v7.11.2

Fixes

• updated signed to trusted in the Interaction model (#1192) (eb91aea)

v7.11.1

Fixes

• client schema invalidation code not set (edf22fb)

v7.11.0

Features

• allow native app callbacks in client post_logout_redirect_uris (3fca22b)
• bump backchannelLogout to draft-07 (95611d9)
• graduate issAuthResp feature as stable and enable by default (e774f60)

Fixes

• ensure jwt replay detection takes clockTolerance into account (f167233)

v7.10.6

This release fixes a regression introduced in v7.10.5 refactors.

Fixes

• substr > slice change in mountPath should have been substring (adc0d63)

v7.10.5

Fixes

• resourceIndicators: await the result of useGrantedResource (#1173) (64a8028)

v7.10.4

Fixes

• add iss to error responses when issAuthResp is enabled (05ac3a8)

v7.10.3

Fixes

• expose invalid_dpop_proof error code and set it to 401 on userinfo (2628d7e)

v7.10.2

Fixes

• use paseto configuration from getResourceServerInfo (#1150) (02c821d)

v7.10.1

Fixes

• clearly mark that multiple pop mechanisms are not allowed (49eed4c)

v7.10.0

Features

• duplicate iss and aud as JWE Header Parameters (b26ea44)