release 2.2.0

Features

• http: add support for HTTP retries (default 1) and HTTP retry interval (300 ms default)
• api: return HTTP status code from oauth2_token_verify
• add oauth2_ipc_thread_mutex_t and use it for Redis, cURL and global lists to improve performance across multiple processes running on the same host
• add Trixie packages

release 2.1.1

Bugfixes

• fix URL decoding of HTTP request query parameters; see OpenIDC/ngx_openidc_module#24; thanks @drzraf
• test: add a space after the status code in the HTTP responses; see curl/curl#16692 ; thanks @charles2910 and @bagder

Other

• support compilation against NGINX 1.26.3 by adding include paths for quic and http/v3
• add RHEL 10 packages

release 2.1.0

Features

• add updated AWS ALB JWKs retrieval supporting new "signer"/"region" logic and key rotation
  closes: OpenIDC/mod_oauth2#73; thanks @drwmrrs
• add support for introspection.token_param_name; closes #57
• add (optional compile-time) JQ support with caching in oauth2_jq_filter
• add json_payload_claim claim option to oauth2_cfg_target_pass_t

Bugfixes

• nginx: fix memory leak in _oauth2_nginx_ssl_cert_set

release 2.0.0

change LICENSE to Apache 2.0

Bugfixes

• correct error log upon mismatch in iss claim: id_token->JWT

Features

• allow to use local file through file:// protocol for metadata or jwks; see #51; thanks @pladen

release 1.6.3

Features

• nginx: add nginx_oauth2_set_require to be used with OAuth2Require etc.
  see OpenIDC/ngx_oauth2_module#7; thanks @smanolache and @pladen
• nginx: add NGINX macros/functions for setting claim variables in the request context
  see OpenIDC/ngx_oauth2_module#7; thanks @smanolache and @pladen

Bugfixes

• allow NGINX primitives in an if block within a location block in the http block

release 1.6.2

Bugfixes

• fix NGINX local port detection so it works with NGINX >= 1.27.0; closes #49; thanks @anpin

Other

• add PCRE2_CFLAGS to cache/server object linking

Packaging

• add Ubuntu Noble packages

release 1.6.1

Features

• add support for RFC 8705 OAuth 2.0 Mutual-TLS Certificate-Bound Access Tokens to the NGINX binding
• add support for Redis 6 ACL username based authentication; see: OpenIDC/mod_oauth2#63

release 1.6.0

Features

• add support for the OAuth 2.0 Client Credentials grant type
• use CURLOPT_REDIR_PROTOCOLS_STR when libcurl >= 7.55.0; thanks @babelouest

release 1.5.2

Features

• complete OAuth 2.0 Demonstrating Proof of Possession (DPoP) support following RFC 9449
• printout more cjose error details when errors occur verifying JWT access tokens

Other

• fix timing issue in check_openidc.c from test suite; closes #47

release 1.5.1

Edit: on May 11, 2023 the Debian/Ubuntu packages were updated from 1.5.1-1 to 1.5.1-2 because of packaging bug #46

Features

• add issuer validation for JWT access tokens when configured through OAuth2Verify metadata; closes #44; thanks @chris-crunchr
• add support for resolving provider metadata from a Discovery endpoint URL; see OpenIDC/ngx_openidc_module#18
• add error logs about missing or invalid "active" boolean claim in introspection response

Other

• move repo to OpenIDC Github organization