release 1.5.1

zandbelt released this 17 Nov 17:23

· 340 commits to master since this release

d4ae56a

Bugfixes

fix return of access_token when renew_access_token_on_expiry = false ; see #121
restore backwards compatible behavior of accepting non-supported signatures on id_token's received on a backchannel call to the token endpoint in an OIDC flow

Features

added support for verifying HMAC signatures on ID tokens (was supported for JWT access tokens only); see #122

Assets 2