v0.1.0

Initial release.

First release of the Ueberauth strategy for Authify, with feature parity to the Ruby omniauth-authify gem:

• Organization-scoped configuration (strategy option organization + OAuth config site/client_id/client_secret, with {:system, "VAR"} tuple support)
• PKCE (S256) for the authorization code exchange, enabled by default
• Per-login nonce bound to the ID token's nonce claim
• RS256 ID token verification against the organization's JWKS endpoint, with a key-set refetch when the token's kid is missing (rotated keys)
• ID token claim validation: iss, sub, aud, exp, iat, nonce and auth_time (when max_age was requested), with configurable leeway
• Auth hash built from the verified ID token claims, with a userinfo fallback when verification is disabled
• Forwarding of prompt and max_age request parameters

Package: https://hex.pm/packages/ueberauth_authify/0.1.0
Docs: https://ueberauth-authify.hexdocs.pm/0.1.0