@cloudflare/workers-oauth-provider 0.10.1

v0.10.1

on Node.js NPM

Patch Changes

• #287 30b1f4f Thanks @mattzcarey! - Preserve Basic and POST authentication interoperability for legacy and defaulted confidential clients while enforcing explicitly selected methods.

• #285 737dfa2 Thanks @mattzcarey! - Negotiate Client ID Metadata Document grant and response types with the authorization server's supported capabilities instead of rejecting documents that advertise additional values.

• #288 7a6baf9 Thanks @mattzcarey! - Restore v0.8.2-compatible resource handling for grants without a stored RFC 8707 resource. Configured canonical resources are defaulted and inherited, bound grants reject explicit mismatches, and an unconfigured legacy grant can issue an unbound token or use an explicit token-request resource without persisting a new grant binding.

  Deprecate resourceMatchOriginOnly without changing its behavior.