5.0.0
This release contains several breaking changes.
Please carefully consult the documentation while updating.
- removed
bluebird
and promisify-any
- uses native Promises and
async/await
everywhere - drop support for Node 14 (EOL), setting Node 16 as
engine
in package.json
- this is a breaking change, because it removes callback support for
OAuthServer
and your model implementation. - fixed missing await in calling generateAuthorizationCode in AuthorizeHandler
- fix scope validation bug
- revoke code before validating redirect URI
- improved Bearer token validation
- validate scope as an array of strings (breaking change)
- model support for retrieving user based on client
- more tests added; test coverage improved