View Source Changelog
v0.2.9 (2023-11-22)
- Fixed bug where
Reqwas not used by default if included in project Assent.Strategy.Httpc.request/5now sets content length header
v0.2.8 (2023-11-19)
Req will be used by default if available in your project, otherwise :httpc will be used.
ReqHTTP adapter addedReqsupported by default as HTTP client- Global application config support for HTTP and JWT adapters
- More expressive errors now including the whole HTTP response where applicable
- Deprecated
:siteconfig in favor of:base_urlconfig
v0.2.7 (2023-09-12)
Assent.Strategy.Stravaadded
v0.2.6 (2023-08-26)
- Added
Assent.HTTPAdapter.Finch - Deprecated
Assent.HTTPAdapter.Mint
v0.2.5 (2023-08-21)
Assent.Strategy.Spotifyadded
v0.2.4 (2023-08-20)
- Fixed bug in
Assent.JWTAdapter.AssentJWTwhereverified?could be a{:error, term()}tuple rather than boolean - Improved message on private key file load error
v0.2.3 (2023-03-23)
- Removed
:castoreversion requirement Assent.Strategy.Httpc.request/5raises error when SSL certificate can't be validated
v0.2.2 (2023-02-27)
- Fixed bug to handle 201 success response
Assent.Strategy.OIDCnow has support for multiple audiencesAssent.Strategy.OIDCnow permits any auth method if notoken_endpoint_auth_methods_supportedspecifiedAssent.Strategy.Linkedinadded
v0.2.1 (2022-09-15)
- Default to using
Jasoninstead ofPoisonfor JSON parsing - Fixed
Bitwisewarning when running on Elixir 1.14
v0.2.0 (2022-03-01)
This release consists of breaking changes.
In previous Assent.Strategy.Slack strategy, the sub user id field consisted of {SUB}-{TEAM}. Slack has migrated to OpenID Connect, and the response has been conformed to OIDC. The sub will now only consists of the sub id, and not include team id. To succesfullly migrate to this release all slack identity records storing the sub user id field has to be updated.
If you wish to continue using the previous sub user id a custom OIDC strategy can be used instead:
defmodule Slack do
use Assent.Strategy.OIDC.Base
alias Assent.Strategy.Slack
defdelegate default_config(config), to: Slack
def normalize(config, user) do
user = Map.put(user, "sub", "#{user["https://slack.com/user_id"]}-#{user["https://slack.com/team_id"]}")
Slack.normalize(config, user)
end
endAssent.Strategy.OIDC.fetch_user/2now removes the ID token specific keys from the user claims instead of normalizingAssent.Strategy.OIDC.Basenow addsnormalize/2to the macro that will include the full user claims in the user paramsAssent.Strategy.Slacknow uses OpenID connect instead of legacy OAuth 2.0, please note that thesubvalue may have changed
v0.1.28 (2021-09-30)
Assent.Strategy.OIDCbug fixed so it handles unreachable urls correctly
v0.1.27 (2021-08-21)
Assent.Strategy.OIDCbug fixed fornormalize/2macro callback
v0.1.26 (2021-05-27)
Assent.constant_time_compare/2no longer outputs a deprecation warning for OTP 24
v0.1.25 (2021-04-09)
Assent.Strategy.Applehas been fixed to handle the JSON encoded user in callback params
v0.1.24 (2021-03-22)
Assent.Strategy.OIDC.Base.authorize_url/2now has correct type specs
v0.1.23 (2021-03-01)
Updated to support OTP 24 and no longer support OTP < 22.1
Assent.Strategy.OIDCnow handles missingid_tokenin token params
v0.1.22 (2021-01-08)
Assent.Strategy.OAuth2.fetch_user/4now accepts headers in argumentsAssent.Strategy.AzureADbug fixed so it now uses theRS256alg
v0.1.21 (2020-12-29)
Assent.Strategy.OAuthnow handles missing params in callback phaseAssent.Strategy.Twitternow handles access denied callback
v0.1.20 (2020-12-10)
Assent.Strategy.StripeaddedAssent.Strategy.to_url/3now handles nested query paramsAssent.Strategy.OAuth2no longer removes padding for base64 encoding authorization headerAssent.Strategy.OIDC.validate_id_token/2now supports dynamic OpenID configurationAssent.Strategy.OIDC.fetch_userinfo/2now supports dynamic OpenID configuration
v0.1.19 (2020-11-25)
- Updated docs to detail
:inetscompilation Assent.OAuth2.authorize_url/1now returns the state, if defined, fromauthorization_params
v0.1.18 (2020-11-08)
- Removed
oautherdependency
v0.1.17 (2020-11-05)
- Relax
mintrequirement
v0.1.16 (2020-10-21)
Warning: This release has breaking changes.
