0.10.0

[aeneasr]

Why is this no longer tagged as 1.0.0-alpha?

The main reason is that this release introduces a lot of breaking changes, especially in the SDK and the consent flow. It is important that these changes are battle tested before releasing this as a stable major release.

Changes

• oauth2: improves warning when subject claim is empty in id token - closes "Subject claim can not be empty" error when trying to retrieve ID Token #460
• oauth2: changes scope semantics to wildcard - closes oauth2: change scope semantics to wildcard #550
• oauth2: refresh openid connect id token via refresh_token grant - closes oauth2: refresh openid connect id token via refresh_token grant #556
• oauth2: revoke old access tokens when refresh token is issued
• all: replace pkg.error with error checking from testify

Breaking Changes

• GET /clients now returns an array, not a map object
• well, obviously the whole go sdk
• GET /health is now GET /health/status
• GET /health/stats is now GET /health/metrics
• GET /warden/groups now returns a list of groups, not just a group id
• consent flow
• Warden endpoint returning Context now return the full name, not a short hand.

Todo

• Update version tags on both go and node consent example
• Document warden response change
• Update apiary docs
• Publish node sdk with ory-hydra-sdk
• Write node sdk wrapper
• Document node sdk in user guide and readme
• Replace old hydra-js links
• Update node consent app
• Publish updated node consent app
• Update go consent app
• Publish updated go consent app
• Link gitbook sdk guide to sdk docs
• Rewrite start up policies to match new consent flow
• Write guide for new consent policies for existing applications in history.md
• Add ability to specify a reason when denying consent
• Write docs on new consent flow (replace consent flow section)
• Write history.md on consent flow
• Write swagger spec for consent flow
• Replace consent sdk (node+go)
• Add SQL consent manager
• replace underscore with camelCase in consent interface
• oauth2: refactor consent flow RFC: Refactor consent flow #578
• Write docs on new scope strategy
• Write docs (history) on how to use old scope strategy
• Link to new scope strategy docs in history.md
• Fix handler/openid: refresh id token only when client is allowed to receive id token fosite#199