Skip to content

Latest commit

 

History

History
40 lines (30 loc) · 1.46 KB

CHANGELOG.md

File metadata and controls

40 lines (30 loc) · 1.46 KB

bedrock-basic-authz-server ChangeLog

1.4.0 - 2025-03-31

Added

  • Allow oauth2 clients to be configured for use with a specific audience, i.e., allow this module to provide an oauth2 authz server for namespaced HTTP routes. If an application serves /<namespaceA>/<namespaceB>/etc routes, then clients can be configured to specifically only work with particular namespaces or sub-namespaces. When audience is not set on a client, it will only work with routes that are not namespaced in this way, i.e., non-namespaced and namespaced clients will not be able to access each others' resources.

1.3.0 - 2025-03-31

Changed

  • Deprecate requestableScopes; replaced with allowedScopes.

1.2.0 - 2025-03-30

Added

  • Add getClient({clientId}) optional function to be passed to addOAuth2AuthzServer({... getClient}) to provide an alternative client lookup mechanism. The returned client must have the same properties expressed in this module's config where oauth2 clients may be optionally specified. If desired, the provided getClient() function may optionally internally retrieve configured oauth2 clients (if present and in whichever order of precedence the application decides) by calling getOAuth2ClientFromConfig().

1.1.0 - 2025-01-27

Changed

  • Use secretHash instead of passwordHash (now deprecated but still available for use) in oauth2 client configuration.

1.0.0 - 2025-01-26

  • See git history for changes.