Skip to content

v0.7.2

Choose a tag to compare

@github-actions github-actions released this 04 Jun 08:22
· 10 commits to main since this release
e25cc8b

Patch Changes

  • #222 45397d8 Thanks @mattzcarey! - Add an opt-in allowPublicClients flag to enterpriseManagedAuthorization.

    By default the enterprise-managed authorization (ID-JAG) grant requires client authentication, so public clients (token_endpoint_auth_method: 'none') are rejected. Setting allowPublicClients: true also accepts public clients on this grant — for example clients registered via a Client ID Metadata Document (CIMD), which are always public and cannot present a client secret. The default remains false, preserving existing behavior.