Socket
Socket
Sign inDemoInstall

openid-client

Package Overview
Dependencies
44
Maintainers
1
Versions
180
Alerts
File Explorer

Advanced tools

Install Socket

Detect and block malicious and high-risk dependencies

Install

Comparing version 1.11.0 to 1.11.1

6

CHANGELOG.md

@@ -26,2 +26,8 @@ # openid-client CHANGELOG

## Version 1.11.0
### Version 1.11.1
- [DIFF](https://github.com/panva/node-openid-client/compare/v1.11.0...v1.11.1)
- relaxed #callbackParams to allow IncomingMessage lookalikes
- update internal dependencies
### Version 1.11.0
- [DIFF](https://github.com/panva/node-openid-client/compare/v1.10.0...v1.11.0)

@@ -28,0 +34,0 @@ - fixed default application_type from `['web']` to `'web'`

15

lib/client.js

@@ -217,6 +217,8 @@ 'use strict';

callbackParams(input) { // eslint-disable-line
const isIncomingMessage = input instanceof stdhttp.IncomingMessage;
const isIncomingMessage = input instanceof stdhttp.IncomingMessage ||
(input && input.method && input.url);
const isString = typeof input === 'string';
assert(isString || isIncomingMessage, '#callbackParams only accepts string urls or http.IncomingMessage');
assert(isString || isIncomingMessage,
'#callbackParams only accepts string urls, http.IncomingMessage or a lookalike');

@@ -547,3 +549,3 @@ let uri;

assert.equal(verb, 'post', 'can only send body on POST');
httpOptions = { body: { access_token: token } };
httpOptions = { form: true, body: { access_token: token } };
break;

@@ -718,4 +720,7 @@ default:

return Promise.resolve(this.authFor(endpoint))
.then(auth => this.httpClient.post(this.issuer[`${endpoint}_endpoint`], this.issuer.httpOptions(_.merge(httpOptions, auth)))
.catch(errorHandler.bind(this)));
.then((auth) => {
const opts = this.issuer.httpOptions(_.merge(httpOptions, auth, { form: true }));
return this.httpClient.post(this.issuer[`${endpoint}_endpoint`], opts);
})
.catch(errorHandler.bind(this));
}

@@ -722,0 +727,0 @@

{
"name": "openid-client",
"version": "1.11.0",
"version": "1.11.1",
"description": "OpenID Connect Relying Party (RP, Client) implementation for Node.js servers, supports passportjs",

@@ -44,3 +44,3 @@ "main": "lib/index.js",

"devDependencies": {
"chai": "^3.5.0",
"chai": "^4.0.0",
"co-mocha": "^1.1.3",

@@ -57,3 +57,3 @@ "eslint": "^3.0.0",

"nock": "^9.0.0",
"nyc": "^10.3.2",
"nyc": "^11.0.1",
"readable-mock-req": "^0.2.2",

@@ -66,3 +66,3 @@ "sinon": "^2.1.0",

"create-error-class": "^3.0.2",
"got": "^6.3.0",
"got": "^7.0.0",
"lodash": "^4.13.1",

@@ -69,0 +69,0 @@ "lru-cache": "^4.0.1",

@@ -428,3 +428,3 @@ # openid-client

[travis-url]: https://travis-ci.org/panva/node-openid-client
[conformance-image]: https://img.shields.io/travis/panva/openid-client-conformance-tests/master.svg?style=flat-square&maxAge=7200&label=conformance%20build%20status
[conformance-image]: https://img.shields.io/travis/panva/openid-client-conformance-tests/master.svg?style=flat-square&maxAge=7200&label=daily%20conformance%20build
[conformance-url]: https://github.com/panva/openid-client-conformance-tests

@@ -431,0 +431,0 @@ [codecov-image]: https://img.shields.io/codecov/c/github/panva/node-openid-client/master.svg?style=flat-square&maxAge=7200

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc