Skip to content

2.1.0

Compare
Choose a tag to compare
@domenic domenic released this 10 Mar 03:11
· 28 commits to master since this release

Fixed various error responses to be more accurate to spec, per RFC 6570 §3.1:

  • Invalid requests should be 400 Bad Request errors, not 401 Unauthorized.
  • When sending the WWW-Authenticate header in response to invalid requests or invalid tokens, the appropriate error code and description can be included in that header.