All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog and this project adheres to Semantic Versioning.
- [
Plugoid
] RFC9207 is supported. As a consequence, redirect URI no longer contains the issuer when generated by theplugoid_redirect_uri
function (see [Plugoid.RedirectURI
])
- [
Plugoid
]Plugoid.authenticate/2
is now public
- [
Plugoid
] GET request parameters are now stored in a cookie unless:preserve_initial_request
is set totrue
, in which case it is sotred in local storage in the browser
- [
Plugoid.Redirect
] Breaking change The token callback now takes aPlug.Conn.t()
as an additional parameter and returns it
- [
Plugoid.Session.StateSession
] Setsecure: true
to state session cookie (#14)
- [
Plugoid
] Relaxed requirements for thephoenix_html
dependency
- [
Plugoid
] Fixed a bug with token hash validation in imported library
- [
Plugoid
] Fixed erroneous handling of custom OP metadata
- [
Plugoid.RedirectURI
] Mix-up attack protection. Redirect URIs are generated with aniss
parameter, which is verified when receiving the answer from the OP