Changelog
v0.4.1 - 2025-01-21
- fix: handle errors returned via JARM
- chore: update
oidcc
to 3.2.6 - add support for Elixir 1.18
v0.4.0 - 2024-04-30
- feat!: add
introspection
opt for fetching Token Introspection - feat: support JWT Secured Authorization Response Mode for OAuth 2.0 (JARM)
- feat: default to
:random
backoff for issuers - fix: use
client_secret
when generating request URLs
BREAKING CHANGE: the API for UeberauthOidcc.Callback.handle_callback/2
has changed to make the 4th item in the tuple a map, rather than only
the userinfo claims.
BREAKING CHANGE: if you're using module
for testing, you'll need to implement
the TokenIntrospection
sub-module.
v0.3.3 - 2024-04-20
- fix(session): ensure that we clear the session cookie
v0.3.2 - 2024-03-06
This release includes some features/fixes backported from the 0.4.x-pre series.
- feat: store session data in a separate UeberauthOidcc cookie
- feat: include config
authorization_params_passthrough
to optionally copy incoming parameters - fix: support multiple issuers
- fix: limit
nonce
to 43 characters
v0.3.1 - 2023-12-10
- fix: refresh JWKs if needed (#5)
v0.3.0 - 2023-12-05
The big change in 0.3.0 is refactoring the implementation into various sub-modules. This allows them to serve as implementations for other Ueberauth strategies which use OIDC, by passing in different opts.
- feat: support overriding the token_endpoint
- doc: add the
uid_field
to the list of options - feat: add some additional error descriptions
- refactor!: pull implementation into UeberauthOidcc modules
BREAKING CHANGE: if you were using module
for testing, you'll need to
implement some additional sub-modules: ClientContext
, Authorization
, Token
and Userinfo
.
v0.2.0 - 2023-12-01
- fix!: switch runtime environment key to
providers
(BREAKING CHANGE) - fix: ensure
Ueberauth.Failure.Error
message is a binary - feat: (optional) verify returned scopes
- feat: verify PKCE, nonce, and redirect_uri
v0.1.0 - 2023-11-29
- fix: wrap raw_info in a struct to avoid logging the opts
- chore: update to Oidcc 3.1.0
- fix: fail if the ID token has an invalid nonce
- feat: support none alg for the ID token (if Userinfo is fetched)
- feat: support Elixir 1.14.4
v0.1.0-rc.0 - 2023-11-21
- Initial release