v0.1.1
Turn on noUnusedLocals/noUnusedParameters
Release 0.1.1
Put a deadline on every outbound call
Discovery, JWKS, the token exchange and the callback all went out through a
bare fetch with no timeout and no signal. A provider that accepts the
connection and then never answers held the request open for as long as the
socket lived, and an identity provider is the one dependency an application
cannot route around.
One helper, used by all nine call sites, with the ten seconds the LDAP client
already waited so the package has one answer rather than two. A caller's own
signal still cancels: the deadline is added to it, not substituted for it.
Changes since v0.1.0.