v5.7.0

• [#1696] Add missing #issued_token method to OAuth::TokenResponse
• [#1697] Allow a TokenResponse body to be customized (memoize response body).
• [#1702] Fix bugs for error response in the form_post and error view
• [#1660] Custom access token attributes are now considered when finding matching tokens (fixes #1665). Introduce revoke_previous_client_credentials_token configuration option.

v5.6.9

• [#1691] Make new Doorkeeper errors backward compatible with older extensions.

v5.6.8

• [#1680] Fix handle_auth_errors :raise NotImplementedError

v5.6.7

• [#1662] Specify uri_redirect validation class explicitly.
• [#1652] Add custom attributes support to token generator.
• [#1667] Pass client instead of grant.application to find_or_create_access_token.
• [#1673] Honor custom_access_token_attributes in client credentials grant flow.
• [#1676] Improve AuthorizationsController error response handling
• [#1677] Fix URIHelper.valid_for_authorization? breaking for non url URIs.

v5.6.6

• [#1644] Update HTTP headers.
• [#1646] Block public clients automatic authorization skip.
• [#1648] Add custom token attributes to Refresh Token Request.
• [#1649] Fixed custom_access_token_attributes related errors.

v5.6.5

• [#1602] Allow custom data to be stored inside access grants/tokens.
• [#1634] Code refactoring for custom token attributes.
• [#1639] Add grant type validation to avoid Internal Server Error for DELETE /oauth/authorize endpoint.

v5.6.4

• [#1633] Apply ORM configuration in #to_prepare block to avoid autoloading errors.

v5.6.3

• [#1622] Drop support for Rubies 2.5 and 2.6
• [#1605] Fix URI validation for Ruby 3.2+.
• [#1625] Exclude endless access tokens from StaleRecordsCleaner.
• [#1626] Remove deprecated active_record_options config option.
• [#1631] Fix regression with redirect behavior after token lookup optimizations (redirect to app URI when found).
• [#1630] Special case unique index creation for refresh_token on SQL Server.
• [#1627] Lazy evaluate Doorkeeper config when loading files and executing initializers.

v5.6.2

• [#1604] Fix fetching of the application when custom application_class defined.

v5.6.1

• [#1593] Add support for Trilogy ActiveRecord adapter.
• [#1597] Add optional support to use the url path for the native authorization code flow. Ports forward [#1143] from 4.4.3
• [#1599] Remove unnecessarily re-fetch of application object when creating an access token.