v3.14.1

Bug Fixes

• assert refresh_token grant ID Token sub to equal previous (23f3f9f)

v3.14.0

Features

• support additional authorized parties (c9268ce), closes #231

v3.13.0

Features

• add support for RSA-OAEP-384 and RSA-OAEP-512 JWE algorithms (6c696e9)

v3.12.2

Bug Fixes

• ensure jose version that handles ECDH-ES for larger key sizes right (e91001a)

v3.12.1

Bug Fixes

• allow multiple keys to match when selecting encryption key for request object (fa3fa67)

v3.12.0

Bug Fixes

• allow omitting the *_enc attributes (default 'A128CBC-HS256') (6567c73)

Features

• new API for fetching arbitrary resources with the access token (c981ed6), closes #222

v3.11.0

Bug Fixes

• typescript: allow 'id_token token' as a response type (61c486c)

Features

• detect self-issued OP and validate ID Token accordingly (c5d3158), closes #220 #221

v3.10.1

Bug Fixes

• allow duplicate "kid" values in issuer's jwks_uri (sigh) (8840fb6)

v3.10.0

Bug Fixes

• enabled full JWT validation on distributed and aggregated claims (d95e31b)

Features

• allow consuming JARM responses (jwt response mode) (dd4aae9)

v3.9.2

Bug Fixes

• skip validating iat is in the past (0791001)