v3.5.1

Documentation

• correct note about bodyUsed in ResponseBodyError and WWWAuthenticateChallengeError (adaa6fe)
• fix url to IANA OAuth Protected Resource Metadata registry (d7baf99)
• fix WWWAuthenticateChallengeParameters.algs description to be space-delimited (adae79f)
• remove newline from www-authenticate http example (9234699)
• update Protected Resource Metadata spec links to RFC 9728 (1836968)

Refactor

• expose more internal helpers for openid-client to use (dc00001)

v3.5.0

Features

• support for RFC-to-be 9728 - OAuth 2.0 Protected Resource Metadata (eef0d7d)

Documentation

• add descriptions to dynamicClientRegistrationRequest params (1244b00)
• add mentions of the respective process* method for Response-resolving methods (545f9ea)
• add Protected Resource Metadata related AS Metadata and WWWAuthenticate params (1644494)
• fixup DPoP references, add WWW-Authenticate parameter descriptions (fedb5cd)

Refactor

• DRY Response JSON parsing (8a3e554)

v3.4.1

Documentation

• hardcode spec revision links (e.g. final or errata) (b6911c4)

Fixes

• properly handle a number of edge-cases in www-authenticate header parsing (c380dd2)

v3.4.0

Features

• add support for Dynamic Client Registration (461c101)

Refactor

• remove private API from exported types (847046b)

Fixes

• handle max_age=0 in issueRequestObject() (b802645)

v3.3.2

Documentation

• consistent DPoP Proof capitalization (7eff4c5)
• drop cdnjs and denoland/x links in README (63acb25)

Refactor

• allow externally formed DPoP headers (5b5064d)
• remove an always false switch case (4096393)

v3.3.1

Documentation

• add note about minimal Node.js version to README.md (1d4e703)
• bump typedoc (589409a)

Refactor

• reusable error handling routines (1d1e23b)
• types: update overload signature of b64u (bd28fcb)

v3.3.0

Features

• add a helper to DPoPHandle to calculate dpop_jkt (2b8d9e7)

Documentation

• update CIBA group tags (318edce)
• update getValidatedIdTokenClaims description (15836c5)
• update getValidatedIdTokenClaims description (9e13fb6)
• update getValidatedIdTokenClaims group tags (ea30884)
• update JWT Introspection Response references to RFC 9701 (1cf0cca)

v3.2.0

Features

• add Client-Initiated Backchannel Authentication (3af0ec3)

Documentation

• update deviceCodeGrantRequest (f947b47)

v3.1.5

Refactor

• assert success content-type only if JSON parsing fails (1fe8f48)

v3.1.4

Refactor

• types: move customFetch options into its own interface (21c7d0a)