v5.2.0

Installation 🚀

NPM Link: https://www.npmjs.com/package/@node-oauth/oauth2-server/v/5.2.0

$ npm install @node-oauth/oauth2-server@5.2.0

What's Changed

Fixes and improvements 🔧

• docs: fixed verifyCode example by @kristofferjansson in #302
• fix(types): type declaration for AuthenticateOptions.scope by @Lordfirespeed in #305
• fix: explicitly support array of strings for AuthenticateHandler.options by @dhensby in #309
• ci: add dependabot integration for github actions by @dhensby in #311
• ci: add node 22 to test matrix by @dhensby in #312
• perf: random tokens do not need to be hashed by @dhensby in #313
• refactor(types): update types to be more concise by @dhensby in #314

Dependencies 📦

• build(deps-dev): bump mocha from 10.2.0 to 10.3.0 by @dependabot in #277
• build(deps-dev): bump mocha from 10.3.0 to 10.4.0 by @dependabot in #282
• build(deps-dev): bump sinon from 15.2.0 to 17.0.2 by @dependabot in #287
• build(deps-dev): bump sinon from 17.0.2 to 18.0.0 by @dependabot in #289
• build(deps): bump readthedocs-sphinx-search from 0.1.1 to 0.3.2 in /docs by @dependabot in #275
• build(deps-dev): bump nyc from 15.1.0 to 17.0.0 by @dependabot in #292
• build(deps-dev): bump mocha from 10.4.0 to 10.6.0 by @dependabot in #299
• build(deps-dev): bump mocha from 10.6.0 to 10.7.0 by @dependabot in #304
• build(deps-dev): bump chai from 4.3.7 to 4.5.0 by @dependabot in #315
• build(deps): bump github/codeql-action from 1 to 3 by @dependabot in #316

New Contributors 👏

• @kristofferjansson made their first contribution in #302
• @Lordfirespeed made their first contribution in #305

Full Changelog: v5.1.0...v5.2.0

v5.1.0

Installation

NPM Link: https://www.npmjs.com/package/@node-oauth/oauth2-server/v/5.1.0

$ npm install @node-oauth/oauth2-server@5.1.0

What's Changed

Fixes

• fix: update typing for validateScope making scope an optional parameter by @dhensby in #265
• Compliance/fix scope by @jankapunkt in #267

Dependencies

• build(deps-dev): bump eslint from 8.46.0 to 8.54.0 by @dependabot in #266
• build(deps-dev): bump eslint from 8.54.0 to 8.56.0 by @dependabot in #273
• build(deps-dev): bump eslint from 8.56.0 to 8.57.0 by @dependabot in #278

New Contributors

• @dhensby made their first contribution in #265

Full Changelog: v5.0.0...v5.1.0

v5.1.0-rc.0

Installation / NPM Link

$ npm install @node-oauth/oauth2-server@5.1.0-rc.0

https://www.npmjs.com/package/@node-oauth/oauth2-server/v/5.1.0-rc.0

What's Changed

• fix: update typing for validateScope making scope an optional parameter by @dhensby in #265
• Compliance/fix scope by @jankapunkt in #267

New Contributors

• @dhensby made their first contribution in #265

Full Changelog: v5.0.0...v5.1.0-rc.0

v5.0.0

This is a major release, including breaking changes!

Install this release

Npm link: https://www.npmjs.com/package/@node-oauth/oauth2-server/v/5.0.0

Install via

$ npm install  @node-oauth/oauth2-server@5.0.0

What's Changed

• refactor: Remove util.inherits #70 by @dsschiramm in #109
• Use native promises and async/await, drop bluebird and promisify-any by @jankapunkt in #190
• PKCE: get code_challenge and _method from query if not present in body by @jankapunkt in #197
• build(deps-dev): bump eslint from 8.42.0 to 8.44.0 by @dependabot in #195
• Fix generateAuthorizationCode not being awaited by @MaximilianGaedig in #203
• Fix ci for release-tests by @jankapunkt in #205
• build(deps-dev): bump eslint from 8.42.0 to 8.46.0 by @dependabot in #201
• build(deps-dev): bump sinon from 15.1.0 to 15.2.0 by @dependabot in #193
• Marked verifyScope function as optional in model types. by @shrihari-prakash in #209
• Removed callback support in typings file. by @shrihari-prakash in #211
• build(deps-dev): bump sinon from 15.1.0 to 15.2.0 by @dependabot in #206
• Fixed getUserFromClient not being awaited in client credentials grant. by @shrihari-prakash in #218
• Convert TokenModel to an ES6 class and extract utils function for calculating lifetime by @menewman in #223
• tests: add deep integration tests by @jankapunkt in #224
• Fix critical scope validation bug by @jorenvandeweyer in #228
• Convert Request, Response, CodeResponseType, TokenResponseType to ES6 classes by @menewman in #225
• Feature/refactor to es6 by @jorenvandeweyer in #227
• revoke code before validating redirect uri by @jorenvandeweyer in #231
• made badges clickable by @jorenvandeweyer in #236
• Fixes ignoring scope on refresh token call by @jorenvandeweyer in #238
• Improve bearer validation by @jorenvandeweyer in #234
• remove invalid bearer token that was used in test by @jorenvandeweyer in #243
• fix typing of revokeToken by @jorenvandeweyer in #247
• chore(docs): fix typo in lib/pkce/pkce.js wird -> weird by @ttacon in #250
• Support for retrieving user based on client by @jorenvandeweyer in #256
• Release 5.0.0 by @jankapunkt in #194
• Development by @jankapunkt in #260

