panva/openid-client v4.0.0

on GitHub

⚠ BREAKING CHANGES

• the deprecated issuer.key() method was removed
• due to added ESM module support Node.js version with ESM implementation bugs are no longer supported, this only affects early v13.x versions. The resulting Node.js semver range is ^10.19.0 || >=12.0.0 < 13 || >=13.7.0 (also taking into account the got dependency update)
• upgraded got http request library dependency from v9.x to v11.x. If you override some of the http request options you will most certainly have to accomodate them.
• Signed Request Object "typ" changed from JWT to oauth.authz.req+jwt
• Encrypted Request Object "cty" changed from JWT to oauth.authz.req+jwt
• PKCE is now used by default in the passport strategy
• client.userinfo() verb parameter was renamed to method
• the deprecated client.resource() method was removed

Features

• added support for ESM (ECMAScript modules) (3ac37e8)
• passport strategy will now use PKCE by default where applicable (56f9fe7)

Bug Fixes

• request object type changed from 'JWT' to 'oauth.authz.req+jwt' (641a42f)

Refactor

• remove deprecated client.resource() (c0ec865)
• remove deprecated issuer.key() (5cd1ecf)
• rename client.userinfo() verb parameter to method (4cb21a4)
• upgrade got from v9.x to v11.x (c72b5e8)