v3.11.0

What's Changed

• oidc: verify support for algs from discovery by @ericchiang in #430
• chore(deps): bump dependencies to address security issues by @clambin in #432
• oidc: ignore cancellation of remote key set context by @ericchiang in #433

New Contributors

• @clambin made their first contribution in #432

Full Changelog: v3.10.0...v3.11.0

v3.10.0

What's Changed

• fix minor typo by @bgerrity in #414
• updated github actions by @ericchiang in #419
• add staticcheck to github actions by @ericchiang in #420
• update go-jose to v4 by @ericchiang in #421

New Contributors

• @bgerrity made their first contribution in #414

Full Changelog: v3.9.0...v3.10.0

v3.9.0

What's Changed

• build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 by @dependabot in #399

New Contributors

• @dependabot made their first contribution in #399

Full Changelog: v3.8.0...v3.9.0

v3.8.0

What's Changed

• support provider device_authorization_endpoint by @cbodonnell in #365

New Contributors

• @cbodonnell made their first contribution in #365

Full Changelog: v3.7.0...v3.8.0

v3.7.0

What's Changed

• io/ioutil deprecated by @testwill in #380
• oidc: use %w verb for wrapping errors by @rliebz in #381
• vulnerability: bump dependencies [CVE-2023-44487] by @joshua-auchincloss in #393

New Contributors

• @testwill made their first contribution in #380
• @rliebz made their first contribution in #381
• @joshua-auchincloss made their first contribution in #393

Full Changelog: v3.6.0...v3.7.0

v3.6.0

What's Changed

• oidc: restrict use of context.Background() by @ericchiang in #364
• *: gofmt all and update dependencies by @ericchiang in #369
• oidc: add UserInfoEndpoint returning the discocvered URL by @raggi in #375
• Add EdDSA algorithm support by @lritter14 in #378

New Contributors

• @raggi made their first contribution in #375
• @lritter14 made their first contribution in #378

Full Changelog: v3.5.0...v3.6.0

v3.5.0

What's Changed

• *: update go-jose package to latest by @ericchiang in #360
• Bump golang.org/x dependencies by @skitt in #361

New Contributors

• @skitt made their first contribution in #361

Full Changelog: v3.4.0...v3.5.0

v3.4.0

What's Changed

• oidc: add Config.InsecureSkipSignatureCheck by @ericchiang in #351

Full Changelog: v3.3.0...v3.4.0

v3.3.0

What's Changed

• feat: export token expired error by @crenshaw-dev in #342
• oidc: don't parse JWT twice by @ericchiang in #347
• update go deps to more recent versions by @ericchiang in #348

New Contributors

• @crenshaw-dev made their first contribution in #342

Full Changelog: v3.2.0...v3.3.0

v3.2.0

What's Changed

• Increase nbf-leeway to 5 minutes by @cgostuff in #316
• oidc: support creating a provider directly without discovery by @ericchiang in #333
• Remove obsolete documentation by @mitar in #336
• oidc: add StaticKeySet by @ericchiang in #337

Full Changelog: v3.1.0...v3.2.0