Skip to content

8.4.0
Compare
Choose a tag to compare
@Sephster Sephster released this 15 Feb 16:09
· 304 commits to master since this release
8.4.0
539f434

Added

  • You can now set a leeway for time drift between servers when validating a JWT (PR #1304)

Security

  • Access token requests that contain a code_verifier but are not bound to a code_challenge will be rejected to prevent
    a PKCE downgrade attack (PR #1326)
Assets 2