This release introduces the following changes:
-
A .NET 11 TFM was added to all the OpenIddict packages.
-
A vulnerability affecting the validation of authorization entries in the OpenIddict validation stack when token entry validation is not enabled was identified earlier today (thanks @DicksonWu654! ❤️) and fixed.
Caution
Upgrading to OpenIddict 7.9.0 or 8.0.0 preview 6 is strongly advised. See https://github.com/openiddict/openiddict-core/security/advisories/ for more information.
-
The
HttpClientActionsandHttpClientHandlerActionsproperties exposed by theOpenIddictClientSystemNetHttpOptionsandOpenIddictValidationSystemNetHttpOptionshave been updated to takeOpenIddictClientSystemNetHttpContextandOpenIddictValidationSystemNetHttpContextas a delegate argument. -
The
OpenIddict.Client.WebIntegrationpackage now supports the Veriqa service (thanks @Ti-B2! ❤️) -
All the .NET and third-party dependencies have been updated to their latest version.