Closed renovate[bot] closed 2 years ago
This PR contains the following updates:
^3.14.0
^4.0.0
📅 Schedule: At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by WhiteSource Renovate. View repository job log here.
This PR contains the following updates:
^3.14.0->^4.0.0Release Notes
panva/node-openid-client
### [`v4.9.1`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#491-httpsgithubcompanvanode-openid-clientcomparev490v491-2021-10-13) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v4.9.0...v4.9.1) ##### Bug Fixes - do not implicitly calculate key ids for Client instances ([46e44e7](https://togithub.com/panva/node-openid-client/commit/46e44e754aa299a97e4d51aa8762a3423255080f)), closes [#379](https://togithub.com/panva/node-openid-client/issues/379) ### [`v4.9.0`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#490-httpsgithubcompanvanode-openid-clientcomparev480v490-2021-09-20) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v4.8.0...v4.9.0) ##### Features - update DPoP support to draft-03 ([#407](https://togithub.com/panva/node-openid-client/issues/407)) ([5565ee1](https://togithub.com/panva/node-openid-client/commit/5565ee1ea5d7c68cd7ec7c8fbcdb98a9f85d512a)), closes [#406](https://togithub.com/panva/node-openid-client/issues/406) ### [`v4.8.0`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#480-httpsgithubcompanvanode-openid-clientcomparev475v480-2021-09-15) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v4.7.5...v4.8.0) ##### Features - OAuth 2.0 Pushed Authorization Requests (PAR) is now a stable feature ([327f366](https://togithub.com/panva/node-openid-client/commit/327f366daf042c011f41f4e6419cba5e59f0edac)) ### [`v4.7.5`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#475-httpsgithubcompanvanode-openid-clientcomparev474v475-2021-08-30) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v4.7.4...v4.7.5) ##### Bug Fixes - **typescript:** add remaining properties from RFC7662 ([#398](https://togithub.com/panva/node-openid-client/issues/398)) ([166e89b](https://togithub.com/panva/node-openid-client/commit/166e89b867bcb6923a8198740843161a57d656cb)) ### [`v4.7.4`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#474-httpsgithubcompanvanode-openid-clientcomparev473v474-2021-05-25) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v4.7.3...v4.7.4) ##### Bug Fixes - **typescript:** add a missing PATCH method to requestResource ([6b2c3ce](https://togithub.com/panva/node-openid-client/commit/6b2c3ce09b45a301911fb9f8e1e52831063f7063)), closes [#368](https://togithub.com/panva/node-openid-client/issues/368) ### [`v4.7.3`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#473-httpsgithubcompanvanode-openid-clientcomparev472v473-2021-04-30) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v4.7.2...v4.7.3) ##### Bug Fixes - **fapi:** validate ID Token's iat regardless of which channel it came from ([b68b9ab](https://togithub.com/panva/node-openid-client/commit/b68b9ab5af6a85a2f42adf6b782cef7e08378658)) ### [`v4.7.2`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#472-httpsgithubcompanvanode-openid-clientcomparev471v472-2021-04-23) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v4.7.1...v4.7.2) ##### Bug Fixes - **typescript:** add types for 4.6.0 additions ([9064136](https://togithub.com/panva/node-openid-client/commit/9064136d959b5825f69b32344bbe165f12a10949)) ### [`v4.7.1`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#471-httpsgithubcompanvanode-openid-clientcomparev470v471-2021-04-22) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v4.7.0...v4.7.1) ##### Bug Fixes - **typescript:** add types for 4.7.0 additions ([2c1d2ab](https://togithub.com/panva/node-openid-client/commit/2c1d2ab71fe2daba2dad23af1f92f66c92305df5)) ### [`v4.7.0`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#470-httpsgithubcompanvanode-openid-clientcomparev460v470-2021-04-22) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v4.6.0...v4.7.0) ##### Features - add abort control over Device Flow Handle polling ([#357](https://togithub.com/panva/node-openid-client/issues/357)) ([f6faa68](https://togithub.com/panva/node-openid-client/commit/f6faa68850e2582c92e69fa420b8d5c58bfc951c)), closes [#355](https://togithub.com/panva/node-openid-client/issues/355) [#356](https://togithub.com/panva/node-openid-client/issues/356) ### [`v4.6.0`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#460-httpsgithubcompanvanode-openid-clientcomparev452v460-2021-03-25) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v4.5.2...v4.6.0) ##### Features - added OAuth 2.0 Pushed Authorization Requests client API ([e7af9f5](https://togithub.com/panva/node-openid-client/commit/e7af9f5125c9c1a8877482b8fda44954e60707a1)), closes [#259](https://togithub.com/panva/node-openid-client/issues/259) ### [`v4.5.2`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#452-httpsgithubcompanvanode-openid-clientcomparev451v452-2021-03-24) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v4.5.1...v4.5.2) ##### Bug Fixes - interoperable audience array value for JWT Client auth assertions ([da7d2f0](https://togithub.com/panva/node-openid-client/commit/da7d2f0090cd0323a14702bcca77536eb4e2b49d)) ### [`v4.5.1`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#451-httpsgithubcompanvanode-openid-clientcomparev450v451-2021-03-15) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v4.5.0...v4.5.1) ##### Bug Fixes - use mtls token endpoint alias as audience when using jwt auth with mtls constrained tokens ([c463359](https://togithub.com/panva/node-openid-client/commit/c4633591ed7ebdf973b0240959078a8217beccbb)) ### [`v4.5.0`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#450-httpsgithubcompanvanode-openid-clientcomparev442v450-2021-03-10) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v4.4.2...v4.5.0) ##### Features - include `nbf` in FAPIClient Request Objects ([0be56ba](https://togithub.com/panva/node-openid-client/commit/0be56ba5622e0062495965f55285438542da614e)) ### [`v4.4.2`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#442-httpsgithubcompanvanode-openid-clientcomparev441v442-2021-03-07) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v4.4.1...v4.4.2) ##### Bug Fixes - resolve discovery URIs one by one to yield consistent results ([6b18218](https://togithub.com/panva/node-openid-client/commit/6b18218cfa098195ec8442086221a88fa6aef654)), closes [#260](https://togithub.com/panva/node-openid-client/issues/260) [#267](https://togithub.com/panva/node-openid-client/issues/267) ### [`v4.4.1`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#441-httpsgithubcompanvanode-openid-clientcomparev440v441-2021-02-26) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v4.4.0...v4.4.1) ##### Bug Fixes - hide AggregateError message stack ([3011cca](https://togithub.com/panva/node-openid-client/commit/3011ccabc63e670adcee432b6565d10b55554865)), closes [#336](https://togithub.com/panva/node-openid-client/issues/336) ### [`v4.4.0`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#440-httpsgithubcompanvanode-openid-clientcomparev430v440-2021-01-29) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v4.3.0...v4.4.0) ##### Features - allow options.https.pfx for mTSL ([075cad7](https://togithub.com/panva/node-openid-client/commit/075cad73a28d825128e6c92d44e7dba556b6a6f4)), closes [#326](https://togithub.com/panva/node-openid-client/issues/326) ### [`v4.3.0`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#430-httpsgithubcompanvanode-openid-clientcomparev423v430-2021-01-22) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v4.2.3...v4.3.0) ##### Features - **typescript:** add userinfo response generics ([b176b2f](https://togithub.com/panva/node-openid-client/commit/b176b2f9161be77082c520ab532c237380abda22)) ### [`v4.2.3`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#423-httpsgithubcompanvanode-openid-clientcomparev422v423-2021-01-18) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v4.2.2...v4.2.3) ##### Performance - use base64url encoding in node when available ([24ab5b4](https://togithub.com/panva/node-openid-client/commit/24ab5b46c688cd1dd3679fe61a9de668c87e656b)) ### [`v4.2.2`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#422-httpsgithubcompanvanode-openid-clientcomparev421v422-2020-11-30) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v4.2.1...v4.2.2) ##### Bug Fixes - push pkce <> response type resolution to the authenticate function ([1970af4](https://togithub.com/panva/node-openid-client/commit/1970af41dc0cd62d44efb1f0a48bdc2a70bcd608)), closes [#312](https://togithub.com/panva/node-openid-client/issues/312) ### [`v4.2.1`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#421-httpsgithubcompanvanode-openid-clientcomparev420v421-2020-10-27) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v4.2.0...v4.2.1) ##### Bug Fixes - **typescript:** add state property to AuthorizationParameters ([#305](https://togithub.com/panva/node-openid-client/issues/305)) ([b9dfa60](https://togithub.com/panva/node-openid-client/commit/b9dfa6064d7823ab0bb3eed486a3a5c7ad452982)), closes [#304](https://togithub.com/panva/node-openid-client/issues/304) ### [`v4.2.0`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#420-httpsgithubcompanvanode-openid-clientcomparev411v420-2020-10-03) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v4.1.1...v4.2.0) ##### Features - add