Version 1.11.1

• 2017-07-14 DIFF
• relaxed #callbackParams to allow IncomingMessage lookalikes
• update internal dependencies

Version 1.11.0

Version 1.10.0

• 2017-05-04 DIFF
• added pure OAuth 2.0 stripped down callback function #oauthCallback
• added an extra option for #userinfo requests to have extra params in either query or body

Version 1.9.0

• 2017-04-30 DIFF
• added introspection/revocation specific client and issuer properties. To remain backwards compatible they default to their token endpoint counterparts
  • issuer.revocation_endpoint_auth_methods_supported
  • issuer.introspection_endpoint_auth_methods_supported
  • issuer.revocation_endpoint_auth_signing_alg_values_supported
  • issuer.introspection_endpoint_auth_signing_alg_values_supported
  • client.revocation_endpoint_auth_method
  • client.introspection_endpoint_auth_method
  • client.revocation_endpoint_auth_signing_alg
  • client.introspection_endpoint_auth_signing_alg

Version 1.8.2

• 2017-04-29 DIFF
• bumped node-jose dependency to avoid github tar.gz dependencies
• adjusted token_endpoint_auth_method=none to how it should be

Version 1.8.0

Version 1.7.2

• 2017-03-28 DIFF
• added missing check for webfinger issuer location protocol

Version 1.7.1

• 2017-03-28 DIFF
• added authorizationCallback support for submitting code_verifier
• example now includes session management OP and RP frames

1.7.0 failed to publish properly, use 1.7.1 instead

Version 1.6.4

• 2017-03-14 DIFF
• fixed receiving (correct) empty responses from revocation endpoints (#21)