#927)

* feat: add boilerplate for oauth2 recipe

* feat: add a temporary solution to query hydra (until core impl) from recipe funcs

* fix: fix temp solution for hydra calls

* feat: Add a recipe function to create OAuth2Client (#859)

* feat: Add recipe functions to update/delete OAuth2Client (#863)

* feat: Add recipe functions to update/delete OAuth2Client

* fix: PR changes

* feat: Add recipe functions to get OAuth2Clients (#865)

* feat: Add recipe functions to update/delete OAuth2Client

* fix: PR changes

* feat: Add recipe functions to get OAuth2Clients

* fix: PR changes

---------

Co-authored-by: Mihaly Lengyel <mihaly@lengyel.tech>

* feat: add initial oauth2 client apis (#866)

* feat: add initial oauth2 client apis

* feat: Add an api to get login info

* fix: merge issues and FE path

* fix: WIP fix for CSRF and redirection issues

* fix: OAuth2 fixes and test-server updates (#871)

* feat: update oauth2 login info endpoint types to match our general patterns

* fix: make login flow work

* feat!: improve how we handle changing email addresses and users becoming unverified when account linking requires verification (#869)

* feat: update email and pw change logic and add more security checks

* feat: update error messages

* refactor: improve debug logs and clarify conditions

* chore: update changelog

* chore: empty line from changelog

* refactor: remove duplicated check and bypass mapping for already mapped errcodes

* chore: update changelog

* feat: call isEmailChangeAllowed in pwless updateUser (#875)

* feat: call isEmailChangeAllowed in pwless updateUser

* test: add updateUser to test-server

* chore: remove unnecessary item from changelog

* chore: extend changelog to mention exact function names

* test: add logging to default overrides in test-server (#876)

* fix: circular dependency

* fix: fix types in oauth2 index exposed functions

* feat: add token building callbacks

* test: move the session object and claims to the BE sdk server (#879)

* fixes issue of refresh not clearing tokens

* adding dev-v18.0.2 tag to this commit to ensure building

---------

Co-authored-by: Ankit Tiwari <ankucodes@gmail.com>
Co-authored-by: rishabhpoddar <rishabh.poddar@gmail.com>

* feat: Add OAuth2Client recipe (#877)

* feat: add initial oauth2 client apis

* feat: Add an api to get login info

* fix: merge issues and FE path

* fix: WIP fix for CSRF and redirection issues

* fix: OAuth2 fixes and test-server updates (#871)

* feat: update oauth2 login info endpoint types to match our general patterns

* fix: make login flow work

* fix: circular dependency

* feat: Add OAuth2Client recipe

* fix: PR changes

* fix: PR changes

* fix: PR changes

* fix: use correct userContext type

---------

Co-authored-by: Mihaly Lengyel <mihaly@lengyel.tech>

* fix: Remove internal redirects in the OAuth2 flow (#896)

* fix: Remove internal redirects in the OAuth2 flow

* fix: PR changes

* fix: Prefer exact api path match in the middleware (#892)

* feat: Add userInfoGET endpoint (#890)

* feat: add initial oauth2 client apis

* feat: Add an api to get login info

* fix: merge issues and FE path

* fix: WIP fix for CSRF and redirection issues

* fix: OAuth2 fixes and test-server updates (#871)

* feat: update oauth2 login info endpoint types to match our general patterns

* fix: make login flow work

* fix: circular dependency

* feat: Add OAuth2Client recipe

* fix: PR changes

* fix: PR changes

* fix: PR changes

* feat: Add userInfoGET endpoint

* fix: PR changes

* fix: PR changes

* fix: PR changes

---------

Co-authored-by: Mihaly Lengyel <mihaly@lengyel.tech>

* feat: add functions to validate oauth2 tokens

* feat: rename OAuth2 to OAuth2Provider

* feat: expose token validation functions

* test: update tests

* fix: add userinfo_endpoint properly

* feat: removed unnecessary props

* fix: add workaround to validate access/idtokens

* fix: OAuth2 fixes (#900)

* feat: review fixes

* feat: remove accessTokenStrategy

* test: update tests

* feat: OAuth2Client interface changes (#904)

* feat: Add token revocation endpoint (#902)

* feat: Add token revocation endpoint

* fix: PR changes

* fix: PR changes

* fix: PR changes

* fix: PR changes

* fix: PR changes

* fix: Add revocation_endpoint

* feat: Add token introspection endpoint (#906)

* feat: Add token revocation endpoint

* fix: PR changes

* fix: PR changes

* fix: PR changes

* fix: PR changes

* feat: Add token introspection endpoint

* fix: PR changes

* fix: Add revocation_endpoint

* fix: PR changes

* fix: merge issue

---------

Co-authored-by: Mihaly Lengyel <mihaly@lengyel.tech>

* fix: make clientSecret optional (#908)

* fix: revokeToken input check

* feat: add shouldTryLinkingWithSessionUser flag to auth apis and make overwriteSessionDuringSignInUp deafult to true (#909)