callback extras to strategy options ([#295](https://togithub.com/panva/node-openid-client/issues/295)) ([b77466d](https://togithub.com/panva/node-openid-client/commit/b77466ddb597accdb783bad07566f28db0d2c827)) ### [`v4.1.1`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#411-httpsgithubcompanvanode-openid-clientcomparev410v411-2020-09-14) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v4.1.0...v4.1.1) ##### Bug Fixes - **typescript:** ts module interop issues with default export ([6ca57d0](https://togithub.com/panva/node-openid-client/commit/6ca57d0ef08c188c1da7f3c980b74ba3abf33966)), closes [#291](https://togithub.com/panva/node-openid-client/issues/291) ### [`v4.1.0`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#410-httpsgithubcompanvanode-openid-clientcomparev402v410-2020-09-11) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v4.0.2...v4.1.0) ##### Features - OAuth 2.0 DPoP in various relevant API interfaces ([44a0de7](https://togithub.com/panva/node-openid-client/commit/44a0de7ceb62cabacd62798ac136f1c394907028)) ### [`v4.0.2`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#402-httpsgithubcompanvanode-openid-clientcomparev401v402-2020-09-11) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v4.0.1...v4.0.2) ##### Bug Fixes - updated request object mime-type as per draft-ietf-oauth-jwsreq-30 ([d5cc619](https://togithub.com/panva/node-openid-client/commit/d5cc619cbf137c42898229546e44b8f065af6e3f)) ### [`v4.0.1`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#401-httpsgithubcompanvanode-openid-clientcomparev400v401-2020-09-10) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v4.0.0...v4.0.1) ##### Bug Fixes - ensure minimal got version handles upcoming node version changes ([fd737a3](https://togithub.com/panva/node-openid-client/commit/fd737a3598c29d7069328156e06b23d08c1f50c6)) ### [`v4.0.0`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#400-httpsgithubcompanvanode-openid-clientcomparev31510v400-2020-09-09) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v3.15.10...v4.0.0) ##### ⚠ BREAKING CHANGES - the deprecated `issuer.key()` method was removed - due to added ESM module support Node.js version with ESM implementation bugs are no longer supported, this only affects early v13.x versions. The resulting Node.js semver range is `^10.19.0 || >=12.0.0 < 13 || >=13.7.0` (also taking into account the `got` dependency update) - upgraded got http request library dependency from `v9.x` to `v11.x`. If you override some of the http request options you will most certainly have to accomodate them. - Signed Request Object "typ" changed from `JWT` to `oauth.authz.req+jwt` - Encrypted Request Object "cty" changed from `JWT` to `oauth.authz.req+jwt` - PKCE is now used by default in the passport strategy - `client.userinfo()` `verb` parameter was renamed to `method` - the deprecated `client.resource()` method was removed ##### Features - added support for ESM (ECMAScript modules) ([3ac37e8](https://togithub.com/panva/node-openid-client/commit/3ac37e80d66d47e9814972ed86d1323b9ee96b79)) - passport strategy will now use PKCE by default where applicable ([56f9fe7](https://togithub.com/panva/node-openid-client/commit/56f9fe7171ccc1bec6427d4f9bc45e419150ab4d)) ##### Bug Fixes - request object type changed from 'JWT' to 'oauth.authz.req+jwt' ([641a42f](https://togithub.com/panva/node-openid-client/commit/641a42fdd3097289085340afab652e4b8b9f571c)) ##### Refactor - remove deprecated `client.resource()` ([c0ec865](https://togithub.com/panva/node-openid-client/commit/c0ec8652673c7b276a7c71eb2d730eb3feb22eeb)) - remove deprecated `issuer.key()` ([5cd1ecf](https://togithub.com/panva/node-openid-client/commit/5cd1ecfced358c7a685d9dc29aa451a9ef13b770)) - rename `client.userinfo()` `verb` parameter to `method` ([4cb21a4](https://togithub.com/panva/node-openid-client/commit/4cb21a4c2aef6421fe7a0f67d45baf209989cdd4)) - upgrade got from v9.x to v11.x ([c72b5e8](https://togithub.com/panva/node-openid-client/commit/c72b5e812f6a94a92e008facefa72c366728d4a5)) ### [`v3.15.10`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#31510-httpsgithubcompanvanode-openid-clientcomparev3159v31510-2020-09-02) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v3.15.9...v3.15.10) ##### Bug Fixes - **typescript:** add missing types ([#284](https://togithub.com/panva/node-openid-client/issues/284)) ([49e0ff0](https://togithub.com/panva/node-openid-client/commit/49e0ff0c695cabd54148bc8a83611dd4ef6ed47c)) ### [`v3.15.9`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#3159-httpsgithubcompanvanode-openid-clientcomparev3158v3159-2020-07-26) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v3.15.8...v3.15.9) ##### Bug