v3.45.5

3.45.5 (2026-03-02)

Bug Fixes

• add auth_methods client_secret_basic for refresh token and revok… (#803) (811e8b2)

v3.45.4

3.45.4 (2026-02-09)

Bug Fixes

• grant type in device code validation error message (#845) (c238329)

v3.45.3

3.45.3 (2026-01-12)

Bug Fixes

• tracing: renamed tracer in op (#809) (d105faf), closes #808

v3.45.2

3.45.2 (2026-01-12)

Bug Fixes

• consistently handle string-valued boolean fields from non-compliant OIDC providers (#791) (b4dca67), closes #139

v4.0.0-next.1

4.0.0-next.1 (2026-01-07)

• fix!: allow expires to be an integer wrapped in a string value (#821) (0ad2480), closes #821

BREAKING CHANGES

• The expires_in field has changed from type int64 to
  oidc.Duration for various token response payloads.

fixes #815

Definition of Ready

• I am happy with the code
• Short description of the feature/issue is added in the pr
  description
• PR is linked to the corresponding user story
• Acceptance criteria are met
• All open todos and follow ups are defined in a new ticket and
  justified
• Deviations from the acceptance criteria and design are agreed with
  the PO and documented.
• No debug or dead code
• My code has no repetitions
• Critical parts are tested automatically
• Where possible E2E tests are implemented
• Documentation/examples are up-to-date
• All non-functional requirements are met
• Functionality of the acceptance criteria is checked manually on
  the dev system.

v3.45.1

3.45.1 (2025-12-03)

Bug Fixes

• rp: don't ignore JWKS parsing errors (#771) (a3f3428), closes #541

v3.45.0

3.45.0 (2025-09-29)

Features

• rp: add WithPKCEFromDisocvery (#776) (e3169b6), closes #506 #506

v3.44.0

3.44.0 (2025-08-05)

Features

• allow setting op.Crypto during provider setup (#778) (3edc81e)

v3.43.1

3.43.1 (2025-08-04)

Bug Fixes

• add redirect_uri decoded (#775) (1fb34f3)

v3.43.0

3.43.0 (2025-07-31)

Features

• rp: optional authorized party check (#752) (0d50c93)