v0.13.0

0.13.0 (2026-05-07)

Features

• oauth: add --no-resource-indicator for AS that reject RFC 8707 resource parameter (#65) (7a07deb)

v0.12.0

0.12.0 (2026-05-07)

Features

• oauth: select token_endpoint_auth_method from AS metadata (RFC 8414) (#62) (9e6feff)

Bug Fixes

• test: add missing path-aware PRM mock in TestDiscoverMetadataAuthMethods (df06108)

v0.11.0

0.11.0 (2026-05-07)

Features

• oauth: make proactive token refresh window configurable (--oauth-refresh-leeway) (#57) (10737ca)

v0.10.1

0.10.1 (2026-05-02)

Bug Fixes

• oauth: support path-scoped issuers in RFC 8414 discovery (Keycloak, Cognito) (#54) (1916ec0)

v0.10.0

0.10.0 (2026-05-02)

Features

• oauth: add Device Authorization Grant (RFC 8628) via --oauth-device (#51) (4df5021)

v0.9.0

0.9.0 (2026-05-01)

Features

• oauth: use WWW-Authenticate resource_metadata hint for PRM discovery (RFC 9728 §5.1) (#49) (05239be)

v0.8.0

0.8.0 (2026-04-20)

Features

• honour Retry-After on HTTP 429 (typescript-sdk#1892) (#45) (fb5ac14)

v0.7.0

0.7.0 (2026-04-20)

Features

• cancel-aware response filter (drops late responses for cancelled ids) (#40) (8d4d4aa)

v0.6.0

0.6.0 (2026-04-18)

Features

• sse: inject TCP keepalive socket options on httpx transport (#34) (463b037)

v0.5.2

0.5.2 (2026-04-18)

Bug Fixes

• sse: add --sse-read-timeout to surface half-open TCP as reconnect (#32) (0ff7bb8)