 and ES256K have been registered in IANA a few days ago so the flag is not needed anymore.

Note: Updates to draft specification versions are released as MINOR library versions, if you utilize these specification implementations consider using the tilde ~ operator in your package.json since breaking changes may be introduced as part of these version updates. Alternatively, acknowledge the version and be notified of breaking changes as part of your CI.

6.26.1 (2020-05-18)

Bug Fixes

typescript: claims/scopes as Set in rejected/prompted functions (#719) (950c21d)
typescript: undefined return for DefaultPolicy.get and Checks.get (b61e9d8)

6.26.0 (2020-05-12)

Bug Fixes

A192CBC-HS384 and A256CBC-HS512 direct encryption key derivation (ead23a7)

Features

helper to define PKCE use requirement (0c2e208)

6.25.0 (2020-05-05)

Bug Fixes

typescript: fix metaFor “value” argument type (0b31b69), closes #711

Features

update DPoP implementation to ietf draft 01 (330d13c)

BREAKING CHANGES

DPoP implementation updated to draft-ietf-oauth-dpop-01

6.24.0 (2020-04-27)

Bug Fixes

typescript: added types of prompt.checks in interaction policy (3b97bde)

Features

typescript: export the DefaultPolicy interface (b36190b), closes #707
add server-wide policy configuration on accepting tokens in query (90b400a)
introspection response allowedPolicy helper function added (e59cc66), closes #642
update features.jwtIntrospection to draft 09 (219e8c3)

6.23.5 (2020-04-09)

Bug Fixes

revert “chore: update tree router” (13e4142), closes #696

6.23.4 (2020-04-03)

Bug Fixes

typescript: added revokeByGrantId types to appropriate models (883b038)

6.23.3 (2020-03-22)

Bug Fixes

client jwks_uri are now fetched with a lock, cooldown improvements (b193010)

6.23.2 (2020-03-16)

Bug Fixes

return iss to introspection responses (f1b6fb4), closes #676

6.23.1 (2020-03-04)

Bug Fixes

allow client registration update fields to be omitted by the client (9df9bd7), closes #664

6.23.0 (2020-03-03)

Bug Fixes

client credentials exchange checks the client’s scope whitelist (5e4defc)
stable features with ack now throw to indicate a possible breaking change (cf58d35)
typescript: adapter methods typings and interface name typo (e086fc6)

Features

features.mTLS (RFC 8705) is now a stable feature (cfeaca8)

6.22.1 (2020-02-28)

Bug Fixes

typescript: correct KoaContextWithOIDC definition, take 2 (84d32fc), closes #659

6.22.0 (2020-02-28)

Bug Fixes

typescript: correct KoaContextWithOIDC definition (655ea29), closes #659

Features

more ctx entities to accomodate #658 (51b128d)

6.21.1 (2020-02-27)

Bug Fixes

check that session account is a string (e1eb211), closes #650 #655

6.21.0 (2020-02-18)

Features

add support for RSA-OAEP-384 and RSA-OAEP-512 JWE algorithms (c669bd1)

6.20.3 (2020-02-14)

Bug Fixes

allow opt-in refresh_token grant without offline_access as in 5.x (b67a3a6), closes #647

6.20.2 (2020-02-11)

Bug Fixes

typescript: remove @types/node from runtime dependencies (55a5074), closes #646

6.20.1 (2020-02-04)

Bug Fixes

interaction.started listener second argument type fixed (2fe67a9), closes #643

6.20.0 (2020-01-31)

Features

allow koa context argument in idFactory and secretFactory (76aa942), closes #455

6.19.2 (2020-01-25)

Bug Fixes

set samesite compatibility cookie as transient when the session is (1257164), closes #636

6.19.1 (2020-01-25)

Bug Fixes

allow ECDH-ES with AES_CBC_HMAC_SHA2 key sizes larger than 256 bits (a65e9c4)

6.19.0 (2020-01-23)

Features

allow overloading prototype for comparing client secrets (eec36eb), closes #631

6.18.2 (2020-01-16)

Bug Fixes

number of default should-change notices using a wrong property (8e51724)
principal-change triggered logout fixes (fa860cf), closes #628 #600

6.18.1 (2020-01-07)

Bug Fixes

fix client secret based algorithm keys for clients with jwks (75d82a0)

6.18.0 (2019-12-31)

Features

update PAR implementation to an ietf WG draft version (d3a772b)

6.17.7 (2019-12-28)

Bug Fixes

typescript: rotateRefreshToken boolean, ES256K, async customizers (22ab1e3)

6.17.6 (2019-12-17)

Bug Fixes

skip JWT validating iat is in the past when exp is present (a7dd855)

6.17.5 (2019-12-16)

Bug Fixes

properly handle routes ending with a trailing slash (again) (d8a3a67)

6.17.4 (2019-12-13)

Bug Fixes

properly handle routes ending with a trailing slash (c4b06de)

← Newer entries | Older entries →