@cloudflare/workers-auth@0.9.0

Minor Changes

• #15688 93ee76e Thanks @penalosa! - Request every grantable scope registered for the cf OAuth client on login

  The cf OAuth flow now requests all 468 scopes that are both accepted for its production client and grantable by the consent service, allowing cf commands to call the corresponding APIs. Six client-registered scopes without consent mappings remain excluded so browser and device login do not fail during authorization.

Patch Changes

• #15662 59267fc Thanks @oddharsh! - Update smol-toml to 1.8.0

  This updates the bundled TOML parser that reads wrangler.toml to a version that addresses two advisories against 1.5.2: GHSA-7w5x-hrqm-74c2 (a value followed by a comment with no trailing newline, such as a=[1 #, put the parser in an infinite loop) and GHSA-v3rj-xjv7-4jmq (thousands of consecutive comment lines overflowed the stack). On the old version, wrangler deploy against a wrangler.toml ending in a=[1 # never returned; it now fails with Invalid TOML document: cannot find end of structure.

• Updated dependencies [59267fc]:

  • @cloudflare/workers-utils@0.41.1