Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

1.2.2 (2022-10-20)

Refactor

• add a type check on AbortSignal (b013fef)
• align argument and function names in assert functions (8ea65f6)
• update "as" error messages (3e894f5)

1.2.1 (2022-10-10)

1.2.0 (2022-09-14)

Features

• add experimental EdDSA (Ed25519) JWS algorithm support (f70d4d5)

1.1.4 (2022-08-26)

Fixes

• typescript: resolve ts4.8 issue (572c6de)

1.1.3 (2022-07-20)

1.1.2 (2022-07-12)

1.1.1 (2022-07-04)

Fixes

• processing pure oauth2 code response ignores invalid ID tokens (282705a)

1.1.0 (2022-06-28)

Features

• allow AbortSignal-returning function as well as an instance (90d21b8)

1.0.5 (2022-06-17)

Fixes

• allow zero-length scope in token endpoint responses (#15) (d54c821)

1.0.4 (2022-06-09)

Fixes

• do not set a user-agent in CORS-enabled runtimes (8899a6b), closes #13

1.0.3 (2022-05-23)

Fixes

• skip recalculating dpop_jkt in PAR if already set (9499ccd)

1.0.2 (2022-05-19)

1.0.1 (2022-05-18)

Fixes

• reject unsupported token_type values (3d2cc0c)

1.0.0 (2022-05-13)

0.9.0 (2022-05-13)

⚠ BREAKING CHANGES

• types: rename TokenEndpointAuthMethod type to ClientAuthenticationMethod

Refactor

• types: rename TokenEndpointAuthMethod type to ClientAuthenticationMethod (6028fd8)

0.8.0 (2022-05-06)

⚠ BREAKING CHANGES

• getValidatedIdTokenClaims throws if ref isnt weak referenced
• remove client_secret_jwt

Refactor

• getValidatedIdTokenClaims throws if ref isnt weak referenced (1ee5485)
• remove client_secret_jwt (7611169)

0.7.0 (2022-05-05)

⚠ BREAKING CHANGES

• ensure supported key in calculateJwkThumbprint
• clientCredentialsGrantRequest now requires parameters

Features

• explicitly add dpop_jkt to par request when using dpop (e6acd99)

Refactor

• clientCredentialsGrantRequest now requires parameters (76e4fea)
• ensure supported key in calculateJwkThumbprint (540f6cf)

0.6.4 (2022-05-04)

Features

• add utility for calculating dpop_jkt from a crypto key (045dd10)

0.6.3 (2022-05-04)

0.6.2 (2022-05-03)

Features

• add utility for generating crypto key pairs (d8f3e90)

0.6.1 (2022-05-02)

Fixes

• types: validateJwtAuthResponse expectedState is optional (e618089)

0.6.0 (2022-04-28)

⚠ BREAKING CHANGES

• remove encrypted JAR support

Refactor

• remove encrypted JAR support (4352049)

Fixes

• remove sub from request object (41d49fa)
• signed userinfo aud and iss expected values (38edd37)

0.5.2 (2022-04-27)

Features

• force jwks refetch every 10 minutes (ae35bae)

Fixes

• correct jwks refetch minimal interval (8af6f85)

0.5.1 (2022-04-27)

Fixes

• assert no client private key is provided unless needed (ac6be64)
• assert no client secret is provided unless needed (604d8f3)
• ensure issueRequestObject does not mutate input parameters (7b62b82)

0.5.0 (2022-04-27)

⚠ BREAKING CHANGES

• deno: support deno ^1.21.0 (removed 1.20.x from CI)
• types: rename SignalledRequestOptions interface to HttpRequestOptions

Features

• option to add headers to http requests (94a2ecb)

Refactor

• deno: support deno ^1.21.0 (removed 1.20.x from CI) (764db58)
• types: rename SignalledRequestOptions interface to HttpRequestOptions (e4058d8)

0.4.0 (2022-04-25)

⚠ BREAKING CHANGES

• trim down the supported JOSE algorithms

Refactor

• trim down the supported JOSE algorithms (3a9e9a5)

0.3.3 (2022-04-14)

0.3.2 (2022-04-11)

Features

• allow all key inputs to be CryptoKey instances (f405719)

0.3.1 (2022-04-10)

0.3.0 (2022-04-10)

⚠ BREAKING CHANGES

• types: force types without string defaults

Refactor

• types: force types without string defaults (188b252)

0.2.2 (2022-04-07)

Features

• add generateRandomNonce (ad60b2c)
• add generateRandomState (a39cc6b)

0.2.1 (2022-04-05)

0.2.0 (2022-04-01)

⚠ BREAKING CHANGES

• ensure 2048 RSA keys are used for RSA-OAEP too

Fixes

• ensure 2048 RSA keys are used for RSA-OAEP too (f4eda79)

0.1.0 (2022-04-01)

⚠ BREAKING CHANGES

• ensure 2048 RSA keys are used

Fixes

• ensure 2048 RSA keys are used (ad707c0)

0.0.11 (2022-04-01)

0.0.10 (2022-03-29)

Fixes

• remove off-spec "default optional JWT typ" checks (34e524a)

0.0.9 (2022-03-28)

Fixes

• normalize jwt typ when one is expected (e161ee3)

0.0.8 (2022-03-28)

0.0.7 (2022-03-23)

0.0.6 (2022-03-18)

0.0.5 (2022-03-17)

Fixes

• jarm: correct message when jarm response is passed to validateAuthResponse (9ef7ce8)

0.0.4 (2022-03-17)

0.0.3 (2022-03-16)

Features

• client_secret_jwt authentication method (93fc723)

Fixes

• typescript: allow any string into "alg" and "enc" client fields (e6a8649)

0.0.2 (2022-03-16)

Fixes

• set a proper user-agent string (1fbb173)

0.0.1 (2022-03-16)