v2.1.0
2.1.0 (2026-06-20)
Features
- Token Exchange (RFC 8693): 完整实现
- Actor Token 解析与验证(delegation / impersonation 场景)
- Resource 参数支持(RFC 8707 resource indicators)
- ID Token 响应类型(
requested_token_type=urn:ietf:params:oauth:token-type:id_token) - 第三方令牌验证(
TokenExchangeExternalVerifierStorage可选接口) - subject_token_type / actor_token_type / requested_token_type 校验
- TokenExchangeRequest: 新增
GetActor()、GetSubjectTokenClaims()等 5 个 getter,存储可通过 type assertion 访问完整上下文
Refactors
- TokenExchangeStore: 移除未调用的
GetPrivateClaimsFromTokenExchangeRequest/SetUserinfoFromTokenExchangeRequest,接口精简为 2 方法
Full Changelog: v2.0.0...v2.1.0