Release v1.4.0

Added

• Ante can publish what a consumer needs to verify its invitation tokens: issuer metadata at /.well-known/ante/invitation-token and the trusted signing keys as a JSON Web Key Set at /.well-known/ante/jwks.json. Set Ante:Invitations:Token:PublicBaseUrl to the public HTTPS address Ante is served at to turn both on; without it they answer 404. The metadata names the issuer, audience, key set address and the RS256 algorithm, and the key set lists the current, additional and previous keys with public fields only. See Configuration. (#117)

Changed

• Ante refuses to start when an invitation token signing key is shorter than 2048 bits, in any of the current, additional or previous key settings. Replace a shorter key before upgrading. (#117)