Version 0.3.0
- Changed
SecretReader, no ID param needed - Added
AudienceReaderinjected to both middleware and token services - Ensure aud matching if
AudienceReaderdefined - Added token validation for everything excluding expiration
- Removed potentially dangerous pre-parse step to get aud from the token
- Optional randomizer to prevent multiple refreshes #10
- Added dev server cancelation