v2.0.0

Added

• Honor OpenID Connect nonce (#34 by @HASHIMOTO-Takafumi)

Removed

• No longer support Node 8

v1.5.1

Security

• Update npm dependencies to fix:
  • CVE-2020-7598

v1.5.0

Added

• Add HTTP request object to OAuth2Service's events
• Add beforeTokenSigning event to OAuth2Service

v1.4.0

Security

• Update npm dependencies to fix:
  • NPM Security Advisory 1164
  • NPM Security Advisory 1300
  • NPM Security Advisory 1316
  • NPM Security Advisory 1324
  • NPM Security Advisory 1325

Fixed

• Add missing aud claim under Authorization Code Flow

Added

• Add CORS support

v1.3.3

Security

• Update npm dependencies to fix:
  • CVE-2019-15657
  • CVE-2019-10746
  • CVE-2019-10747

Changed

• Update license's legal entity.

v1.3.2

Security

• Update npm dependencies to fix:
  • CVE-2019-10744

v.1.3.1

Security

• Update npm dependencies to fix:
  • WS-2019-0032
  • WS-2019-0063
  • WS-2019-0064

v1.3.0

Added

• Add revocation endpoint

v1.2.0

Added

• Add Authorization code grant
• Add Refresh token grant
• Add Userinfo endpoint

Security

• Update npm dependencies to fix CVE-2018-16469

v1.1.0

Added

• Add Resource Owner Password Credentials grant

Fixed

• Add missing cache control headers on /token responses