v4.0.0

Added

• Add /endsession endpoint (thanks AndTem!)
• Support EdDSA algorithm

Removed

• Breaking: Drop support for Node.js 10
• No longer accepts PEM encoded keys
• No longer supports generating unsigned JWTs

Changed

• Breaking: Reworked exposed API. Please refer to the migration guide for more information.
• Add support for Node.js 16

v3.2.0

Added

• Add subject_types_supported OpenID Provider Metadata field (thanks jjbooth74!)

v3.1.0

Added

• Add authorize redirect event (thanks markwallsgrove!)

v3.0.3

Fixed

• Fix regression: When adding a key to the KeyStore, do not normalize key "use" value to "sig" when already defined

v3.0.2

Added

• Support Nodejs 14.15 LTS

v3.0.1

Fixed

• Include missing files on pack/publish

v3.0.0

Added

• TypeScript type definitions (#48)

Changed

• Straightened definitions of optional parameters: null is no longer considered as a non valued parameter value; undefined bears that meaning.

v2.0.0

Added

• Honor OpenID Connect nonce (#34 by @HASHIMOTO-Takafumi)

Removed

• No longer support Node 8

v1.5.1

Security

• Update npm dependencies to fix:
  • CVE-2020-7598

v1.5.0

Added

• Add HTTP request object to OAuth2Service's events
• Add beforeTokenSigning event to OAuth2Service