Releases: achedeuzot/ueberauth_auth0
Releases · achedeuzot/ueberauth_auth0
v2.1.0
v2.0.0
Changes
- [API] BREAKING CHANGE: changed error management on wrong OAuth code. Instead of raising a OAuth2.Error, the conn.assigns.ueberauth_failure is set with the following value:
%Ueberauth.Failure.Error{
message: "Invalid authorization code",
message_key: "invalid_grant"
}
- [deps] Bumped dependencies
v1.0.0
Enhancements
- [docs] Miscellaneous documentation improvements
- [CSRF] BREAKING CHANGE Updated
ueberauth
to 0.7.0 that includes CSRF protection by default – we encourage you to upgrade to benefit from this security fix. If you were using thestate
field, you'll need to pass the data in another way (e.g. cookies) - [deps] Bumped dependencies to latest versions