CHANGELOG.md

@atproto/oauth-types

0.7.5

Patch Changes

• #5197 a0c49d9 Thanks @matthieusieben! - Rewrite import statements to be compatible with TypeScript's verbatimModuleSyntax config.

• Updated dependencies [a0c49d9]:

  • @atproto/jwk@0.7.4
  • @atproto/did@0.5.4

0.7.4

Patch Changes

• #5099 b43ec31 Thanks @matthieusieben! - Update TypeScript build to rely on references to composite internal projects

• #5099 b43ec31 Thanks @matthieusieben! - Bundle only necessary files in the NPM tarball, including the CHANGELOG.md and README.md files (if present).

• #5099 b43ec31 Thanks @matthieusieben! - Build with noImplicitAny enabled

• Updated dependencies [b43ec31, b43ec31, b43ec31]:

  • @atproto/jwk@0.7.3
  • @atproto/did@0.5.3

0.7.3

Patch Changes

• #5151 a51c45d Thanks @matthieusieben! - Update dependencies

• Updated dependencies [a51c45d]:

  • @atproto/did@0.5.2
  • @atproto/jwk@0.7.2

0.7.2

Patch Changes

• #4967 9fc720c Thanks @matthieusieben! - Use TypeScript 7 to build package

• Updated dependencies [9fc720c]:

  • @atproto/jwk@0.7.1
  • @atproto/did@0.5.1

0.7.1

Patch Changes

• Updated dependencies [622d365]:
  • @atproto/did@0.5.0

0.7.0

Minor Changes

• #4929 f01c59f Thanks @devinivy! - BREAKING: Drop support for Node.js 18 and 20. Node.js 22 is now the minimum supported version. Docker images now use Node.js 24.

• #4943 c459153 Thanks @devinivy! - BREAKING: Convert to pure ESM. All packages now ship "type": "module" with ES module output and Node16 module resolution.

  Node.js 22's require() compatibility layer can still load these packages in CommonJS code.

• #4930 908bece Thanks @devinivy! - Build with TypeScript 6.0.

Patch Changes

• Updated dependencies [f01c59f, c459153, 908bece]:
  • @atproto/did@0.4.0
  • @atproto/jwk@0.7.0

0.6.3

Patch Changes

• #4620 fdbbff8 Thanks @matthieusieben! - Ensure that OAuthAuthorizationRequestQuery always contains a client_id

• #4620 fdbbff8 Thanks @matthieusieben! - Update oauthRequestUriSchema to require min length

0.6.2

Patch Changes

• Updated dependencies [d54d707, d54d707]:
  • @atproto/did@0.3.0

0.6.1

Patch Changes

• Updated dependencies [2f78893]:
  • @atproto/did@0.2.4

0.6.0

Minor Changes

• #4461 5d8e7a6 Thanks @ThisIsMissEm! - Add prompt_values_supported to Authorization Server Metadata

Patch Changes

• #4465 95ef3c2 Thanks @matthieusieben! - Improve error message in case of invalid redirect uri

0.5.2

Patch Changes

• Updated dependencies [8012627, d396de0]:
  • @atproto/did@0.2.3

0.5.1

Patch Changes

• Updated dependencies [261968fd6]:
  • @atproto/did@0.2.2

0.5.0

Minor Changes

• #4289 8ff5ec4ca Thanks @matthieusieben! - Remove exported oauthHttpsRedirectURISchema and oauthPrivateUseRedirectURISchema in favor of oauthRedirectUriSchema and oauthLoopbackClientRedirectUriSchema, which provide semantically meaningful groupings of redirect URIs based on OAuth client types.

  oauthHttpsRedirectURISchema can still be accessed using httpsUriSchema. oauthPrivateUseRedirectURISchema can still be accessed using privateUseUriSchema.

• #4289 8ff5ec4ca Thanks @matthieusieben! - Remove unused isLoopbackUrl utility

Patch Changes

• #4289 8ff5ec4ca Thanks @matthieusieben! - Enforce stronger validation of privateUseUriSchema

0.4.2

Patch Changes

• #4216 09439d7d6 Thanks @matthieusieben! - Expose new utilities to build and work with atproto loopback client metadata

• #4216 09439d7d6 Thanks @matthieusieben! - Improve validation of AtprotoOAuthScope

• #4216 09439d7d6 Thanks @matthieusieben! - Add AtprotoOAuthTokenResponse schema

• Updated dependencies [f560cf226, fefe70126, f560cf226, f560cf226, f560cf226, 09439d7d6]:

  • @atproto/jwk@0.6.0
  • @atproto/did@0.2.1

0.4.1

Patch Changes

• Updated dependencies [8a88e2c15, 8a88e2c15]:
  • @atproto/jwk@0.5.0

0.4.0

Minor Changes

• #3973 3a1e010e1 Thanks @matthieusieben! - Rename OidcAuthenticationErrorResponse to OidcAuthorizationResponseError

• #3973 3a1e010e1 Thanks @matthieusieben! - Rename OAuthAuthenticationErrorResponse to OAuthAuthorizationResponseError

0.3.1

Patch Changes

• Updated dependencies [90b4775fc, 90b4775fc, 90b4775fc]:
  • @atproto/jwk@0.4.0

0.3.0

Minor Changes

• #3847 349b59175 Thanks @matthieusieben! - Change the default client authentication method in the client document metadata to "client_secret_basic" (as per spec)

Patch Changes

• #3847 349b59175 Thanks @matthieusieben! - Remove invalid default for code_challenge_method authorization request parameter

• #3847 349b59175 Thanks @matthieusieben! - Remove schema's .optional() modifier when a .default() is defined

• #3847 349b59175 Thanks @matthieusieben! - Prevent using none as token_endpoint_auth_signing_alg_values_supported in authorization server metadata documents.

