16.15.0
Tue, 27 Oct 2026 18:15:10 GMT
Minor changes
- Add the pocd (popup origin check done) parameter to authorize and end-session requests, preserving computed parameter precedence #8793 (kshabelko@microsoft.com)
Patches
- Handle response headers case-insensitively #8916 (kshabelko@microsoft.com)
- Avoid interpreting application routes as authorization responses #8918 (223556219+Copilot@users.noreply.github.com)