OpenIDC/mod_auth_openidc v2.1.1

release 2.1.1

on GitHub

binary packages for the libcjose 0.4.1 dependency can be found in the 2.1.0 release section

Bugfixes

• fix memory leak - introduced in 2.1.0 - when skipping jwks_uri keys with a non-matching use value
• remove stale claims from the session when refreshing them from the userinfo endpoint fails; see #194; thanks @kerrermanisNL
• always restore id_token/claims on sub-requests so e.g. listing claims-protected subdirectories via mod_autoindex will work without having to apply IndexOptions +ShowForbidden; thanks Valentin Mercier

Other

• ensure old sessions are removed from the cache so they don't occupy/pollute cache storage; see #192; thanks @steve-dave
• log readable error messages when memcache operations fail