New Contributors

• @dsschiramm made their first contribution in #109
• @MaximilianGaedig made their first contribution in #203
• @shrihari-prakash made their first contribution in #209
• @ttacon made their first contribution in #250

Full Changelog: v4.3.2...v5.0.0

v4.3.3

• fixed pkce retrieve code challenge and method in body and query

Full Changelog: v4.3.2...v4.3.3

v5.0.0-rc.5

Installation / NPM Link

$ npm install @node-oauth/oauth2-server@5.0.0-rc.5

https://www.npmjs.com/package/@node-oauth/oauth2-server/v/5.0.0-rc.5

What's Changed

• docs: fix links and cover missing topics by @jankapunkt in #208
• Add docs to comply with community standards by @jankapunkt in #199
• Docs: Replace code.code with code.authorizationCode (attempt 2) by @menewman in #222
• hotfix: fixed critical scope validation bug for 4.x by @jorenvandeweyer in #229
• revoke code before validating redirect uri 4.x by @jorenvandeweyer in #232
• chore(docs): fix typo in lib/pkce/pkce.js wird -> weird by @ttacon in #250

New Contributors

• @ttacon made their first contribution in #250

Full Changelog: v5.0.0-rc.4...v5.0.0-rc.5

v5.0.0-rc.4

Installation / NPM Link

$ npm install @node-oauth/oauth2-server@next

https://www.npmjs.com/package/@node-oauth/oauth2-server/v/5.0.0-rc.4

What's Changed

• made badges clickable by @jorenvandeweyer in #236
• Fixes ignoring scope on refresh token call by @jorenvandeweyer in #238
• Improve bearer validation by @jorenvandeweyer in #234
• remove invalid bearer token that was used in test by @jorenvandeweyer in #243

Full Changelog: v5.0.0-rc.3...v5.0.0-rc.4

v5.0.0-rc.3

Installation / NPM Link

$ npm install @node-oauth/oauth2-server@next

https://www.npmjs.com/package/@node-oauth/oauth2-server/v/5.0.0-rc.3

What's Changed

• build(deps-dev): bump eslint from 8.42.0 to 8.44.0 by @dependabot in #195
• build(deps-dev): bump eslint from 8.42.0 to 8.46.0 by @dependabot in #201
• build(deps-dev): bump sinon from 15.1.0 to 15.2.0 by @dependabot in #193
• Marked verifyScope function as optional in model types. by @shrihari-prakash in #209
• build(deps-dev): bump sinon from 15.1.0 to 15.2.0 by @dependabot in #206
• Convert TokenModel to an ES6 class and extract utils function for calculating lifetime by @menewman in #223
• tests: add deep integration tests by @jankapunkt in #224
• Fix critical scope validation bug by @jorenvandeweyer in #228
• Convert Request, Response, CodeResponseType, TokenResponseType to ES6 classes by @menewman in #225
• Feature/refactor to es6 by @jorenvandeweyer in #227
• revoke code before validating redirect uri by @jorenvandeweyer in #231

Full Changelog: v5.0.0-rc.2...v5.0.0-rc.3

v4.3.2

NPM link

https://www.npmjs.com/package/@node-oauth/oauth2-server/v/4.3.2

Install via

$ npm install  @node-oauth/oauth2-server@4.3.2

What's Changed

• revoke code before validating redirect uri 4.x by @jorenvandeweyer in #232

Full Changelog: v4.3.1...v4.3.2

v4.3.1

NPM Link

https://www.npmjs.com/package/@node-oauth/oauth2-server/v/4.3.1

What's Changed

Fixes

• hotfix: fixed critical scope validation bug for 4.x by @jorenvandeweyer in #229
• fix(build): pin versions in package.json by @jankapunkt in #150

Other

• docs: add badges to README #163 by @jmakhack in #164
• Ci update core actions by @jankapunkt in #168
• Add missing validateRedirectUri() to AuthorizationCodeModel by @saschanaz in #181
• build(deps-dev): bump sinon from 14.0.2 to 15.0.2 by @dependabot in #177
• Merge dev into master by @jankapunkt in #184
• build(deps-dev): bump sinon from 13.0.1 to 15.1.0 by @dependabot in #185
• build(deps-dev): bump mocha from 9.2.2 to 10.2.0 by @dependabot in #186
• build(deps-dev): bump eslint from 8.4.1 to 8.41.0 by @dependabot in #188
• build(deps-dev): bump eslint from 8.41.0 to 8.42.0 by @dependabot in #189
• docs: fix links and cover missing topics by @jankapunkt in #208
• Add docs to comply with community standards by @jankapunkt in #199
• Docs: Replace code.code with code.authorizationCode (attempt 2) by @menewman in #222

New Contributors

• @jmakhack made their first contribution in #164
• @saschanaz made their first contribution in #181

Full Changelog: v4.3.0...v4.3.1