0.1.0 (2026-08-28)
Features
- Initial supervised Mix library.
- Hex package metadata, Apache-2.0 licensing, and multi-version CI with strict Credo and Dialyzer checks.
- Git Flow release and hotfix promotion, Conventional Commit release preparation, protected tag verification, and a gated GitHub Actions workflow for publishing packages and documentation to Hex.
- Backend-neutral authorization-server and protected-resource architecture.
- Bounded authorization, token, revocation, introspection, and Dynamic Client Registration request values.
- PKCE
S256, exact resource and redirect handling, scope normalization, and package-owned OAuth errors. - Client ID Metadata Document validation and SSRF-resistant
Reqretrieval. - Public and
private_key_jwtclient authentication with assertion replay contracts. - Asymmetric JWT access-token signing and verification plus public-only JWKS publication, retrieval, validation, and key selection.
- Refresh-token rotation and credential-family replay decisions.
- Authorization-server and protected-resource metadata builders.
- Injectable clock, random source, client metadata fetcher, key provider, and replay-store behaviours.