@cloudflare/workers-oauth-provider 0.7.2

v0.7.2

on Node.js NPM

Patch Changes

• #222 45397d8 Thanks @mattzcarey! - Add an opt-in allowPublicClients flag to enterpriseManagedAuthorization.

  By default the enterprise-managed authorization (ID-JAG) grant requires client authentication, so public clients (token_endpoint_auth_method: 'none') are rejected. Setting allowPublicClients: true also accepts public clients on this grant — for example clients registered via a Client ID Metadata Document (CIMD), which are always public and cannot present a client secret. The default remains false, preserving existing behavior.