* feat: add shouldTryLinkingWithSessionUser flag

* feat: add tryLinkingWithSessionUser, forceFreshAuth and small test fixes

* fix: test server compatible with 1.17/2.0 (#897)

* fix: test server compatible with 1.17

* fix: pr comments

* fix: mfa claim

* fix: version and changelog

* fix: using version function for comparision

* fix: circle ci scripts

* fix: circle ci testing

* fix: circle ci testing

* fix: circle ci testing

* fix: test server

* fix: circle ci restore

* adding dev-v20.0.1 tag to this commit to ensure building

* fix: config (#905)

* adding dev-v20.0.1 tag to this commit to ensure building

* feat: prompt param fixing

* refactors an exception case

* feat: validate max_age

* fix: make shouldDoAutomaticAccountLinking properly get the primary user when linking to oldest user (#907)

* adding dev-v20.0.2 tag to this commit to ensure building

* feat: make shouldTryLinkingWithSessionUser optional in FDI3.1

* feat: fix tryLinkingImplementation and change degault for overwriteSessionDuringSignInUp

---------

Co-authored-by: Sattvik Chakravarthy <sattvik@supertokens.com>
Co-authored-by: Sattvik Chakravarthy <sattvik@gmail.com>
Co-authored-by: rishabhpoddar <rishabh.poddar@gmail.com>

* feat: add shouldTryRefresh plus self-review and test related fixes

* feat: Add APIs for rp-initiated logout (#911)

* feat: Add APIs for rp-initiated logout

* fix: PR changes

* fix: PR changes

* feat: integrate with OAuth2 core impl (#926)

* WIP

* WIP

* feat: clean up earlier debugging changes

* feat: expose new revoke functions + update tests

* feat: make the frontend redirection urls overrideable

* feat: update how oauth token payloads work

* fix: Add changes to support unknown type in formField values (#928)

* Add changes to support unknown type in formField values

* Update email/password invalid type error message to be same as go/python sdk

* Add tests for invalid email/password in signup API

* Add tests for invalid email/password in token reset and reset API

* Update some errors to indicate unreachable errors

* Run build to generate build files

* Add detail about breaking change regarding formField value type change to unknown

* feat: make loginGET return the redirection link as a JSON response instead

* ci: add option to run the CI scripts manually (#929)

* ci: experiment with manually runnable ci with pre-set branchnames

* ci: experiment with manually runnable ci with pre-set branchnames

* ci: experiment with manually runnable ci with pre-set branchnames

* ci: experiment with manually runnable ci with pre-set branchnames

* ci: experiment with manually runnable ci with pre-set branchnames

* ci: experiment with manually runnable ci with pre-set branchnames

* ci: experiment with manually runnable ci with pre-set branchnames

* ci: experiment with manually runnable ci with pre-set branchnames

* ci: experiment with manually runnable ci with pre-set branchnames

* ci: experiment with manually runnable ci with pre-set branchnames

* ci: experiment with manually runnable ci with pre-set branchnames

* ci: experiment with manually runnable ci with pre-set branchnames

* ci: experiment with manually runnable ci with pre-set branchnames

* ci: experiment with manually runnable ci with pre-set branchnames

* ci: experiment with manually runnable ci with pre-set branchnames

* ci: experiment with manually runnable ci with pre-set branchnames

* ci: experiment with manually runnable ci with pre-set branchnames

* fix: test fixing

* ci: experiment with manually runnable ci with pre-set branchnames

* test: make integration test server more stable

* ci: update ci runner script

* fix: adding hydra to circleci

* ci: add missing branch mapping

* fix: force script

* fix: update ci config

* fix: update ci config

* fix: update script

* fix: update script

* fix: update script

* fix: ory image

---------

Co-authored-by: Sattvik Chakravarthy <sattvik@gmail.com>

* feat: make the issuer overrideable + fix new status

* fix: fix handling of CLIENT_NOT_FOUND_ERROR

* feat: error consistency improvements

* feat: error consistency improvements

* refactor: some cleanup and error handling

* fix: set the jwks cacheMaxAge in MS

* test: add more debug options into ci

* feat: added more debug logging

* fix: fix the session loading logic in auth apis

* ci: improve forceRunCI mac compatibility

* ci: add missing env var to test script

* feat: detect email_change_not_allowed earlier to fix tests

* Revert "feat: detect email_change_not_allowed earlier to fix tests"

This reverts commit 47df0a2.

* feat: self-review fixes and general cleanup

* feat: add emails and phoneNumbers as arrays into the id token as well

* feat!: separating the OpenId recipe from the Session recipe

---------

Co-authored-by: Ankit Tiwari <ankucodes@gmail.com>
Co-authored-by: rishabhpoddar <rishabh.poddar@gmail.com>
Co-authored-by: Sattvik Chakravarthy <sattvik@supertokens.com>
Co-authored-by: Sattvik Chakravarthy <sattvik@gmail.com>
Co-authored-by: Deepjyoti <deepjyoti@supertokens.com>