v1.16.0

New Feature

• Node 20 support

v1.15.0

New features

• Add Node 18 support

v1.14.0

browser and node

New features

• The Session exposes an events attribute implementing EventEmitter, with
  type hints to guide which events are supported. It allows to register a callback
  listening on events using session.events.on, but also to unregister a callback
  using session.events.off, or to register a one-off callback using session.events.once.
  This attribute intends at replacing exising Session methods to listen on events,
  namely onLogin, onLogout, onError, onSessionRestore, onSessionExpiration,
  onNewRefreshToken.

Deprecation notice

The following have been deprecated, and will be removed in future major releases.

• The Session class will no longer extend EventEmitter. Instead, it will expose
  an events attribute implementing EventEmitter. We do not recommand to use
  either a Session instance or its events attribute as an arbitrary events emitter,
  and encourage users to only use the supported events and documented API.
• Session methods onLogin, onLogout, onError, onSessionRestore,
  onSessionExpiration, onNewRefreshToken are deprecated in favor of session.events.on
  called with the appropriate event name.

node

Bugfixes

• The session expiration date was incorrectly computed in the authorization code flow.

v1.13.4

browser

Bugfix

• v1.13.3 introduced a bug in the silent reload flow, resulting in a "Mismatching
  redirect URL" error when refreshing a page with an app logged in. This regression
  went unnoticed because of a misconfiguration of the browser-based test app that
  should have covered this scenario. Both issues are now resolved.

node

Bugfix

• The Session expiration date was not set in all contexts: session.info.expirationDate
  wasn't set properly using Client Credentials.

v1.13.3

browser

Bugfixes

• No longer remove the last issuer URL path component if it doesn't have a trailing
  slash: a bug was introduced in baac030, resulting
  in the issuer configuration discovery failing if the issuer URL had a path that
  did not end with a trailing slash. This is now fixed.

v1.13.2

node

Bugfix

• The Client Credential flow had a bug where the expiration time set by the OpenID
  Provider for the token was ignored, and an arbitrary default was applied instead.
  This resulted in the session being unable to make authenticated requests, but
  still acting as if it were logged in. The session now uses the expiration time
  set by the OpenID Provider.

v1.13.1

Node and browser

Bugfix

• The redirect URL provided to the login function was being normalized, which could result in misalignments with the redirect URLs declared in a Client Identifier document, since the latter wasn't being normalized. The normalization step has now been removed, and the redirect provided by the user is sent to the OpenID Provider unchanged.
• Some dependencies updates

v1.13.0

What's changed

New feature

• Added support for RFC 9207

Bugfixes

• Clean up iss parameter from redirect URL after redirect

1.12.4

Dependency updates including security patches.

v1.12.3

Minor dependency updates.

