5.2.1

As part of this release we had 3 issues closed.

bugs

• #256 Add missing GetAllSchemeNames to the IIdentityProviderStore
• #243 relax constraint on handler type when configuring the external provider

internal

• #254 minor cleanup for dynamic providers

5.2

As part of this release we had 15 issues closed.

bugs

• #235 delay filesystem access until needed for automatic key management
• #220 Always allow explicit error responses from authorize request
• #200 move consent message store loading to after request validation
• #194 use SetClient rather than setting Client property directly in end session validator

enhancements

• #209 Allow full host name to be included in OidcReturnUrlParser's IsValidReturnUrl
• #197 add support for user tenant check in authorize interaction response generator against acr tenant value
• #193 Prefer explicitly registered signing keys over automatic key management keys
• #192 Open up DefaultCache for derived implementations
• #188 Support for dynamic OIDC authentication schemes

internals

• #236 log issuers and client ids when license validation fails
• #223 Allow identity providers table to store additional data
• #167 Set license defaults for business and enterprise ISV editions

5.2 Preview 2

As part of this release we had 14 issues closed.

bugs

• #220 Always allow explicit error responses from authorize request
• #200 move consent message store loading to after request validation
• #194 use SetClient rather than setting Client property directly in end session validator

enhancements

• #209 Allow full host name to be included in OidcReturnUrlParser's IsValidReturnUrl
• #197 add support for user tenant check in authorize interaction response generator against acr tenant value
• #193 Prefer explicitly registered signing keys over automatic key management keys
• #192 Open up DefaultCache for derived implementations
• #188 Support for dynamic OIDC authentication schemes
• #164 Open up DefaultCache for derived implementations

internals

• #223 Allow identity providers table to store additional data
• #167 Set license defaults for business and enterprise ISV editions

5.2.0 Preview 1

As part of this release we had 12 issues closed.

bugs

• #200 move consent message store loading to after request validation
• #194 use SetClient rather than setting Client property directly in end session validator

enhancements

• #209 Allow full host name to be included in OidcReturnUrlParser's IsValidReturnUrl
• #197 add support for user tenant check in authorize interaction response generator against acr tenant value
• #193 Prefer explicitly registered signing keys over automatic key management keys
• #192 Open up DefaultCache for derived implementations
• #188 Support for dynamic OIDC authentication schemes
• #164 Open up DefaultCache for derived implementations

internal

• #167 Set license defaults for business and enterprise ISV editions

5.1.1

As part of this release we had 1 issue closed.

bug

• #201 move consent message store loading to after request validation

5.1

As part of this release we had 8 issues closed.

bugs

• #142 Fix GetAuthorizationContextAsync to return multiple query values from returnUrl
• #140 Fix CustomRedirectResult to use IAuthorizationParametersMessageStore if registered

enhancements

• #159 HtmlEncode iframe URLs in EndSessionCallbackResult
• #143 Add ISV flag and update license key validation
• #136 optimize URLs for JWT request/request URI scenarios
• #135 Preserve user session when same user re-authenticating
• #95 add ApiResources to consent screen
• #84 add feature to cleanup consumed tokens

5.0.5

As part of this release we had 2 issues closed.

enhancements

• #127 Preserve request objects based on request objects URI
• #118 Replace JwtSecurityTokenHandler with JsonWebTokenHandler
  • this introduces a small breaking change. The RequestObjectValues collection on ValidatedAuthorizeRequest and AuthorizeContext is now a List<Claim>

5.0.4

As part of this release we had 1 issue closed.

bug

• #107 Bug fix for custom redirects from IAuthorizeInteractionResponseGenerator

5.0.3

As part of this release we had 1 issue closed.

enhancement

• #99 Emit supported signing algorithms for request objects

5.0.2

As part of this release we had 2 issues closed.

bug

• #98 Remove nonce requirement when no id_token requested from authorize endpoint