openiddict/openiddict-core 4.0.0-rc2

on GitHub

This RC release introduces the following changes:

• The System.Net.Http integration packages for the client and validation stacks now support specifying an e-mail address that will be used in the From header of backchannel requests (for more information about the From HTTP request header, read https://datatracker.ietf.org/doc/html/rfc9110#section-10.1.2):

options.UseSystemNetHttp()
       .SetContactAddress("contact@domain.com")
       .SetProductInformation(typeof(Startup).Assembly);

• An issue affecting the ASP.NET Core Data Protection integration and device authorization codes was identified and fixed.

• An issue affecting the OpenIddictExtensions.AddClaims() extension and preventing userinfo and introspection responses containing complex JSON nodes in top-level array claims from being properly handled was identified and fixed (thanks @danbluhmhansen! ❤️)