v3.7.0

Bug Fixes

• assert client_secret is present when required, require client_id, etc (82855a5)

Features

• Add Typescript definitions (#184) (c37130b)
• allow clientAssertionPayload to overwrite default payload (28c8964)

v3.6.2

Bug Fixes

• device authorization request always pushes the client_id to body (6fbf125)

v3.6.1

Bug Fixes

• ignore runtime unsupported or malformed issuer jwks (f08b8be)

v3.6.0

Features

• add RFC8628 - OAuth 2.0 Device Authorization Grant (Device Flow) support (adb4b76)
• allow multiple resource parameters in authorization requests (dfdd8cb)

v3.5.0

Features

• added Node.js lts/dubnium support for runtime supported features (54788c2)

v3.4.0

Features

• electron v6.x runtime support (65ec619)

v3.3.0

Features

• option to change http options globally (a1e0a3f)

v3.2.3

Bug Fixes

• strategy: do not modify the params argument, clone it instead (4731d29), closes #177

v3.2.2

Bug Fixes

• give AAD v2 organizations and consumers same treatment as common (4891b5b), closes #175

v3.2.1

Bug Fixes

• plug reported lodash vulnerability (b690dac)