Skip to content

7.15.0
Compare
Choose a tag to compare
@frederikprijck frederikprijck released this 26 Jul 11:49
7.15.0
279e2b5
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

Added

Changed

Note that with this release, ID Token validation has been added when retrieving a token using any of the Device Code or Passwordless flows.
There might be a rare occasion where this could break your application, in the situation where you are using invalid ID Tokens.
However, typically this should not cause any issues as ID Tokens are supposed to be valid. If they aren't, you probably want to get notified about it as soon as possible.

Prior to this change, those methods would return the tokens without checking the validaty of your ID Token.
However, given the fact that this should realy be an edge case, and we believe it's a good idea to inform you about invalid tokens sooner rather than later, we decided to introduce this change in a minor release.

Assets 2
Loading