- Switch to crypton (#60)
- bump the text bound #59 (#59)
- Lookup by state with sessionStoreGet (#57)
- Remove max version cap on bytestring and min >= 0.11 (#54)
- Preserve the raw JWT in the tokens record returned by
validate
(#43)
- s/JwtExceptoin/JwtException/ (#45)
- import data.monoid (#46)
- s/Incosistent/Inconsistent/ (#49)
- Use lenient decoding (#50)
- Add implicit id_token flow. See #34.
- discover: Append well-known part to parsed request. See #33.
- Fix unsupported algorithm error. See #36.
- Added a validation of 'nonce' parameter. See #24.
- Made optional claims available. See #24.
- The lifecycles of 'nonce' and 'state' can also be managed by
SessionStore
. See #24.
- Made
TokenResponse
parsing strict. See #23. - A signing algorithm is now obtained from OpenID Provider Metadata. See #24.
- 'profile' scope added to 'examples/scotty', and name / email / picture shown. See #25.
- 'expires_in' can now parsed both String and Decimal number. See #15.
- Improved error messages. See #15.
- Changed
Configuration
fileds. See #11.
- Fixed Hackage tarball. See #13.
- Refactored modules, exports, types, and functions.
- Adjusted dependency version.
First public release.