v3.7.0

What's Changed

• io/ioutil deprecated by @testwill in #380
• oidc: use %w verb for wrapping errors by @rliebz in #381
• vulnerability: bump dependencies [CVE-2023-44487] by @joshua-auchincloss in #393

New Contributors

• @testwill made their first contribution in #380
• @rliebz made their first contribution in #381
• @joshua-auchincloss made their first contribution in #393

Full Changelog: v3.6.0...v3.7.0

v3.6.0

What's Changed

• oidc: restrict use of context.Background() by @ericchiang in #364
• *: gofmt all and update dependencies by @ericchiang in #369
• oidc: add UserInfoEndpoint returning the discocvered URL by @raggi in #375
• Add EdDSA algorithm support by @lritter14 in #378

New Contributors

• @raggi made their first contribution in #375
• @lritter14 made their first contribution in #378

Full Changelog: v3.5.0...v3.6.0

v3.5.0

What's Changed

• *: update go-jose package to latest by @ericchiang in #360
• Bump golang.org/x dependencies by @skitt in #361

New Contributors

• @skitt made their first contribution in #361

Full Changelog: v3.4.0...v3.5.0

v3.4.0

What's Changed

• oidc: add Config.InsecureSkipSignatureCheck by @ericchiang in #351

Full Changelog: v3.3.0...v3.4.0

v3.3.0

What's Changed

• feat: export token expired error by @crenshaw-dev in #342
• oidc: don't parse JWT twice by @ericchiang in #347
• update go deps to more recent versions by @ericchiang in #348

New Contributors

• @crenshaw-dev made their first contribution in #342

Full Changelog: v3.2.0...v3.3.0

v3.2.0

What's Changed

• Increase nbf-leeway to 5 minutes by @cgostuff in #316
• oidc: support creating a provider directly without discovery by @ericchiang in #333
• Remove obsolete documentation by @mitar in #336
• oidc: add StaticKeySet by @ericchiang in #337

Full Changelog: v3.1.0...v3.2.0

v3.1.0

Merge pull request #315 from ericchiang/issuer

oidc: add option to override discovered issuer URL

v3.0.0

Changes from v2:

• Remove Cache-Control checks from key rotation strategy #259
• NewRemoteKeySet now returns a concrete type #262
• NewProvider context and Verifier context are now separate #260
• go.mod file added #247
• Import path updated from github.com/coreos/go-oidc to github.com/coreos/go-oidc/v3/oidc #247

v3.0.0-alpha.1

Merge pull request #247 from ericchiang/mod

*: add a go.mod file and migrate to v3 package

v2.2.1

• go.mod reverted #231