• Updated dependencies [349b59175]:

  • @atproto/jwk@0.3.0

0.2.8

Patch Changes

• #3919 a3b24ca77 Thanks @matthieusieben! - Parse JSON encoded Authorization Request Parameters

• Updated dependencies [3fa2ee3b6]:

  • @atproto/jwk@0.2.0

0.2.7

Patch Changes

• #3797 a48b093f0 Thanks @matthieusieben! - Add OidcUserinfo type

0.2.6

Patch Changes

• #3764 30f9b6690 Thanks @matthieusieben! - Add definition for ConventionalOAuthClientId

• #3764 30f9b6690 Thanks @matthieusieben! - Remove hard coded client_name from loopback client metadata

0.2.5

Patch Changes

• #3659 371e04aad Thanks @matthieusieben! - Add OAuthAuthenticationErrorResponse

• Updated dependencies [26a077716]:

  • @atproto/jwk@0.1.5

0.2.4

Patch Changes

• #2945 850e39843 Thanks @matthieusieben! - Properly support locales with 3 chars (Asturian)

• Updated dependencies [850e39843]:

  • @atproto/jwk@0.1.4

0.2.3

Patch Changes

• #3220 61dc0d60e Thanks @matthieusieben! - Apply new linting rules regarding import order

• #3220 61dc0d60e Thanks @matthieusieben! - Support environments not providing URL.canParse

• Updated dependencies [61dc0d60e]:

  • @atproto/jwk@0.1.3

0.2.2

Patch Changes

• Updated dependencies [2889c7699, 2889c7699, 2889c7699, 2889c7699]:
  • @atproto/jwk@0.1.2

0.2.1

Patch Changes

• #3066 5ddd51235 Thanks @matthieusieben! - Add oauthClientIdLoopbackSchema and oauthClientIdDiscoverableSchema schemas

• #3066 5ddd51235 Thanks @matthieusieben! - Enforce use of http and https url where applicable

• #3066 5ddd51235 Thanks @matthieusieben! - Strong validation or redirect_uri

0.2.0

Minor Changes

• #2874 7f26b1765 Thanks @matthieusieben! - Allow oauthIssuerIdentifier to be an "http:" url. Make sure to manually check for "http:" issuers if you don't allow them.

• #2874 7f26b1765 Thanks @matthieusieben! - Remove ALLOW_UNSECURE_ORIGINS constant

• #2871 9d40ccbb6 Thanks @matthieusieben! - Remove invalid issuer property from OAuthTokenResponse

Patch Changes

• #2871 9d40ccbb6 Thanks @matthieusieben! - Add missing "wap" display request parameter value

• #2871 9d40ccbb6 Thanks @matthieusieben! - Remove invalid client_id property from oauthRefreshTokenGrantTokenRequestSchema

• #2874 7f26b1765 Thanks @matthieusieben! - Improve typing of oauthIssuerIdentifierSchema

0.1.5

Patch Changes

• #2755 ed325d863 Thanks @matthieusieben! - Properly validate client metadata scope

• #2755 ed325d863 Thanks @matthieusieben! - Allow ClientID query params to end with a slash "/" char

• #2755 ed325d863 Thanks @matthieusieben! - Expose OAuthScope

• #2755 ed325d863 Thanks @matthieusieben! - add assertion utils for client ids

• #2755 ed325d863 Thanks @matthieusieben! - Allow loopback client ids to omit the (empty) path parameter

• #2755 ed325d863 Thanks @matthieusieben! - Enforce ClientID URL path to be normalized

• #2755 ed325d863 Thanks @matthieusieben! - Rename OAuthAuthenticationRequestParameters to OAuthAuthorizationRequestParameters

• #2755 ed325d863 Thanks @matthieusieben! - Restrict the value used as code_challenge_methods_supported

• #2755 ed325d863 Thanks @matthieusieben! - Add missing "expires_in" property to OAuthParResponse type definition

• #2755 ed325d863 Thanks @matthieusieben! - Allow loopback clients to define their scopes through the "scope" client_id query parameter.

• #2755 ed325d863 Thanks @matthieusieben! - Improve error description in case of invalid loopback client_id

0.1.4

Patch Changes

• #2734 dee817b6e Thanks @matthieusieben! - Validate scopes characters according to OAuth 2.1 spec

• #2734 dee817b6e Thanks @matthieusieben! - Re-use code definition of oauthResponseTypeSchema

• #2734 dee817b6e Thanks @matthieusieben! - Remove non-standard "sub" from OAuthTokenResponse

0.1.3

Patch Changes

• #2729 35a126429 Thanks @matthieusieben! - Avoid code duplication in the definition of OAuthEndpointName

0.1.2

Patch Changes

• #2483 b934b396b Thanks @matthieusieben! - Better implement aptroto OAuth spec

0.1.1

Patch Changes

• #2633 acc9093d2 Thanks @matthieusieben! - Add client_id_metadata_document_supported in metadata

• Updated dependencies [acc9093d2]:

  • @atproto/jwk@0.1.1

0.1.0

Minor Changes

• #2482 a8d6c1123 Thanks @matthieusieben! - Add OAuth provider capability & support for DPoP signed tokens

Patch Changes

• Updated dependencies [a8d6c1123]:
  • @atproto/jwk@0.1.0