Skip to content

CHANGELOG.md

Latest commit

 

History

History
66 lines (46 loc) · 3.14 KB

CHANGELOG.md

File metadata and controls

66 lines (46 loc) · 3.14 KB
Raw

Changelog

Unreleased

Now requires Elixir 1.15 / OTP 26.

Breaking changes

  • Assent.HTTPAdapter.Finch removed

Changes

  • :inets is now started automatically by Assent, and no longer required in :extra_applications
  • Assent.JWTAdapter.AssentJWT now supports EdDSA algorithms
  • Assent.JWTAdapter.AssentJWT now supports EC JWKs
  • Assent.Strategy.OIDC no longer rejects a :client_authentication_method missing from the provider's token_endpoint_auth_methods_supported
  • Assent.Strategy.OIDC accepts additional ID Token issuers via the :trusted_issuers config option
  • Assent.Strategy.Facebook now requests the user picture field

Bug fixes

  • Assent.Strategy.OAuth no longer lowercases the request path for signature base string, per RFC 5849 3.4.1.2
  • Assent.HTTPAdapter.Req now returns the response headers instead of the request headers

v0.3.1 (2025-06-20)

Bug fixes

  • Assent.JWTAdapter.AssentJWT fixed padding issue with ECDSA that caused invalid signatures

v0.3.0 (2025-01-06)

This release consists of breaking changes.

Userinfo is now cast to the correct type per https://openid.net/specs/openid-connect-core-1_0.html#rfc.section.5.1. When upgrading you must ensure that you do not depend on a specific type in the returned userinfo for any of the strategies listed below.

Breaking changes

  • Assent.Strategy.Auth0.authorize_url/2 no longer accepts :domain config, use :base_url instead
  • Assent.Strategy.Basecamp.callback/2 now encodes sub as a binary() instead of an integer()
  • Assent.Strategy.Github.callback/2 now encodes sub as a binary() instead of an integer()
  • Assent.Strategy.Google now encodes email_verified as a boolean() instead of a binary()
  • Assent.Strategy.Google now return hd instead of google_hd
  • Assent.Strategy.Strava.callback/2 now encodes sub as a binary() instead of an integer()
  • Assent.Strategy.Telegram.callback/2 now encodes sub as a binary() instead of an integer()
  • Assent.Strategy.Twitter.callback/2 now encodes sub as a binary() instead of an integer()
  • Assent.Strategy.VK.callback/2 now encodes sub as a binary() instead of an integer()
  • :site configuration option removed, use :base_url instead
  • Assent.Strategy.OAuth2.authorize_url/2 no longer allows :state in :authorization_params
  • Assent.Strategy.decode_response/2removed, use Assent.HTTPAdapter.decode_response/2 instead
  • Assent.Strategy.request/5 removed, use Assent.Strategy.http_request/5 instead
  • Assent.Strategy.prune/1 removed
  • Assent.MissingParamError no longer accepts :expected_key, use :key instead
  • Assent.HTTPAdapter.Mint removed
  • Assent.Config removed

Changes

  • Assent.Strategy.Auth0 now uses OIDC instead of OAuth 2.0 base strategy
  • Assent.Strategy.Gitlab now uses OIDC instead of OAuth 2.0 base strategy
  • Assent.Strategy.Google now uses OIDC instead of OAuth 2.0 base strategy
  • Assent.Strategy.normalize_userinfo/2 now casts the user claims per OpenID specification

v0.2

The CHANGELOG for v0.2 releases can be found in the v0.2 branch.