Sha256: 6f3a9742887c2ef711ac6c1582a906e9fdf3762a0d77ebf94a0e66f27a48948e
Contents?: true
Size: 779 Bytes
Versions: 11
Compression:
Stored size: 779 Bytes
Contents
### 0.5.0 (08/02/2021) #### RP-Initiated Logout The `:oidc` plugin can now do [RP-Initiated Logout](https://gitlab.com/os85/rodauth-oauth/-/wikis/RP-Initiated-Logout). It's disabled by default, so read the docs to learn how to enable it. #### Security The `:oauth_jwt` (and by association, `:oidc`) plugin(s) verifies the claims of used JWT tokens. This is a **very important security fix**, as without it, there is no protection against replay attacks and other types of misuse of the JWT token. A new auth method, `generate_jti(claims)`, was [added to the list of oauth_jwt plugin options](https://gitlab.com/os85/rodauth-oauth/-/wikis/JWT-Access-Tokens#rodauth-options). By default, it'll hash the `aud` and `iat` claims together, but you can overwrite how this is done.
Version data entries
11 entries across 11 versions & 1 rubygems