v8.4.2

Fixes

• reject client JSON Web Key Set null value (#1237) (cce6d43)

v8.4.1

This release contains only code refactoring, dependency, or documentation updates.

v8.4.0

Features

• DPoP: remove experimental flag, DPoP is now RFC9449 (89d133e)

v8.3.2

Fixes

• assign extraTokenClaims return to the model (e296dc7)

v8.3.1

Fixes

• DPoP: compare htu scheme and hostname case independent (b72d668)

v8.3.0

Features

• allow specifying the user-agent header for outgoing requests (95f24ef)

v8.2.2

Fixes

• ignore non-existent resource scopes during refresh (#1222) (bdf23ba)

v8.2.1

Fixes

• ignore post_logout_redirect_uris when logout is disabled (#1221) (d7dd6cf)

v8.2.0

Features

• add correlation identifier to interactions (#1218) (c072352)

v8.1.2

This release contains only code refactoring, dependency, or documentation updates. The release process now also uses provenance statements.