Bump Auth0.OidcClient.Core to v4, removing support for ClientSecret
Note that this also bumps Auth0.OidcClient.Core from v3 to v4, which is intentional. The only difference with v4 is that support for ClientSecret has been removed, which should not be available in client-SDKs to begin with, hence this being released as a patch fix.
Additionally, this also releases v4.0.1 of Auth0.OidcClient.Core, bumping Microsoft.IdentityModel.Protocols.OpenIdConnect to address a vulnerability.
Note that this also bumps
Auth0.OidcClient.Corefrom v3 to v4, which is intentional. The only difference with v4 is that support for ClientSecret has been removed, which should not be available in client-SDKs to begin with, hence this being released as a patch fix.Additionally, this also releases v4.0.1 of Auth0.OidcClient.Core, bumping
Microsoft.IdentityModel.Protocols.OpenIdConnectto address a vulnerability.