Fixes - **typescript:** max_age in AuthorizationParameters is a number ([5ce2a73](https://togithub.com/panva/node-openid-client/commit/5ce2a733890dba6ba2bc2f8f296a4235c0c5cdd6)), closes [#279](https://togithub.com/panva/node-openid-client/issues/279) ### [`v3.15.8`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#3158-httpsgithubcompanvanode-openid-clientcomparev3157v3158-2020-07-17) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v3.15.7...v3.15.8) ##### Bug Fixes - allow AAD appid including discovery URLs to be multi-tenant ([c27caab](https://togithub.com/panva/node-openid-client/commit/c27caab9b9df92b591c4f0491fd2ec346ff48988)) ### [`v3.15.7`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#3157-httpsgithubcompanvanode-openid-clientcomparev3156v3157-2020-07-16) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v3.15.6...v3.15.7) ### [`v3.15.6`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#3156-httpsgithubcompanvanode-openid-clientcomparev3155v3156-2020-07-06) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v3.15.5...v3.15.6) ##### Bug Fixes - merge helper returns modified object, leftovers removed ([2e3339b](https://togithub.com/panva/node-openid-client/commit/2e3339bd82297d6e37574e007b8a443087f3291e)) ### [`v3.15.5`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#3155-httpsgithubcompanvanode-openid-clientcomparev3154v3155-2020-06-26) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v3.15.4...v3.15.5) ##### Bug Fixes - regression from [#272](https://togithub.com/panva/node-openid-client/issues/272) ([9bff960](https://togithub.com/panva/node-openid-client/commit/9bff960bda42fd8af7b8569f121ca35c7f4cfae4)) ### [`v3.15.4`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#3154-httpsgithubcompanvanode-openid-clientcomparev3153v3154-2020-06-26) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v3.15.3...v3.15.4) ### [`v3.15.3`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#3153-httpsgithubcompanvanode-openid-clientcomparev3152v3153-2020-06-15) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v3.15.2...v3.15.3) ##### Bug Fixes - give AAD v1 common same treatment as v2 common ([2344e00](https://togithub.com/panva/node-openid-client/commit/2344e006fd4086d0df8391f9ef95cce25299e45f)), closes [#269](https://togithub.com/panva/node-openid-client/issues/269) ### [`v3.15.2`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#3152-httpsgithubcompanvanode-openid-clientcomparev3151v3152-2020-06-01) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v3.15.1...v3.15.2) ##### Bug Fixes - allow any JSON numeric value for timestamp values ([a24a759](https://togithub.com/panva/node-openid-client/commit/a24a7596c038bacd5bdbfc5b8678a96e62b86fd2)), closes [#263](https://togithub.com/panva/node-openid-client/issues/263) ### [`v3.15.1`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#31510-httpsgithubcompanvanode-openid-clientcomparev3159v31510-2020-09-02) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v3.15.0...v3.15.1) ##### Bug Fixes - **typescript:** add missing types ([#284](https://togithub.com/panva/node-openid-client/issues/284)) ([49e0ff0](https://togithub.com/panva/node-openid-client/commit/49e0ff0c695cabd54148bc8a83611dd4ef6ed47c)) ### [`v3.15.0`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#3150-httpsgithubcompanvanode-openid-clientcomparev3142v3150-2020-04-28) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v3.14.2...v3.15.0) ##### Features - add RPError indicators for unix timestamp comparison failures ([fe3db5c](https://togithub.com/panva/node-openid-client/commit/fe3db5c46a04cab024901782f202d08234b4cd96)), closes [#250](https://togithub.com/panva/node-openid-client/issues/250) ### [`v3.14.2`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#3142-httpsgithubcompanvanode-openid-clientcomparev3141v3142-2020-04-07) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v3.14.1...v3.14.2) ##### Bug Fixes - **typescript:** add options arg to TypeOfGenericClient ([b97b028](https://togithub.com/panva/node-openid-client/commit/b97b0288d5d79f25cad3d0009212878c5d42a2e0)) ### [`v3.14.1`](https://togithub.com/panva/node-openid-client/blob/master/CHANGELOG.md#3141-httpsgithubcompanvanode-openid-clientcomparev3140v3141-2020-03-21) [Compare Source](https://togithub.com/panva/node-openid-client/compare/v3.14.0...v3.14.1) ##### Bug Fixes - assert refresh_token grant ID Token sub to equal previous ([23f3f9f](https://togithub.com/panva/node-openid-client/commit/23f3f9fcb88c157cf9bbfa7cc2444e07f0cedc18))Configuration
📅 Schedule: At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by WhiteSource Renovate. View repository job log here.