This release focuses on adding official .NET 7.0 support to OpenIddict 4.x and improving the nonce and request forgery protection implementation of the new OpenIddict client stack. As part of this release, Deezer has also been added to the list of supported providers.
Starting in 4.0 preview5, advanced users can override the default implementations (provided by the .NET BCL by default) of the cryptographic algorithms used internally by OpenIddict via the CryptoConfig.AddAlgorithm(Type, String[]) API. Doing so was already possible on .NET Framework in previous versions, but is now supported on all TFMs - including .NET Core and .NET - thanks to a new approach. For more information, read #1556.
This release also fixes a bug that affected the revamped ClaimsIdentity/ClaimsPrincipal.SetClaim(s) extensions taking a JsonElement parameter and that impacted scenarios using the ASP.NET Core Data Protection integration (thanks @trejjam! ❤️).