angular-oauth2-oidc - npm Package Versions

12.0.0 (2021-07-16)

Bug Fixes

• #728 (51e438a), closes /github.com/manfredsteyer/angular-oauth2-oidc/issues/728#issuecomment-808969225
• clear location.hash only if it is present (c2b2753), closes #970
• correctly handle ? and & in location replacements (70fd826)
• Disable nonce validation for id token for e2e tests (f5bd96c)
• fix scope/state removal for implicit flow with hash (9e257d0)
• in code flow pass options to error handler (c9a2c55), closes #972
• jwks: update jsrsasign dependency to 10.2.0 (a05bd8a), closes #1061
• multiplying calls to token endpoint in code flow (59f65d2)
• Refresh tokens with a plus sign get corrupted before sending to token endpoint (2204c5a)
• revoketokenandlogout: 'customParameters' should accept boolean (9761bad)
• While Using POPUP mode, we click on login button multiple time it opens multiple popup instead of focusing already opened (bbff95b)

Features

• introduce DateTimeProvider (0c0a4a7)
• logout: postLogoutRedirectUri should not default to redirectUri (ff7d1d9)
• support JWT response on userinfo endpoint (da16494)
• Custom grant type added (https://github.com/manfredsteyer/angular-oauth2-oidc/pull/919)
• Listen for storage to receive auth hash from popup (https://github.com/manfredsteyer/angular-oauth2-oidc/pull/935)
• Add event for unchanged session (https://github.com/manfredsteyer/angular-oauth2-oidc/pull/936)
• Add loginHint to codeFlow (https://github.com/manfredsteyer/angular-oauth2-oidc/pull/938)
• Add a windowRef option to initLoginFlowInPopup to prevent the window from beeing blocked by popup blockers (https://github.com/manfredsteyer/angular-oauth2-oidc/pull/965)
• Use configured revocationEndpoint by default (https://github.com/manfredsteyer/angular-oauth2-oidc/pull/1020)

10.0.0 (2020-06-30)

• chore: increase version in package.json (84d95a7)
• chore: make version 9.2 ready (415e053)
• chore(deps): bump jsrsasign from 8.0.12 to 8.0.19 (4def1c1)
• chore(deps): bump websocket-extensions from 0.1.3 to 0.1.4 (cae715e)
• chore(release): 9.2.1 (7a15194)
• chore(release): 9.2.2 (40f5ae5)
• chore(release): 9.3.0 (f42f943)
• refactor: inline js-sha256 (ca435c0)
• refactor: remove dep on contributer-table (b486546)
• refactor: use esm for sha-256 (92ee76d)
• feat(oauth-service): pass custom url params to logOut (4607d55)
• feat(oauth-service): revokeTokenAndLogout with cust params (026dcb3)
• 'disableAtHashCheck' by default if responseType is 'id_token' (169d749)
• #825: (38c7c3f), closes #825
• #825: (fb3afe4), closes #825
• Fix issue with ambient type in constructor when running Universal with Ivy (9e95c73)
• Fix typo in code-flow.md (1816e7b)
• Replaced document by this.document #773 (678ff95), closes #773
• response_types including 'code' gets a code_challenge (58a8132)
• Update code-flow.md (5c5288c)
• docs(readme): use our own idsvr (65c2b95)
• fix: loadDiscoveryDocumentAndLogin should pass state into initLoginFlow (132c624)
• fix(lib): copying LICENSE file to output build (e89aa6d)

9.2.2 (2020-05-09)

9.2.1 (2020-04-23)

9.2.0 (2020-03-28)

Features

• revoketokenandlogout: explicit way to revoke an access token according to RFC 7009 (c799ead)

• token-revocation: also revoke refresh_token (429ed2c)

Bug Fixes

• sample: make sense of the guard (1cae011)

9.1.0 (2020-03-23)

Features

• automatic silent refresh: stopAutomaticRefresh stops all timers. (8ab853b)
• code-flow: allow using silent refresh by setting useSilentRefresh to true (93902a5)
• sample: Also use new Identity Server 4 for implicit flow demo to prevent issues with same site cookies (58c6354)
• session checks: Session checks work now for code flow too. Please see docs for details. (4bf8901)

Bug Fixes

• code flow: Fixed code flow for IE 11 (0f03d39)
• sample: use hash-based routing (3f44eca)
• session state: save session_state also when using code flow (8fa99ff)
• state: passing an url with a querystring as the state, e. g. url?x=1 (71b705c)
• #687 (e2599e0)
• missing HttpModule dependency (7eac8ae)
• run tokensetup outside ngzone (07bb62d)
• typo (3d331f2)

Pull Requests

• Update sample app and silent-refresh.html script #755, linjie997
• Add optional state parameter for logout, pmccloghrylaing
• fix customHashFragment usage in tryLoginCodeFlow, roblabat
• replace document with injectionToken #741, d-moos
• Support predefined custom parameters extraction from the TokenResponse, vdveer
• Fixed not working silent refresh when using 'code' #735, ErazerBrecht

Thanks

Big Thanks to all contributers: Brecht Carlier, Daniel Moos, Jie Lin, Manfred Steyer, Phil McCloghry-Laing, robin labat, vdveer

Also, big thanks to jeroenheijmans for doing an awesome job with moderating and analyzing the issues!