v1.4.0

What's Changed

• Improvement: Abstract cors configuration away from the user, and just allow them to turn it on or off. by @bennovakovic in #43

New Contributors

• @bennovakovic made their first contribution in #43

Full Changelog: v1.3.1...v1.4.0

v1.3.1

What's Changed

• Bump @babel/traverse from 7.18.2 to 7.23.2 by @dependabot in #41
• Bump browserify-sign from 4.2.1 to 4.2.2 by @dependabot in #45
• Bump crypto-js from 4.1.1 to 4.2.0 by @dependabot in #44

Full Changelog: v1.3.0...v1.3.1

Add refresh access token method

New method added to get a new token from a refresh token

What's Changed

• Bump decode-uri-component from 0.2.0 to 0.2.2 by @dependabot in #29
• Bump json5 from 2.2.1 to 2.2.3 by @dependabot in #31
• Build browserified & minified version by @WietseWind in #26
• Bump word-wrap from 1.2.3 to 1.2.4 by @dependabot in #34
• Bump tough-cookie from 4.0.0 to 4.1.3 by @dependabot in #33
• Improvement: Add ability to refresh an access token by @TheBerg in #39

New Contributors

• @TheBerg made their first contribution in #39

Full Changelog: v1.2.1...v1.3.0

Fix broken build

Updated typescript to next major release to fix broken build

Introduce storage options

New feature to allow choosing a storage type.
This release also includes the typescript definition files in the distribution.

Allow using custom state

Fix issue where state mismatch error appears when using custom state

Add declaration file

Make sure .d.ts file is in npm package

Security updates

Update vulnerable dependencies

Feature: Optional Additional Parameters

This release adds functionality to pass additional parameters to the authorizeUrl and exchangeForAccessToken methods.

Updates to comply with RFC

https://tools.ietf.org/html/rfc6749#section-4.1.3
Updates headers on Access Token Request