CHANGELOG.md

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog.

1.5.1 — 2020-04-06

Security

• Update npm dependencies to fix:
  • CVE-2020-7598

1.5.0 — 2020-01-23

Added

• Add HTTP request object to OAuth2Service's events
• Add beforeTokenSigning event to OAuth2Service

1.4.0 — 2020-01-15

Security

• Update npm dependencies to fix:
  • NPM Security Advisory 1164
  • NPM Security Advisory 1300
  • NPM Security Advisory 1316
  • NPM Security Advisory 1324
  • NPM Security Advisory 1325

Fixed

• Add missing aud claim under Authorization Code Flow

Added

• Add CORS support

1.3.3 — 2019-09-25

Security

• Update npm dependencies to fix:
  • CVE-2019-15657
  • CVE-2019-10746
  • CVE-2019-10747

Changed

• Update license's legal entity.

1.3.2 — 2019-08-09

Security

• Update npm dependencies to fix:
  • CVE-2019-10744

1.3.1 — 2019-06-07

Security

• Update npm dependencies to fix:
  • WS-2019-0032
  • WS-2019-0063
  • WS-2019-0064

1.3.0 — 2019-06-03

Added

• Add revocation endpoint

1.2.0 — 2019-03-19

Added

• Add Authorization code grant
• Add Refresh token grant
• Add Userinfo endpoint

Security

• Update npm dependencies to fix CVE-2018-16469

1.1.0 — 2018-08-02

Added

• Add Resource Owner Password Credentials grant

Fixed

• Add missing cache control headers on /token responses

1.0.0 — 2018-08-01

Initial release.