Changelog
v0.3.2 - 2024-03-06
This release includes some features/fixes backported from the 0.4.x series.
- feat: store session data in a separate UeberauthOidcc cookie
- feat: include config
authorization_params_passthrough
to optionally copy incoming parameters - fix: support multiple issuers
- fix: limit
nonce
to 43 characters
v0.3.1 - 2023-12-10
- fix: refresh JWKs if needed (#5)
v0.3.0 - 2023-12-05
The big change in 0.3.0 is refactoring the implementation into various sub-modules. This allows them to serve as implementations for other Ueberauth strategies which use OIDC, by passing in different opts.
- feat: support overriding the token_endpoint
- doc: add the
uid_field
to the list of options - feat: add some additional error descriptions
- refactor!: pull implementation into UeberauthOidcc modules
BREAKING CHANGE: if you were using module
for testing, you'll need to
implement some additional sub-modules: ClientContext
, Authorization
, Token
and Userinfo
.
v0.2.0 - 2023-12-01
- fix!: switch runtime environment key to
providers
(BREAKING CHANGE) - fix: ensure
Ueberauth.Failure.Error
message is a binary - feat: (optional) verify returned scopes
- feat: verify PKCE, nonce, and redirect_uri
v0.1.0 - 2023-11-29
- fix: wrap raw_info in a struct to avoid logging the opts
- chore: update to Oidcc 3.1.0
- fix: fail if the ID token has an invalid nonce
- feat: support none alg for the ID token (if Userinfo is fetched)
- feat: support Elixir 1.14.4
v0.1.0-rc.0 - 2023-11-21
- Initial release