6.9.0

Bug fixes

• Removed calls to overridable methods in constructors (#1549).
• Modified AuthenticationProtocolMessage to use CSP 'unsafe-eval' compliant default value for _script (#1565).
• SecurityTokenNoExpirationException 'IDX10225' is now thrown if a token is missing an 'nbf' or 'exp' claim (#1582).

Enhancements and features

• Made the 'x5c' property available on the JwtHeader (#1543).
• Added ClaimTypeMapping for 'name' claim (#1545).
• Added a net472 desktop target (#1552).
• Added 'phone_number' and 'phone_number_verified' standard claims to JwtRegisteredClaimNames (#1559).
• Added RSACng support for encryption / decryption (#1579).
• Added an EventBasedLRUCache for use by InMemoryCryptoProviderCache on the .NET desktop targets (#1605). See here for more details.