Summary
This release contains styling fixes, support for x-www-form-urlencoded
bodies without explicitly-defined request properties, and non-material security fixes from upstream modules.
In order to take advantage of the new X-Requested-With
header in OAuth2 token requests, cross-origin APIs (which require CORS configuration) needs to send Access-Control-Allow-Headers: X-Requested-With
as part of the OPTIONS response for your token endpoint. A CORS library will handle this for you - visit https://enable-cors.org for more guidance.
Changelog
- improvement: better operation path + summary overflow styling (via #5184)
- improvement: set
X-Requested-With
to prevent browser authentication dialog (via #4934) - fix: provide JSON editor for x-www-form-urlencoded bodies lacking properties (via #5180)
- housekeeping: bump minimum lodash version (via #5156)