4.1.1 (2022-04-28)
- auth-route: store query params of attempted transition (4a8406d)
4.1.0 (2022-03-22)
- apollo: add middleware for ember-apollo-client (7e22f17)
4.0.0 (2022-02-04)
-
authentication: fix collection of attempted transition url (503a0d5)
-
config: remove usage of ember-get-config (74a9c0d)
-
debug: remove console log statements (eb3af4b)
-
dummy: correct session setup and fix serializer deprecation (aae998d)
-
lint: add missing linter deps and fix linting errors (d21c18e)
-
minor fixes and requested changes (28a67ac)
-
feat(adapter)!: add oidc rest adapter and refactor adapter naming (2c9f446)
-
refactor(octane)!: refactor to native js classes and remove mixins (b3610e8)
- Include an adapter subclass of the Ember RestAdapter to handle OIDC token refreshes and unauthorized request handling. The existing OIDCadapter is renamed to OIDCJSONAPIAdapter to clarify the base class origin.
- mixins can no longer be used, requires migration of consuming ember applications.
4.0.0-beta.2 (2022-02-04)
- config: remove usage of ember-get-config (74a9c0d)
4.0.0-beta.1 (2022-01-11)
-
authentication: fix collection of attempted transition url (503a0d5)
-
debug: remove console log statements (eb3af4b)
-
dummy: correct session setup and fix serializer deprecation (aae998d)
-
lint: add missing linter deps and fix linting errors (d21c18e)
-
minor fixes and requested changes (28a67ac)
-
feat(adapter)!: add oidc rest adapter and refactor adapter naming (2c9f446)
-
refactor(octane)!: refactor to native js classes and remove mixins (b3610e8)
- Include an adapter subclass of the Ember RestAdapter to handle OIDC token refreshes and unauthorized request handling. The existing OIDCadapter is renamed to OIDCJSONAPIAdapter to clarify the base class origin.
- mixins can no longer be used, requires migration of consuming ember applications.
3.0.1 (2020-11-19)
- deps: update ember and other dependencies (c911827)
3.0.0 (2020-08-18)
- single-logout: separate session invalidate and oidc logout (628eecb)
- single-logout: Since v1.0.0 this addon will always perform a single
logout on the authorization server. With this change the default
behaviour is "only" a logout on the current application. If the single
logout should be preserved the consuming application needs to manually
call the new
singleLogout
function.
2.0.0 (2020-06-18)
- config: allow configuration URLs to be absolute and relative (3477cbc), closes #189
- mixin: correctly recompute
headers
in theoidc-adapter-mixin
(d994a6e) - mixin: restore error handling (31671f5)
- deps: update ember and other dependencies (4d3bad3)
- add support for ember-simple-auth 3 (e86f571)
- deps: Support for the old ember LTS 3.8 is dropped
1.1.1 (2020-04-22)
- mixin: store id_token for use as id_token_hint on logout (f6adf36)
1.1.0 (2020-01-22)
- logout: prevent overriding continueTransition if it's already set (5080a03)
- add function to handle unauthorized responses (5d131c3)
1.0.0 (2020-01-22)
- adapter: remove deprecated usage of authorize on adapter mixin (fdd3de4)
- remove support for node 8 (9cc76a4)
- store redirect URL before logout (9ae445e)
- license: move from MIT to LGPL-3.0-or-later license (ce3e635)
- license: This project is now licensed under the LGPL-3.0-or-later license instead of the MIT license.
- This removes the need for the
OIDCEndSessionRouteMixin
. It can simply be replaced by the ESA native call ofsession.invalidate()
This enables the user to store the source URL after logging out. The user will then be redirected to that source after the next login.
- Node version 8.x is not supported anymore since it's not a maintained LTS version.
0.4.3 (2019-10-04)
- dependencies: update dependencies
0.4.2 (2019-09-09)
- authenticator: await successful retry before setting the session (18b9c1f)
0.4.1 (2019-09-06)
- authenticator: retry token refresh on error (63cd8d3)
0.4.0 (2019-07-25)
- continue-transition: do not trigger intercepted transition twice (1fafa76)
- dummy-app: fix queryParams handling in dummy (76ab8ef)
- redirect: add support for login_hint (9074063)
All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog and this project adheres to Semantic Versioning.
- Remove
realm
part as this is keycloak and not OIDC specific. In the case of a keycloak implementation, therealm
should be part of thehost
. This change is not backwards compatible! Just remove therealm
property from your configuration and add it directly to thehost
property. - Add required config option
scope
as scope is required by OIDC standard and is now always delivered to the auth endpoint - Add required config option
userinfoEndpoint
- Add optional config option
expiresIn
- Remove default values for all endpoint config options. They need to be set specifically in the project config file.
- No longer parse the
access_token
for user information instead request the user information from the userinfo endpoint. Make sure the userinfo endpoint is available and correctly configured! - Use the
expires_in
time from the token endpoint if available otherwise fallback to the configexpiresIn
value.