Sha256: 1db0d0070dfce9a751677c415d5a7c1682ca802a48b31ad422f2407711f161d6
Contents?: true
Size: 518 Bytes
Versions: 14
Compression:
Stored size: 518 Bytes
Contents
### 0.10.4 (18/09/2022) #### Bugfixes * refresh token lookups are now scoped by application. This bug meant that lookups of refresh token via the refresh token grant were not scoped by the application identified by the `/token` request credentials, so grant hijacking could happen in theory, if attackers knew of existing refresh tokens. The same issue was observed (and fixed) for token revocation (this time involving the access token). * Fix for a case which made resource indicators unusable under Rack 3.0 .
Version data entries
14 entries across 14 versions & 1 rubygems