v5.5.0

Features

• DPoP: remove experimental warning, DPoP is now RFC9449 (133a022)

v5.4.3

Fixes

• handle empty client_secret with basic and post client auth (#610) (402c711), closes #609

v5.4.2

Fixes

• bump oidc-token-hash (20607e9)

v5.4.1

This release contains only code refactoring, dependency, or documentation updates. The release process now also uses provenance statements.

v5.4.0

Features

• allow third party initiated login requests to trigger strategy (568709a), closes #510 #564

v5.3.4

Refactor

• remove use of Node.js v8 builtin (f1881bc), closes #442 #475 #555

Fixes

• regression introduced in v5.3.3 (4f6e847)

v5.3.2

Fixes

• passport: ignore static state and nonce passed to Strategy() (#556) (43daff3)

v5.3.1

Fixes

• typescript: requestResource returns a Promise (#546) (8bc9519), closes #488

v5.3.0

Features

• JARM is now a stable feature (10e3a37)

v5.2.1

Fixes

• typescript: add client_id and logout_hint to EndSessionParameters (b7b5438)