github steveiliop56/tinyauth v5.0.1

latest release: nightly
11 hours ago

Tinyauth v5.0.1

Hey everyone, this is a small patch release addressing a config file loading issue (can now be loaded with --experimental.configfile or TINYAUTH_EXPERIMENTAL_CONFIGFILE) and fixing issues in the OIDC implementation moving towards the certification goal. You can check the OIDC testing status in the OpenID Connect Certification Platform (this release ensures basic oidcc-server passes).

Fixes

  • Ensure kid is present in the JWKS response
  • Handle empty client name in authorize page
  • Use correct environment variable and flag for config loading
  • Ensure nonce is being acknowledged in the ID token response
  • Ensure email_verified is present as a claim in the ID token and user info response
  • Ensure cache control headers are set on the token endpoint

Technical

  • Bump dependencies
  • Update translations

Please let me know of any issues so as I can fix them as soon as possible.

Don't miss a new tinyauth release

NewReleases is sending notifications on new releases.