v5.5
Full Changelog: v5.4.3...v5.5-rc2
- #141 - NPE during device code flow
- #149 - VO table asserts last_modified timestamp is a BigInt but tried to process it as a timestamp
- #150 - Client configuration improvements for CLC
- #151 - Update client management web page
- #152 - Default Refresh Token lifetime not being read from server config
- #153 - Get issuer from well-known page in command line client
- #154 - Add query facility for client management servlet
- #155 - Do not send original scopes as refresh/exchange scopes unless they are explicitly sent in the request
- #156 - Unused client cleanup deleting in-use clients
- #157 - Client should not check if an ID token was returned for pure OAuth clients on refresh
- #158 - Audit user id token claims in restrictive cases
- #161 - Improve test suite with introspection
- #163 - CLI remove client should remove the permissions
- #164 - RFC 7636 support for RFC 8628
- #165 - Template resolution for access token scopes should use originally returned scopes if none specified
- #166 - Refresh endpoint must check for required refresh token
- #167 - Track last login for clients
- #168 - approval_ts in client approval store not accurate
- #169 - Remove old client management tests
- #170 - Update testing harness to use in-memory and file store from Derby
- #171 - Retool unit tests for clients
- #174 - Cannot remove unmanaged clients in the CLI
- #176 - CM RT lifetime policy on create and update.
- #177 - CM assumes every admin client is in a VO.
- #178 - CM should assert expires_in for token exchange.
- #184 - NPE getting ersatz chain.