All get_user/2 functions has been renamed to fetch_user/2 as they return {:ok, res}/{:error, res} tuples.
Assent.OAuth.get/4removed in favor ofAssent.OAuth.request/6Assent.OAuth2.get_access_token/3renamed toAssent.OAuth2.grant_access_token/3Assent.OAuth2.get/4removed in favor ofAssent.OAuth2.request/6
v0.1.15 (2020-10-18)
Assent.Strategy.OIDC.validate_id_token/2has a bug fixed wherealgwas not validated correctlyAssent.Strategy.OIDCnow has an:id_token_signed_response_algconfiguration optionAssent.Strategy.LINEadded
v0.1.14 (2020-10-11)
Assent.Strategy.OAuth2.get_access_token/3addedAssent.Strategy.OAuth2.refresh_access_token/3addedAssent.Strategy.OAuth2.authorization_headers/2is no long a public functionAssent.Strategy.Appleupdated to handlenamescope
v0.1.13 (2020-07-14)
v0.1.12 (2020-05-24)
Assent.Strategy.OAuth2.authorization_headers/2now capitalizes the token type in the authorization headerAssent.Strategy.OIDC.callback/2now calls the strategyget_user/2method before any ID token validationAssent.Strategy.OIDC.validate_id_token/2addedAssent.Strategy.OIDC.fetch_userinfo/2addedAssent.Strategy.OIDCno longer fetches the userinfo by default instead using the claims in the ID Token
v0.1.11 (2020-05-16)
Assent.Strategy.OAuth2.callback/2now requires:session_paramsto be set in the configAssent.Strategy.OIDC.callback/2now requires:session_paramsto be set in the configAssent.Strategy.OAuth2now uses constant time comparison for stateAssent.Strategy.OIDCnow uses constant time comparison for nonceAssent.Strategy.Httpc.request/5bug fixed for certificates that has wildcard domain with SAN extensionAssent.Strategy.Mint.request/5bug fixed for certificates that has wildcard domain with SAN extension
v0.1.10 (2020-04-23)
Now requires Mint 1.0.0 or higher.
Assent.Strategy.Instagramnow accepts:user_url_request_fieldsconfig option and passesfieldsparams to the/mepoint
v0.1.9 (2020-04-23)
Now requires Elixir 1.7 or higher.
Assent.Strategy.Instagramnow uses the Instagram Graph APIAssent.Strategy.OIDCbug fixed when no:session_paramsset in config
v0.1.8 (2020-02-15)
Assent.Strategy.Githubnow providesemail_verifiedvalueAssent.Strategy.Gitlabnow providesemail_verifiedvalueAssent.Strategy.Googlefixed to provide correctemail_verifiedvalueAssent.Strategy.Twitternow providesemail_verifiedvalue
v0.1.7 (2020-02-10)
- Fix
Assent.HTTPAdapter.Mintwhere:unknownresponses where not handled correctly
v0.1.6 (2020-01-30)
Assent.Strategy.AzureADnow uses auth code flow instead of hybrid flow
v0.1.5 (2020-01-13)
- Removed unused
:resourceparam inAssent.Strategy.AzureAD - Added "email profile" to scope in
Assent.Strategy.AzureAD - Use
response_mode=form_postforAssent.Strategy.AzureAD - Updated
Assent.Strategy.OAuth2to handle access token request correctly when:auth_methodisnilper RFC specs - Changed
Assent.Strategy.Appleto use OIDC strategy and verify the JWT - Changed
Assent.Strategy.OIDCto update token with the expanded JWT as theid_token - Fixed bug in
Assent.HTTPAdapter.Mintwith query params not being included in request
v0.1.4 (2019-11-09)
- Support mint up to
v1.0.x - Fixed bug in
Assent.JWTAdapter.JOSEwherenilsecret value raised an exception - Fixed bug in
Assent.JWTAdapter.AssentJWTwhere ECDSA algorithms didn't generate or verify valid signatures
v0.1.3 (2019-10-27)
- Fixed bug in
Assent.Strategy.Githubwhere multiple emails for account resulted in the verified primary e-mail not being returned
v0.1.2 (2019-10-08)
- Require
:redirect_uriis set in the config ofAssent.Strategy.OAuth2.callback/3instead of asredirect_uriin the params
v0.1.1 (2019-10-07)
- Relax mint requirement
- Fix bug in
Assent.HTTPAdapter.Mintwhere HTTP/2 responses wasn't parsed correctly
v0.1.0 (2019-10-06)
- Initial release