2.0.0
Release notes
- Ignore PKCE for client credentials grant @ctriant (#62)
- Introduce userinfo policy @ctriant (#51)
- Replace the name callable with function. @rohe (#61)
- Support code_challenge_methods_supported @ctriant (#55)
- Fix refresh grant on access token helper after fedservice @ctriant (#60)
- Fix scopes_handler after fedservice refactor @ctriant (#59)
- Fix registration after fedservice refactor @ctriant (#57)
- Enforce aud restrictions @ctriant (#52)
- Added support for the flows Resource Owner Password Credentials and Client Credentials @rohe (#58)
- Fedservice @rohe (#54)
- Fix SessionManager constructor call @ctriant (#42)
- Introduce various token exchange enhancements @ctriant (#48)
- Various client authentication related fixes @ctriant (#49)
- Make token.JWTToken use RFC9068 as model for payload. @rohe (#45)
- fix: default extended configuration, removed warning @peppelinux (#46)
- Properly handle expired tokens on introspection endpoint @ctriant (#47)
- Removed the parameter 'lev' in serialization/deserialization functions/methods @rohe (#50)
- Fix bug related to the control of claims in tokens @ctriant (#44)
Full Changelog: v1.4.0...v2.0.0