What's Changed
- feat: use scopes_supported from resource metadata by default (fixes #580) by @antogyn in #757
- [v1.x backport] Default to client_secret_basic when server omits token_endpoint_auth_methods_supported by @pcarleton in #1611
- fix: reject plain JSON Schema objects passed as inputSchema by @tiluckdave in #1596
- fix: clear _timeoutInfo in _onclose() and scope .finally() abort controller cleanup by @pcarleton in #1462
- fix(server/auth): RFC 8252 loopback port relaxation by @poteat in #1738
- chore: bump version to 1.28.0 by @felixweinberger in #1746
New Contributors
- @antogyn made their first contribution in #757
- @tiluckdave made their first contribution in #1596
- @poteat made their first contribution in #1738
Full Changelog: v1.27.1...v1.28.0