v5.0.0-rc.2

What's Changed

• Removed callback support in typings file. by @shrihari-prakash in #211
• Fixed getUserFromClient not being awaited in client credentials grant. by @shrihari-prakash in #218

Full Changelog: v5.0.0-rc.1...v5.0.0-rc.2

v5.0.0-rc.1

released version

https://www.npmjs.com/package/@node-oauth/oauth2-server/v/5.0.0-rc.1

install via

$ npm install @node-oauth/oauth2-server@5.0.0-rc.1

What's Changed

• PKCE: get code_challenge and _method from query if not present in body by @jankapunkt in #197
• Fix generateAuthorizationCode not being awaited by @MaximilianGaedig in #203
• Fix ci for release-tests by @jankapunkt in #205

New Contributors

• @MaximilianGaedig made their first contribution in #203

Full Changelog: v5.0.0-rc.0...v5.0.0-rc.1

v5.0.0-rc.0

Package

NPM: https://www.npmjs.com/package/@node-oauth/oauth2-server/v/5.0.0-rc.0

$ npm install @node-oauth/oauth2-server@5.0.0-rc.0

What's Changed

• fix(build): pin versions in package.json by @jankapunkt in #150
• docs: add badges to README #163 by @jmakhack in #164
• Ci update core actions by @jankapunkt in #168
• Add missing validateRedirectUri() to AuthorizationCodeModel by @saschanaz in #181
• build(deps-dev): bump sinon from 14.0.2 to 15.0.2 by @dependabot in #177
• Merge dev into master by @jankapunkt in #184
• build(deps-dev): bump sinon from 13.0.1 to 15.1.0 by @dependabot in #185
• build(deps-dev): bump mocha from 9.2.2 to 10.2.0 by @dependabot in #186
• build(deps-dev): bump eslint from 8.4.1 to 8.41.0 by @dependabot in #188
• build(deps-dev): bump eslint from 8.41.0 to 8.42.0 by @dependabot in #189
• refactor: Remove util.inherits #70 by @dsschiramm in #109
• Use native promises and async/await, drop bluebird and promisify-any by @jankapunkt in #190

New Contributors

• @jmakhack made their first contribution in #164
• @saschanaz made their first contribution in #181
• @dsschiramm made their first contribution in #109

Full Changelog: v4.3.0...v5.0.0-rc.0

v4.3.0

NPM Package release:

https://www.npmjs.com/package/@node-oauth/oauth2-server/v/4.3.0

What's Changed

• Update node versions to be >=14 by @jankapunkt in #156
• build(deps-dev): bump sinon from 13.0.1 to 14.0.0 by @dependabot in #146
• build(deps-dev): bump mocha from 9.2.2 to 10.0.0 by @dependabot in #145
• Fixed order of checks in authorize-handler by @FStefanni in #112
• Save code challenge with authorization code by @martinssonj in #161
• feature(pkce): added pkce support by @jankapunkt in #86
• release 4.3.0 by @jankapunkt in #171
• merge release 4.3.0 into master by @jankapunkt in #172

New Contributors

• @martinssonj made their first contribution in #161

Full Changelog: v4.2.0...v4.3.0

v4.2.0

NPM Release

https://www.npmjs.com/package/@node-oauth/oauth2-server/v/4.2.0

What's Changed

• up semver and update changelog for dev branch by @HappyZombies in #88
• Supported state in case of denial by @FStefanni in #99
• fix(handlers): skip varcheck for state when allowEmptyState by @jankapunkt in #93
• Fixed misssing return statement in doc by @FStefanni in #98
• build(deps-dev): bump eslint from 8.2.0 to 8.4.1 by @dependabot in #102
• Removed is.js by @jwerre in #108
• Bump sinon from 11.1.2 to 12.0.1 by @dependabot in #74
• build(deps-dev): bump eslint from 8.2.0 to 8.4.1 by @dependabot in #106
• Integration test password grant by @jorenvandeweyer in #100
• Supported custom validateRedirectUri() by @FStefanni in #97
• fix(handler): deny access when body.allowed is 'false' by @jankapunkt in #94
• Set WWW-Authenticate header for invalid requests by @FStefanni in #96
• Bearer regular expression matching in authenticate handler by @FStefanni in #105
• Get release-workflow running by @jankapunkt in #117
• build(deps-dev): bump eslint from 8.2.0 to 8.11.0 by @dependabot in #133
• build(deps-dev): bump mocha from 9.1.2 to 9.2.2 by @dependabot in #132
• build(deps-dev): bump sinon from 12.0.1 to 13.0.1 by @dependabot in #128
• build(deps-dev): bump chai from 4.3.4 to 4.3.6 by @dependabot in #124
• Remove release workflow by @jankapunkt in #134
• Update extension-grants.rst with example by @FStefanni in #92
• RefreshTokenGrant: update error messages by @chrisfranko in #143
• security: remove package-lock.json by @Uzlopak in #141
• Release 4.2.0 by @jankapunkt in #135

For a structured list of the changes please read the CHANGELOG

New Contributors

• @FStefanni made their first contribution in #99
• @chrisfranko made their first contribution in #143
• @Uzlopak made their first contribution in #141

Full Changelog: v4.1.1...v4.2.0

v4.1.1

Added

• Added TypeScript types

Changed

• Removed extra files when someone npm installs.
• Upgrades all code from ES5 to ES6, where possible.

v4.1.0

Changed

• Bump dev dependencies to resolve vulnerabilities
• Replaced jshint with eslint along with should and chai
• Use sha256 when generating tokens

Added

• Added markdown files to discuss coding rules, commit conventions, contributing guidelines, etc.

Removed

• Removed lodash dependency
• Removed statuses package and use built in http.STATUS_CODES instead.

v4.0.0

First initial release of this project under the new node-oauth organization