All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
- Bug fixes:
- Fix else clause in TestAdapter.
- Enhancements:
- Add invalid and required access token cases to the TestAdapter.
- Enhancements:
- Add support for
allow_create
param in the authorization url.
- Add support for
- Enhancements:
- Remove unused alias warning in
IdpAdapter
.
- Remove unused alias warning in
- Deprecations:
- Remove
whitelisted_clients
support.
- Remove
- Enhancements:
- Add support for
username
claim.
- Add support for
-
Enhancements:
- Verify access token using introspect endpoint instead userinfo.
- Add
introspect_cache_expires_in
config to avoid hitting the IDP every request. Default value is:timer.seconds(0)
. - New default value for
userinfo_cache_expires_in
config. Now, the default value is:timer.seconds(60)
. - Add
whitelisted_clients
config to accept access tokens ONLY from trusted clients. Default value is the same client.
-
Breaking changes:
- If your application is accepting access tokens from other IDP
clients you must set the
whitelisted_clients
config with the client ids that are whitelisted. Otherwise, the application is gonna accept access tokens ONLY from the same client id.
- If your application is accepting access tokens from other IDP
clients you must set the
- Enhancements:
- Add support for
roles
claim.
- Add support for
- Enhancements:
- Add support for
email_verified
andphone_number_verified
claims.
- Add support for
- Enhancements:
- Add support for
max_age
param in the authorization url.
- Add support for
- Bug fixes:
- Fix ExDocs according to the new library name.
- Enhancements:
- Add support for
branding
param in the authorization url.
- Add support for
- Enhancements:
- Add support for
theme
param in the authorization url.
- Add support for
- Enhancements:
- Improve plug adapters.
- Add IdpAdapter and MockAdapter.
- Enhancements:
- Add Gamora.User structure to represent user claims.
- Initial version of the ueberauth strategy for amco.