v1.5.0

feat: drop granted scopes the client lost on refresh when unknown sco…

v1.4.3

fix: store the refreshed ID token's jti with the rotated refresh token

v1.4.2

fix: keep nonce and resource in the stored device request (#3)

v1.4.1

fix!: stamp a fresh iat on every JWT access token

v1.4.0

chore(deps): update all dependencies

v1.3.0

docs: add `FORK_CHANGELOG.md`

v1.2.0

feat: add RFC 9068 JWTStrategy

v1.1.0

feat: add OAuth Client ID Metadata Document support (#1)

* feat: add OAuth Client ID Metadata Document support

Implement the protocol-level building blocks for OAuth Client ID Metadata Documents.
See https://datatracker.ietf.org/doc/draft-ietf-oauth-client-id-metadata-document
for the draft specification.

* move more logic from pocket id into fosite

* hardening based on claude's feedack

---------

Co-authored-by: Elias Schneider <login@eliasschneider.com>

v1.0.0

feat: support unsigned request objects for all clients