v0.3.0
Changes
Breaking
- Removed
issuerUrloption — resource URL (RFC 9728resourcefield) is now dynamically derived from request host, Express mount path, andmcpRoute
Changed
WWW-Authenticatemetadata URL now constructed per RFC 9728 Section 3
Added
- New
protocolHeaderoption to read protocol from a custom header (e.g.X-Forwarded-Proto) - New
hostHeaderoption to read host from a custom header (e.g.X-Forwarded-Host) - New
resolveBaseUrlhelper exported for framework-agnostic usage
See CHANGELOG.md for full details.