v4.2.2

Bug Fixes

• push pkce <> response type resolution to the authenticate function (1970af4), closes #312

v4.2.1

Bug Fixes

• typescript: add state property to AuthorizationParameters (#305) (b9dfa60), closes #304

v4.2.0

Features

• add callback extras to strategy options (#295) (b77466d)

v4.1.1

Bug Fixes

• typescript: ts module interop issues with default export (6ca57d0), closes #291

v4.1.0

Features

• OAuth 2.0 DPoP in various relevant API interfaces (44a0de7)

v4.0.2

Bug Fixes

• updated request object mime-type as per draft-ietf-oauth-jwsreq-30 (d5cc619)

v4.0.1

Bug Fixes

• ensure minimal got version handles upcoming node version changes (fd737a3)

v4.0.0

⚠ BREAKING CHANGES

• the deprecated issuer.key() method was removed
• due to added ESM module support Node.js version with ESM implementation bugs are no longer supported, this only affects early v13.x versions. The resulting Node.js semver range is ^10.19.0 || >=12.0.0 < 13 || >=13.7.0 (also taking into account the got dependency update)
• upgraded got http request library dependency from v9.x to v11.x. If you override some of the http request options you will most certainly have to accomodate them.
• Signed Request Object "typ" changed from JWT to oauth.authz.req+jwt
• Encrypted Request Object "cty" changed from JWT to oauth.authz.req+jwt
• PKCE is now used by default in the passport strategy
• client.userinfo() verb parameter was renamed to method
• the deprecated client.resource() method was removed

Features

• added support for ESM (ECMAScript modules) (3ac37e8)
• passport strategy will now use PKCE by default where applicable (56f9fe7)

Bug Fixes

• request object type changed from 'JWT' to 'oauth.authz.req+jwt' (641a42f)

Refactor

• remove deprecated client.resource() (c0ec865)
• remove deprecated issuer.key() (5cd1ecf)
• rename client.userinfo() verb parameter to method (4cb21a4)
• upgrade got from v9.x to v11.x (c72b5e8)

v3.15.10

Bug Fixes

• typescript: add missing types (#284) (49e0ff0)

v3.15.9

Bug Fixes

• typescript: max_age in AuthorizationParameters is a number (5ce2a73), closes #279