Repository navigation
Releases: SecureAuthCorp/oauth2c
Releases · SecureAuthCorp/oauth2c
Release list
v1.21.1
v1.21.0
Changelog
- 176d67b AUT-13975: feat: support requested_token_type and pre-signed jwt-bearer assertions (#159)
- 7f8cb4d Add --resource flag for RFC 8707 Resource Indicators (#152)
- 5144c5e Bump golang.org/x/crypto from 0.50.0 to 0.52.0
- 6f1594e Merge pull request #153 from SecureAuthCorp/feature/DEVOPS-8397-pin-actions-sha
- ec74712 Merge pull request #154 from SecureAuthCorp/feature/DEVOPS-8593-dependabot-auto-approve
- df94daf Merge pull request #155 from SecureAuthCorp/dependabot/go_modules/golang.org/x/crypto-0.52.0
- f184e2b Merge pull request #156 from SecureAuthCorp/bugfix/DEVOPS-8593-inline-auto-approve
- 57fca73 Merge pull request #157 from SecureAuthCorp/bugfix/DEVOPS-8593-approve-without-required-checks
- c172049 chore(security): pin external GitHub Actions to commit SHAs
- 12d3d14 feat: add Dependabot auto-approve workflow
- 35cef1a fix: approve Dependabot PRs when no required checks are configured
- 745da01 fix: inline Dependabot auto-approve job (public repo cannot call private reusable workflow)
v1.20.0
Changelog
- b9af889 Added none to available response_types flag (#142)
- 1f95008 Bumps (#143)
- d7c5b7d Preserve unrecognized token response fields through marshal roundtrip (#150)
- 9db96f9 Print authorize url in the silent and no-browser mode (#147)
- d8a5b36 Update dependencies, Go toolchain, CI actions to latest (#151)
- c51bce1 Use crypto/rand instead of math/rand (#148)
v1.19.0
Changelog
- e77f02a Add --callback-addr flag to support running behind TLS-terminating proxies by decoupling the callback server bind address from the redirect URL and using certificate presence to determine protocol. (#141)
- 0f78913 Merge branch 'master' into feature/cc-rar
- d18aba7 Merge pull request #137 from SecureAuthCorp/feature/cc-rar
- 7085b95 pass rar if provided in client credentials flow
v1.18.0
Changelog
- 3741094 Add "no-origin" flag in order to work better with Entra desktop apps (#131)
- c8193fa Avoid "listen tcp: address localhost: missing port in address" (#126)
- 62672f1 Bump certs (#139)
- fe2f391 Bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 (#122)
- a3b1780 Bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 (#128)
- ceef823 Bump golang.org/x/net from 0.35.0 to 0.36.0 (#127)
- 1a78abe Bump golang.org/x/net from 0.36.0 to 0.38.0 (#129)
- f252efa Bumpo golang (#125)
- 06bbb81 Handle optional fields of the Device Authorization Response. (#133)
- ee4c004 Merge pull request #135 from sinaneski/fix/client-assertion-claims
- ee108c2 Update audience in client assertion claims
v1.17.2
v1.17.1
v1.17.0
Changelog
- c283174 Bump github.com/golang-jwt/jwt/v4 from 4.4.3 to 4.5.1
- 5768bf0 Merge pull request #115 from cloudentity/dependabot/go_modules/github.com/golang-jwt/jwt/v4-4.5.1
- 9a0b6fe Merge pull request #117 from cloudentity/feature/authentication-code
- 98e2f21 add authentication_code param for passwordless authentication
- 65acf39 remove url