v0.21.2

• Fix: Use latest access token instead of first valid one in case user granted new permissions

v0.21.1

Bugfix release to improve null handling of access tokens.

v0.21.0

• Refactor Zaikio::OAuthClient.client_name to be thread-safe

• Support :app_name and :redirect_uri parameters with subscription flow

v0.20.0

• Support prefilled person and organization data

v0.19.3

• Fix: only include valid or refreshable access token in find_active_access_token

v0.19.2

• Fix logged_in_as to return access token ID

v0.19.1

• Fix logged_in_as helper to create a proper access token

v0.19.0

• Do not store refresh tokens from client credentials flow to improve security (until they are removed by the hub)
• Do not redeem refresh tokens in get_access_token instead use client credentials flow so that only users redeem refresh tokens
• Automatically revoke access token on logout (security)
• Add Zaikio::OAuthClient.find_active_access_token( session[:zaikio_access_token_id]) that should be used to find the latest valid access token. If the (redirect) access token e.g. was revoked (user disconnected, security breach, ...) the user shall be logged out.
• Add Zaikio::AccessToken#revoke!

v0.18.1

• Relax dependency on zaikio-jwt_auth, allow versions 2.x

v0.18.0

• BREAKING: Encrypt token & refresh_token with Active Record Encryption:
  1. Run rails db:encryption:init per environment and copy the values to your encrypted credentials
  2. Add config.active_record.encryption.encrypt_fixtures = true to environments/test.rb
  3. Run rails zaikio_oauth_client:install:migrations and rails db:migrate to encrypt stored access tokens