v2.3.0

What's Changed

• Support signed jwt userinfo response by @holowinski in #254
• *: s/Json/JSON/g to appease lint by @ericchiang in #255
• userinfo - handling charset in Content-Type header by @ericchiang in #261
• Change Go Version Used in .travis.yml to v1.14 by @dickynovanto1103 in #268
• IDTokenVerifier: fix typo word in Verify function's comment by @dickynovanto1103 in #266
• also run travis tests under 1.15 by @mikedanese in #275
• support AWS Cognito, which is not completely OIDC compliant by @DallanQ in #257
• Added power support by @dthadi3 in #277
• fix up v2 CI by @ericchiang in #448
• Switch to maintained go-jose library by @liggitt in #447

New Contributors

• @holowinski made their first contribution in #254
• @dickynovanto1103 made their first contribution in #268
• @mikedanese made their first contribution in #275
• @DallanQ made their first contribution in #257
• @dthadi3 made their first contribution in #277
• @liggitt made their first contribution in #447

Full Changelog: v2.2.1...v2.3.0

v3.12.0

What's Changed

• oidc: add JSON tags to ProviderConfig by @ericchiang in #446

Full Changelog: v3.11.0...v3.12.0

v3.11.0

What's Changed

• oidc: verify support for algs from discovery by @ericchiang in #430
• chore(deps): bump dependencies to address security issues by @clambin in #432
• oidc: ignore cancellation of remote key set context by @ericchiang in #433

New Contributors

• @clambin made their first contribution in #432

Full Changelog: v3.10.0...v3.11.0

v3.10.0

What's Changed

• fix minor typo by @bgerrity in #414
• updated github actions by @ericchiang in #419
• add staticcheck to github actions by @ericchiang in #420
• update go-jose to v4 by @ericchiang in #421

New Contributors

• @bgerrity made their first contribution in #414

Full Changelog: v3.9.0...v3.10.0

v3.9.0

What's Changed

• build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 by @dependabot in #399

New Contributors

• @dependabot made their first contribution in #399

Full Changelog: v3.8.0...v3.9.0

v3.8.0

What's Changed

• support provider device_authorization_endpoint by @cbodonnell in #365

New Contributors

• @cbodonnell made their first contribution in #365

Full Changelog: v3.7.0...v3.8.0

v3.7.0

What's Changed

• io/ioutil deprecated by @testwill in #380
• oidc: use %w verb for wrapping errors by @rliebz in #381
• vulnerability: bump dependencies [CVE-2023-44487] by @joshua-auchincloss in #393

New Contributors

• @testwill made their first contribution in #380
• @rliebz made their first contribution in #381
• @joshua-auchincloss made their first contribution in #393

Full Changelog: v3.6.0...v3.7.0

v3.6.0

What's Changed

• oidc: restrict use of context.Background() by @ericchiang in #364
• *: gofmt all and update dependencies by @ericchiang in #369
• oidc: add UserInfoEndpoint returning the discocvered URL by @raggi in #375
• Add EdDSA algorithm support by @lritter14 in #378

New Contributors

• @raggi made their first contribution in #375
• @lritter14 made their first contribution in #378

Full Changelog: v3.5.0...v3.6.0

v3.5.0

What's Changed

• *: update go-jose package to latest by @ericchiang in #360
• Bump golang.org/x dependencies by @skitt in #361

New Contributors

• @skitt made their first contribution in #361

Full Changelog: v3.4.0...v3.5.0

v3.4.0

What's Changed

• oidc: add Config.InsecureSkipSignatureCheck by @ericchiang in #351

Full Changelog: v3.3.0...v3.4.0