openid-client - npm Package Compare versions

Comparing version 4.4.2 to 4.5.0

CHANGELOG.md

@@ -5,2 +5,9 @@ # Changelog
 
+## [4.5.0](https://github.com/panva/node-openid-client/compare/v4.4.2...v4.5.0) (2021-03-10)
+
+
+### Features
+
+* include `nbf` in FAPIClient Request Objects ([0be56ba](https://github.com/panva/node-openid-client/commit/0be56ba5622e0062495965f55285438542da614e))
+
 ## [4.4.2](https://github.com/panva/node-openid-client/compare/v4.4.1...v4.4.2) (2021-03-07)
@@ -7,0 +14,0 @@

lib/client.js

@@ -1490,2 +1490,4 @@ /* eslint-disable max-classes-per-file */
 
+    const fapi = this.constructor.name === 'FAPIClient';
+    const unix = now();
     const header = { alg: signingAlgorithm, typ: 'oauth-authz-req+jwt' };
@@ -1497,4 +1499,5 @@ const payload = JSON.stringify(defaults({}, requestObject, {
       jti: random(),
-      iat: now(),
-      exp: now() + 300,
+      iat: unix,
+      exp: unix + 300,
+      ...(fapi ? { nbf: unix } : undefined),
     }));
@@ -1501,0 +1504,0 @@

package.json

 {
   "name": "openid-client",
-  "version": "4.4.2",
+  "version": "4.5.0",
   "description": "OpenID Connect Relying Party (RP, Client) implementation for Node.js runtime, supports passportjs",
@@ -5,0 +5,0 @@ "keywords": [

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

175750

increased by0.22%

Lines of code

3388

increased by0.09%

No dependency changes