v4.3.2

Changed

• Update dependencies

v4.3.1

Security

• Update dependencies to fix:
  • CVE-2021-44906

v4.3.0

Added

• Support the token introspection endpoint (by cfman)

v4.2.0

Added

• Add support for custom endpoint pathnames (by roskh)
• Teach /token endpoint to support JSON content type (by roskh)

v4.1.1

Fixed

• Fix regression: Prevent unhandled rejected promises when incorrectly invoking the /token endpoint

v4.1.0

Added

• HTTPS support (by lbestftr)

v4.0.0

Added

• Add /endsession endpoint (thanks AndTem!)
• Support EdDSA algorithm

Removed

• Breaking: Drop support for Node.js 10
• No longer accepts PEM encoded keys
• No longer supports generating unsigned JWTs

Changed

• Breaking: Reworked exposed API. Please refer to the migration guide for more information.
• Add support for Node.js 16

v3.2.0

Added

• Add subject_types_supported OpenID Provider Metadata field (thanks jjbooth74!)

v3.1.0

Added

• Add authorize redirect event (thanks markwallsgrove!)

v3.0.3

Fixed

• Fix regression: When adding a key to the KeyStore, do not normalize key "use" value to "sig" when already defined