v0.10.0

[0.10.0] - 2026-06-28

Breaking Changes

• Atex.OAuth refactor:
  • Atex.OAuth.get_key/0 removed - use Atex.Config.OAuth.get_key/0 directly
  • Atex.OAuth.create_client_metadata/1, create_client_assertion/3,
    create_authorization_url/5, validate_authorization_code/5,
    refresh_token/5, revoke_tokens/2 moved to Atex.OAuth.Flow
  • Atex.OAuth.create_dpop_token/4, send_oauth_dpop_request/3,
    request_protected_dpop_resource/5 moved to Atex.OAuth.DPoP
  • Atex.OAuth.get_authorization_server/2,
    get_authorization_server_metadata/2 moved to Atex.OAuth.Discovery
  • Error atom :invaild_issuer corrected to :invalid_issuer in
    Atex.OAuth.Discovery
• Atex.Config.OAuth.is_localhost/0 renamed to Atex.Config.OAuth.localhost?/0
• Atex.ServiceAuth.validate_jwt/2 now returns {:error, :invalid_jwt} on
  malformed input instead of raising

Added

• Atex.OAuth.session_keys_name/0 and
  Atex.OAuth.session_active_session_name/0 expose Plug session key atoms
• Atex.IdentityResolver now has full module and function documentation
• Atex.XRPC.LoginClient now has a @moduledoc
• Optional :telemetry instrumentation via Atex.Telemetry. Add {:telemetry, "~> 1.0"} to
  your deps to receive events from XRPC requests, identity resolution, OAuth flows, and service
  auth validation. See Atex.Telemetry for the full event catalogue.
• New :user_agent config key under config :atex. When set, all outgoing XRPC
  requests include a User-Agent header of "<user_agent> (atex/<version>)".
  Defaults to "atex/<version>". See Atex.Config.user_agent/0.

Fixed

• Fix raw_input not actually being set as the request's body in
  Atex.XRPC.post/3 when providing a struct as input.
• Atex.XRPC.LoginClient.handle_failure/3 now returns consistent 3-tuples
  {:error, response, client}
• Atex.OAuth.Cache metadata cache ttl_check_interval corrected to 5 minutes
  (was 30 seconds)
• Typo in Atex.OAuth.Error moduledoc corrected ("extesion" -> "exception")