Authservice 1.0.3 adds support for PKCE in the Authorization Code Grant Flow. Thanks @gdasson for your contribution! More details about PKCE can be found here:
https://oauth.net/2/pkce/
https://blog.postman.com/what-is-pkce/
It also comes with a change to not allow Client IDs to have the : character, as it breaks client authentication when calling the token endpoint. This is now properly validated and the configuration is rejected.
Detailed Changelog
- Validate that clientId does not contain ':' by @nacx in #266
- chore: use a better maintained and more flexible license checker tool by @nacx in #267
- Add support for PKCE by @gdasson in #265
New Contributors
Full Changelog: v1.0.2...v1.0.3
Contributors
nacx and gdasson