openid-client - npm Package Compare versions

Comparing version 3.9.0 to 3.9.1

CHANGELOG.md

@@ -5,2 +5,11 @@ # Change Log
 
+## [3.9.1](https://github.com/panva/node-openid-client/compare/v3.9.0...v3.9.1) (2019-12-15)
+
+
+### Bug Fixes
+
+* remove check for nonce presence in params ([cac46fb](https://github.com/panva/node-openid-client/commit/cac46fb1846c853f6c519beddd5ab5bdaf0770b1))
+
+
+
 # [3.9.0](https://github.com/panva/node-openid-client/compare/v3.8.4...v3.9.0) (2019-12-06)
@@ -7,0 +16,0 @@

lib/client.js

@@ -129,6 +129,2 @@ /* eslint-disable max-classes-per-file */
 
-  if (authParams.response_type && authParams.response_type.split(' ').includes('id_token') && !authParams.nonce) {
-    throw new TypeError('nonce MUST be provided for implicit and hybrid flows');
-  }
-
   return authParams;
@@ -135,0 +131,0 @@ }

package.json

 {
   "name": "openid-client",
-  "version": "3.9.0",
+  "version": "3.9.1",
   "description": "OpenID Connect Relying Party (RP, Client) implementation for Node.js runtime, supports passportjs",
@@ -5,0 +5,0 @@ "keywords": [

README.md

@@ -29,3 +29,3 @@ # openid-client
   - Discovery of OpenID Provider (Issuer) Metadata
-  - Discovery of OpenID Provider (Issuer) Metadata via user provided inputs (see [WebFinger](#webfinger-discovery))
+  - Discovery of OpenID Provider (Issuer) Metadata via user provided inputs (via [webfinger][documentation-webfinger])
 - [OpenID Connect Dynamic Client Registration 1.0][feature-registration]
@@ -48,7 +48,9 @@ - Dynamic Client Registration request
 [<img width="184" height="96" align="right" src="https://cdn.jsdelivr.net/gh/panva/node-openid-client@38cf016b0837e6d4116de3780b28d222d5780bc9/OpenID_Certified.png" alt="OpenID Certification">][openid-certified-link]  
-Filip Skokan has [certified][openid-certified-link] that [openid-client][npm-url]
-conforms to the RP Basic, RP Implicit, RP Hybrid, RP Config, RP Dynamic and RP Form Post profiles
-of the OpenID Connect™ protocol.
+Filip Skokan has [certified][openid-certified-link] that [oidc-provider][npm-url]
+conforms to the following profiles of the OpenID Connect™ protocol
 
+- RP [Basic](https://openid.net/wordpress-content/uploads/2019/05/FilipSkokan_openid-client_RP-Basic-11-May-2019.zip), [Implicit](https://openid.net/wordpress-content/uploads/2019/05/FilipSkokan_openid-client_RP-Implicit-11-May-2019.zip), [Hybrid](https://openid.net/wordpress-content/uploads/2019/05/FilipSkokan_openid-client_RP-Hybrid-11-May-2019.zip), [Config](https://openid.net/wordpress-content/uploads/2019/05/FilipSkokan_openid-client_RP-Config-11-May-2019.zip), [Dynamic](https://openid.net/wordpress-content/uploads/2019/05/FilipSkokan_openid-client_RP-Dynamic-11-May-2019.zip), and [Form Post](https://openid.net/wordpress-content/uploads/2019/05/FilipSkokan_openid-client_RP-FormPost-11-May-2019.zip)
+- RP FAPI R/W [MTLS](https://openid.net/wordpress-content/uploads/2019/12/FilipSkokan_openid-client-FAPI-RW-ID2-OAuth-MTLS-6-Dec-2019.zip) and [Private Key](https://openid.net/wordpress-content/uploads/2019/12/FilipSkokan_openid-client-FAPI-RW-ID2-OAuth-private_key_jwt-6-Dec-2019.zip)
 
+
 ## Sponsor
@@ -310,1 +312,2 @@
 [documentation-methods]: https://github.com/panva/node-openid-client/blob/master/docs/README.md#client-authentication-methods
+[documentation-webfinger]: https://github.com/panva/node-openid-client/blob/master/docs/README.md#issuerwebfingerinput

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

147753

increased by0.76%

Number of lines in readme file

311

increased by0.97%

Worsened metrics

Lines of code

2909

decreased by-0.1%

No dependency changes