Skip to content

v1.0.3

Choose a tag to compare

View all tags
@mathsgod mathsgod released this 08 Oct 04:54
v1.0.3
2d37c85

Add opt-in RFC 7591 Dynamic Client Registration for public PKCE clients.

  • Enable with OAUTH_DCR_ENABLED=true through ProviderFactory, or dcrEnabled: true on Config.
  • Expose POST /oauth/register and advertise registration_endpoint in discovery.
  • Validate JSON metadata, callback URLs, exposed scopes and supported authorization-code/refresh grants.
  • Create public client records with server-generated IDs and return HTTP 201 without client secrets.
  • Preserve mandatory PKCE, user permission checks and consent. DCR and CIMD can be enabled together.
  • Include DCR documentation, request size limits and regression coverage. Registration rate limits and retention remain application/proxy responsibilities.

CIMD retains the strict DNS policy from v1.0.2. The intermediate DNS address-selection change was reverted and is not included in this release's behavior.

Validation: full suite passed before the DNS-policy revert (111 tests, 7 environment-dependent skips). After the revert, all 13 targeted CIMD/DCR tests passed with 148 assertions. PHP syntax and diff checks passed.

Assets 2
Loading