This repository has been archived by the owner on Nov 19, 2024. It is now read-only.
2.1.1
This is a patch release that fixes a DPoP bug and updates our dependency on ASP.NET framework packages.
What's Changed
- update dependencies to latest patches by @brockallen in #78
Updated dependency on ASP.NET framework packages from version 8.0.0 to version 8.0.3. This updates our transitive dependency on the System.IdentityModel.Tokens.Jwt and Microsoft.IdentityModel.JsonWebTokens packages past versions that have a known Denial of Service vulnerability. - Fix handling of dpop nonce sent during token exchange by @josephdecock in #79
Fixes a bug where DPoP nonces provided by authorization servers were not processed correctly.
Full Changelog: 2.1.0...2.1.1