Skip to content

Duende.IdentityModel.OidcClient 7.1.1

Latest
Latest

Choose a tag to compare

View all tags
@pgermishuys pgermishuys released this 16 Oct 13:41
imoc-7.1.1
ab00474
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

This patch release fixes pushed authorization requests (PAR) using a different client authentication method than the token endpoint.

  • PAR now uses OidcClientOptions.TokenClientCredentialStyle, the same setting the token endpoint uses. Before this release, PAR sent the client secret in the Authorization header, while the token endpoint sent it in the request body, which is the default. Providers that require one authentication method per client, such as Authelia, rejected this, and the only workaround was to turn PAR off. If you use a client secret with the default settings, PAR now sends it in the request body. #351 (fixes #349)
  • Update Microsoft.Extensions.Logging.Abstractions and System.Text.Json to 10.0.13, and raise the minimum System.IdentityModel.Tokens.Jwt version for Duende.IdentityModel.OidcClient.Extensions to 8.19.2. #376

This release still targets netstandard2.0, .NET 8, .NET 9 and .NET 10.

Assets 2
Loading