What's Changed

• chore(deps): bump @types/node from 18.6.2 to 18.6.3 by @dependabot in #2262
• chore(deps-dev): bump @playwright/test from 1.24.1 to 1.24.2 by @dependabot in #2264
• chore(deps-dev): bump eslint-plugin-jest from 26.6.0 to 26.7.0 by @dependabot in #2265
• chore(deps-dev): bump typedoc from 0.23.9 to 0.23.10 by @dependabot in #2263
• ci: remove publish-website workflow by @ThisIsMissEm in #2269
• Chore: remove cd packaging by @ThisIsMissEm in #2268
• chore(deps-dev): bump @typescript-eslint/parser from 5.31.0 to 5.32.0 by @dependabot in #2266
• chore(deps): bump actions/upload-artifact from 2.3.1 to 3.1.0 by @dependabot in #2270
• chore(deps-dev): bump @typescript-eslint/eslint-plugin from 5.31.0 to 5.32.0 by @dependabot in #2267
• chore(deps): bump @types/node from 18.6.3 to 18.6.4 by @dependabot in #2271
• chore(deps-dev): bump eslint-plugin-jest from 26.7.0 to 26.8.0 by @dependabot in #2272
• chore(deps-dev): bump rollup from 2.77.2 to 2.77.3 by @dependabot in #2278
• chore(deps): bump @types/node from 18.6.4 to 18.7.1 by @dependabot in #2280
• chore(deps-dev): bump @typescript-eslint/eslint-plugin from 5.32.0 to 5.33.0 by @dependabot in #2276
• chore(deps-dev): bump @typescript-eslint/parser from 5.32.0 to 5.33.0 by @dependabot in #2274
• chore(deps-dev): bump @playwright/test from 1.24.2 to 1.25.0 by @dependabot in #2279
• chore(deps-dev): bump eslint-plugin-jest from 26.8.0 to 26.8.2 by @dependabot in #2273
• chore(deps): bump lerna from 5.3.0 to 5.4.0 by @dependabot in #2277
• chore(deps): bump @types/node from 18.7.1 to 18.7.2 by @dependabot in #2281
• chore(deps-dev): bump rollup-plugin-typescript2 from 0.31.2 to 0.33.0 by @dependabot in #2294
• chore(deps-dev): bump rollup from 2.77.3 to 2.79.0 by @dependabot in #2310
• chore(deps): bump jose from 4.8.3 to 4.9.2 by @dependabot in #2312
• chore(deps): bump pydata-sphinx-theme from 0.9.0 to 0.10.1 in /packages/browser/docs/api by @dependabot in #2308
• chore(deps-dev): bump @inrupt/solid-client from 1.23.1 to 1.23.3 by @dependabot in #2314
• chore(deps-dev): bump @typescript-eslint/eslint-plugin from 5.33.0 to 5.36.2 by @dependabot in #2316
• chore(deps): bump lerna from 5.4.0 to 5.5.0 by @dependabot in #2313
• chore(deps): bump @types/node from 18.7.2 to 18.7.15 by @dependabot in #2315
• chore(deps-dev): bump @typescript-eslint/parser from 5.33.0 to 5.36.2 by @dependabot in #2317
• chore(deps): bump openid-client from 5.1.8 to 5.1.9 by @dependabot in #2321
• chore(deps-dev): bump @playwright/test from 1.25.0 to 1.25.2 by @dependabot in #2323
• chore(deps-dev): bump typedoc from 0.23.10 to 0.23.14 by @dependabot in #2320
• chore(deps): bump uuid from 8.3.2 to 9.0.0 by @dependabot in #2318
• chore(deps-dev): bump typescript from 4.7.4 to 4.8.2 by @dependabot in #2319
• chore(deps): bump @types/node from 18.7.15 to 18.7.16 by @dependabot in #2325
• chore(deps-dev): bump typescript from 4.8.2 to 4.8.3 by @dependabot in #2326
• chore(deps): bump lerna from 5.5.0 to 5.5.1 by @dependabot in #2327
• Override vulnerable git-url-parse version by @NSeydoux in #2340
• chore(deps): bump jose from 4.9.2 to 4.9.3 by @dependabot in #2335
• chore(deps): bump @types/express from 4.17.13 to 4.17.14 in /packages/browser/examples/single/script by @dependabot in #2334
• chore(deps-dev): bump rollup-plugin-typescript2 from 0.33.0 to 0.34.0 by @dependabot in #2329
• chore(deps): bump jose from 4.6.0 to 4.9.3 in /e2e/browser by @dependabot in #2336
• chore(deps-dev): bump ts-loader from 9.3.1 to 9.4.0 by @dependabot in #2338
• chore(deps): bump @types/node from 18.7.16 to 18.7.18 by @dependabot in #2333
• chore(deps-dev): bump typedoc from 0.23.14 to 0.23.15 by @dependabot in #2339
• chore(deps-dev): bump @typescript-eslint/parser from 5.36.2 to 5.38.0 by @dependabot in #2341
• chore(deps): bump jose from 4.8.1 to 4.9.3 in /.codesandbox/sandbox by @dependabot in #2337
• chore(deps-dev): bump @typescript-eslint/eslint-plugin from 5.36.2 to 5.38.0 by @dependabot in #2342
• chore(deps-dev): bump ts-loader from 9.4.0 to 9.4.1 by @dependabot in #2343
• chore(deps-dev): bump @playwright/test from 1.25.2 to 1.26.0 by @dependabot in #2345
• chore(deps): bump lerna from 5.5.1 to 5.5.2 by @dependabot in #2344
• Update bootstrapped app to static registration by @NSeydoux in #2346
• chore(deps-dev): bump rollup from 2.79.0 to 2.79.1 by @dependabot in #2347
• chore(deps-dev): bump @typescript-eslint/eslint-plugin from 5.38.0 to 5.38.1 by @dependabot in #2350
• chore(deps): bump @types/node from 18.7.18 to 18.7.23 by @dependabot in #2352
• chore(deps-dev): bump @typescript-eslint/parser from 5.38.0 to 5.38.1 by @dependabot in #2351
• chore(deps-dev): bump @playwright/test from 1.26.0 to 1.26.1 by @dependabot in #2356
• chore(deps): bump jose from 4.9.3 to 4.10.0 by @dependabot in #2354
• chore(deps): bump openid-client from 5.1.9 to 5.1.10 by @dependabot in #2353
• chore(deps-dev): bump typescript from 4.8.3 to 4.8.4 by @dependabot in #2355
• chore(deps): bump lerna from 5.5.2 to 5.5.4 by @dependabot in #2357
• chore(deps): bump SonarSource/sonarcloud-github-action from 1.6 to 1.7 by @dependabot in #2359
• chore(deps): bump @types/node from 18.7.23 to 18.8.0 by @dependabot in #2358
• chore(deps-dev): bump @typescript-eslint/parser from 5.38.1 to 5.39.0 by @dependabot in #2364
• chore(deps): bump @types/node from 18.8.0 to 18.8.1 by @dependabot in #2360
• chore(deps-dev): bump rollup-plugin-typescript2 from 0.34.0 to 0.34.1 by @dependabot in #2363
• chore(deps-dev): bump @typescript-eslint/eslint-plugin from 5.38.1 to 5.39.0 by @dependabot in #2362
• chore(deps): bump @types/node from 18.8.1 to 18.8.2 by @dependabot in #2366
• chore(deps): bump @types/node from 18.8.2 to 18.8.3 by @dependabot in #2370
• chore(deps): bump pydata-sphinx-theme from 0.10.1 to 0.11.0 in /packages/browser/docs/api by @dependabot in #2369
• chore(deps): bump lerna from 5.5.4 to 5.6.1 by @dependabot in #2368
• chore(deps): bump express from 4.18.1 to 4.18.2 in /packages/browser/examples/single/script by @dependabot in #2373
• chore(deps-dev): bump @playwright/test from 1.26.1 to 1.27.0 by @dependabot in #2371
• chore(deps):...