Tinyauth v5.0.1
Hey everyone, this is a small patch release addressing a config file loading issue (can now be loaded with --experimental.configfile or TINYAUTH_EXPERIMENTAL_CONFIGFILE) and fixing issues in the OIDC implementation moving towards the certification goal. You can check the OIDC testing status in the OpenID Connect Certification Platform (this release ensures basic oidcc-server passes).
Fixes
- Ensure
kidis present in the JWKS response - Handle empty client name in authorize page
- Use correct environment variable and flag for config loading
- Ensure nonce is being acknowledged in the ID token response
- Ensure
email_verifiedis present as a claim in the ID token and user info response - Ensure cache control headers are set on the token endpoint
Technical
- Bump dependencies
- Update translations
Please let me know of any issues so as I can fix them as soon as possible.