This new major version introduces more validation checks on ID tokens for OIDC conformance and as such could introduce a breaking change if you are already validating tokens that are not OIDC conformant.

In addition, methods that were marked as deprecated in v1.5.0 have now been removed. From here, always use the verify method to validate ID tokens.

Changed

Added build step into the versioning process (to be done before release) #93 (stevehobbsdev)
Updated dependencies #92 (stevehobbsdev)

Removed

Removed deprecated methods + tests #90 (stevehobbsdev)

Security

[SDK-974] Improved OIDC compliance #89 (stevehobbsdev)
Bump tough-cookie from 2.3.2 to 2.3.4 #88 (dependabot[bot])
Bump stringstream from 0.0.5 to 0.0.6 #87 (dependabot[bot])
Bump extend from 3.0.1 to 3.0.2 #86 (dependabot[bot])
Bump sshpk from 1.13.0 to 1.16.1 #85 (dependabot[bot])
Bump lodash.merge from 4.6.1 to 4.6.2 #84 (dependabot[bot])

1.5.1

Diff

stevehobbsdev

published 1.5.1 • 5 years ago

Changelog

Source

v1.5.1 (2019-12-06)

Full Changelog

Re-release to correct build directory error

1.5.0

Diff

stevehobbsdev

published 1.5.0 • 5 years ago

Changelog

Source

v1.5.0 (2019-12-05)

Full Changelog

Added

[SDK-1166] Replaced promise-polyfill with es6-promise, applied globally #78 (stevehobbsdev)

1.4.1

Diff

luisrudge

published 1.4.1 • 5 years ago

Changelog

Source

v1.4.1 (2019-07-09)

Full Changelog

Fixed

Use unfetch without requiring window at load time #42 (luisrudge)

1.4.0

Diff

luisrudge

published 1.4.0 • 5 years ago

Changelog

Source

v1.4.0 (2019-06-18)

Full Changelog

Fixed

Validate claims after verifying the signature of the token #39 (luisrudge)

1.3.1

Diff

luisrudge

published 1.3.1 • 5 years ago

1.3.0

Diff

luisrudge

published 1.3.0 • 5 years ago

Changelog

Source

v1.3.0 (2019-06-05)

Full Changelog

Changed

Increase leeway limit to 300s #31 (luisrudge)
Replace superagent with unfetch #27 (luisrudge)

1.2.0

Diff

luisrudge

published 1.2.0 • 7 years ago

Changelog

Source

v1.2.0 (2018-03-21)

Full Changelog

Added

Add option to set the endpoint to fetch the jwks.json file #19 (luisrudge)
Adding access_token validation method validateAccessToken #17 (luisrudge)

1.1.2

Diff

luisrudge

published 1.1.2 • 7 years ago

Changelog

Source

v1.1.2 (2018-03-01)

Full Changelog

Fixed

Fixing issue with IdTokenVerifier.getRsaVerifier #14 (dfung)
Use base64-js methods instead of browser globals atob and btoa #15 (maxbeatty)