v7.1.0

Added

• Add support for aud claim in client_credentials grants (by kadams54)

Changed

• Update dependencies

v7.0.0

Changed

• Breaking: No longer support Node.js 16

v6.0.1

Security

• Update dependencies to fix:
  • CVE-2022-25883
  • CVE-2023-26115
  • CVE-2023-43646

v6.0.0

Changed

• Breaking: No longer support Node.js 14
• Fix authorize endpoint compliance (remove scope requirement, make state optional) (by jirutka)
• Add support for Node.js 20
• Update dependencies

v5.0.2

Security

• Update dependencies to fix:
  • CVE-2022-46175
  • CVE-2022-24999
  • CVE-2022-25901

v5.0.1

Security

• Update dependencies to fix:
  • CVE-2022-36083

v5.0.0

Changed

• Breaking: No longer support Node.js 12
• Add support for Node.js 18

v4.3.2

Changed

• Update dependencies

v4.3.1

Security

• Update dependencies to fix:
  • CVE-2021-44906

v4.3.0

Added

• Support the token introspection endpoint (by cfman)