omniauth-himari/v0.4.0

Enhancements

• Validate the Authorization Server Issuer Identification iss parameter (RFC 9207) on the authorization response, defending against mix-up attacks; controlled by the new verify_iss option (default enabled)

himari/v0.7.0

Enhancements

• Authorization Server Issuer Identification (RFC 9207): the authorization endpoint now returns the iss parameter in all authorization responses (success and redirected errors), and discovery metadata advertises authorization_response_iss_parameter_supported

omniauth-himari/v0.3.0

Enhancements

• Add scope option (default openid) to request scopes from Himari #14

Full Changelog: https://github.com/sorah/himari/commits/omniauth-himari/v0.3.0

himari/v0.6.0

Enhancements

• Refresh token (refresh_token grant) support #14
• Dynamic client registration (RFC 7591), Client ID Metadata Documents, an RFC 8414 oauth-authorization-server metadata endpoint, and Himari-owned redirect_uri matching with loopback-port relaxation and Regexp entries #15
• Interactive consent page gated by the client skip_consent attribute #16
• Per-client scopes allow-list #17
• Persist granted scopes on the grant and expose them to authorization rules as context.scopes #19
• Opt-in RFC 9068 (at+jwt) JWT access tokens #20
• Configurable scopes_supported/claims_supported and advertise refresh_token/offline_access in discovery metadata #21

Full Changelog: https://github.com/sorah/himari/commits/himari/v0.6.0

himari-aws/v0.3.0

Enhancements

• Lambda image: copy the prebuilt image with skopeo instead of docker (gains an architecture input), with Terraform AWS provider v6 compatibility and a role_name output #18
• DynamoDB storage: compare-and-swap writes backing refresh-token rotation #14
• Lambda image: bundle omniauth-entra-id and omniauth-okta, depend explicitly on aws-sdk-ssm and aws-sdk-secretsmanager, and make rack-cors available.

Changes

• Lambda image: Ruby 4.0, build on dnf, and rolled dependencies (including apigatewayv2_rack 0.5.0).

Full Changelog: https://github.com/sorah/himari/commits/himari-aws/v0.3.0