2017-05-09 18:54:47 +00:00
|
|
|
Unreleased:
|
2018-02-07 14:09:07 +00:00
|
|
|
|
|
|
|
*1.3.2:
|
2018-02-07 14:03:09 +00:00
|
|
|
- Added changelog
|
|
|
|
- Set default redirect URI resolver strict matching to true
|
|
|
|
- Fixed XSS vulnerability on redirect URI display on approval page
|
|
|
|
- Removed MITRE from copyright
|
|
|
|
- Disallow unsigned JWTs on client authentication
|
|
|
|
- Upgraded Nimbus revision
|
|
|
|
- Added French translation
|
|
|
|
- Added hooks for custom JWT claims
|
2018-02-07 14:05:43 +00:00
|
|
|
- Removed "Not Yet Implemented" tag from post-logout redirect URI
|
2017-05-09 18:54:47 +00:00
|
|
|
|
|
|
|
*1.3.1*:
|
2018-02-07 14:03:09 +00:00
|
|
|
- Added End Session endpoint
|
|
|
|
- Fixed discovery endpoint
|
|
|
|
- Downgrade MySQL connector dependency version from developer preview to GA release
|
2017-05-09 18:54:47 +00:00
|
|
|
|
|
|
|
*1.3.0*:
|
2018-02-07 14:03:09 +00:00
|
|
|
- Added device flow support
|
|
|
|
- Added PKCE support
|
|
|
|
- Modularized UI to allow better overlay and extensions
|
|
|
|
- Modularized data import/export API
|
|
|
|
- Added software statements to dynamic client registration
|
|
|
|
- Added assertion processing framework
|
|
|
|
- Removed ID tokens from storage
|
|
|
|
- Removed structured scopes
|
2017-05-09 18:54:47 +00:00
|
|
|
|
|
|
|
*1.2.6*:
|
2018-02-07 14:03:09 +00:00
|
|
|
- Added strict HEART compliance mode
|