v2.17.0

Features

• support client use_mtls_endpoint_aliases metadata (60c9df4)

Documentation

• fix calculatePKCECodeChallenge description (ac014f2)

Refactor

• deprecate the useMtlsAlias symbol and options (d2b7cb0)
• use as Type for type assertions instead of (a0ccf56)

v2.16.0

Features

• add a hook for decrypting JWE assertions (62795a6)
• allow to modify issued JWT headers and payloads before signing (30931ba)

Documentation

• update docs on useMtlsAlias (006db55)

v2.15.0

Features

• support generic token endpoint grant requests (2f454b5)

v2.14.0

Features

• add non-repudiation signature validation methods (0916de2)

Documentation

• update JSDoc to use more link syntax (d78f090)
• update various comments and documentation (9c3f1ed)

v2.13.0

Features

• build: add jsr.io distribution (dc6157f)

v2.12.2

Refactor

• error msg when ID Token aud is an array and azp is missing (68e0338)
• remove redundant checks (763b3d0)

Documentation

• remove non-described parameter JSDoc tags (b1507b9)
• update README.md (9d1377b)

v2.12.1

Fixes

• use correct "htm" in DPoP Proof via protectedResourceRequest (3ce3be2), closes #132

v2.12.0

Features

• graduate jwksCache to stable API (0e0e1d2)

Documentation

• move clockSkew and clockTolerance docs to the symbol (3b5d2ea)
• update clockSkew and clockTolerance docs (c97313a)

v2.11.1

Fixes

• allow ID Token auth_time to be present even if client.require_auth_time is false (caa9ab3)

v2.11.0

Features

• add experimental support for edge compute runtimes JWKS caching (15b7aff)

Refactor

• update maxAge option type check error message (7fe3454)

Documentation

• clarify documentation is more an API Reference (c96c8e0)
• update example import (651e8ea)
• updates for readability and consistency (b1b8b7d)