v0.1.13

Changes

• Assent.Strategy.DigitalOcean added #49

v0.1.12

Changes

• Assent.Strategy.OAuth2.authorization_headers/2 now capitalizes the token type in the authorization header #47
• Assent.Strategy.OIDC.callback/2 now calls the strategy get_user/2 method before any ID token validation #48
• Assent.Strategy.OIDC.validate_id_token/2 added #48
• Assent.Strategy.OIDC.fetch_userinfo/2 added #48
• Assent.Strategy.OIDC no longer fetches the userinfo by default instead using the claims in the ID Token #48

v0.1.11

Changes

• Assent.Strategy.OAuth2.callback/2 now requires :session_params to be set in the config #43
• Assent.Strategy.OIDC.callback/2 now requires :session_params to be set in the config #43
• Assent.Strategy.OAuth2 now uses constant time comparison for state #43
• Assent.Strategy.OIDC now uses constant time comparison for nonce #43
• Assent.Strategy.Httpc.request/5 bug fixed for certificates that has wildcard domain with SAN extension #45
• Assent.Strategy.Mint.request/5 bug fixed for certificates that has wildcard domain with SAN extension #45

v0.1.10

Changes

Now requires Mint 1.0.0 or higher. #41

• Assent.Strategy.Instagram now accepts :user_url_request_fields config option and passes fields params to the /me point #42

v0.1.9

Changes

• Assent.Strategy.Instagram now uses the Instagram Graph API #38
• Assent.Strategy.OIDC bug fixed when no :session_params set in config #39

v0.1.8

Changes

• Assent.Strategy.Github now provides email_verified value #33
• Assent.Strategy.Gitlab now provides email_verified value #33
• Assent.Strategy.Google fixed to provide correct email_verified value #33
• Assent.Strategy.Twitter now provides email_verified value #33

v0.1.7

Changes

• Fix Assent.HTTPAdapter.Mint where :unknown responses where not handled correctly #31

v0.1.6

Changes

• Assent.Strategy.AzureAD now uses auth code flow instead of hybrid flow #30

v0.1.5

Changes

• Removed unused :resource param in Assent.Strategy.AzureAD #22
• Added "email profile" to scope in Assent.Strategy.AzureAD #22
• Use response_mode=form_post for Assent.Strategy.AzureAD #22
• Updated Assent.Strategy.OAuth2 to handle access token request correctly when :auth_method is nil per RFC specs #24
• Changed Assent.Strategy.Apple to use OIDC strategy and verify the JWT #25
• Changed Assent.Strategy.OIDC to update token with the expanded JWT as the id_token #27
• Fixed bug in Assent.HTTPAdapter.Mint with query params not being included in request #26

v0.1.4

Changes

• Support mint up to v1.0.x #16
• Fixed bug in Assent.JWTAdapter.JOSE where nil secret value raised an exception #19
• Fixed bug in Assent.JWTAdapter.AssentJWT where ECDSA algorithms didn't generate or verify valid signatures #20