v7.5.0

What's Changed

• build(deps-dev): bump tsd from 0.28.1 to 0.29.0 by @dependabot in #230
• perf: use node: prefix to bypass require.cache call for builtins by @Fdawgs in #231
• Improve out of the box types by using a prefix when decorating by @voxpelli in #224

Full Changelog: v7.4.0...v7.5.0

v7.4.0

What's Changed

• feat(chore): implement revoke token and revoke all token by @jorisdugue in #222
• Minor refactor: Use destructuring to extract option variables by @voxpelli in #227
• feat(chore): implement yandex configuration in preset by @artem-malko in #228
• Add default user-agent + enable custom one by @voxpelli in #226
• Test option compatibility with @types/simple-oauth2 by @voxpelli in #229

New Contributors

• @voxpelli made their first contribution in #227
• @artem-malko made their first contribution in #228

Full Changelog: v7.3.0...v7.4.0

v7.3.0

What's Changed

• build(deps): bump @fastify/cookie from 8.3.0 to 9.0.4 by @dependabot in #219
• feat(chore): update deps and implement gitlab provider by @jorisdugue in #220
• feat: allow default cookie options to be overridden by @stevesweets in #223

New Contributors

• @jorisdugue made their first contribution in #220
• @stevesweets made their first contribution in #223

Full Changelog: v7.2.2...v7.3.0

v7.2.2

What's Changed

• Clarify in the docs how to use this module with fastify-cookie by @mcollina in #214
• Fix generateAuthorizationUri() typedef signature by @knicola in #215

New Contributors

• @knicola made their first contribution in #215

Full Changelog: v7.2.1...v7.2.2

v7.2.1

What's Changed

• [211] fix generateStateFunction call when using custom start redirect handler with generateAuthorizationUri by @dmidz in #212

New Contributors

• @dmidz made their first contribution in #212

Full Changelog: v7.2.0...v7.2.1

v7.2.0

Full Changelog: v7.1.1...v7.2.0

⚠️ Security Release ⚠️

This release fixes CVE-2023-31999 GHSA-g8x5-p9qc-cf95.

v7.2.0 changes the default behavior to store the OAuth2 state in a cookie with the http-only and same-site=lax attributes set. The state is now by default generated for every user.

Note that this contains a breaking change in the checkStateFunction function, which now accepts the full Request object.

v7.1.1

What's Changed

• build(deps-dev): bump @types/node from 18.16.6 to 20.1.1 by @dependabot in #204
• docs: Update README.md with revised information by @rojandahal in #207
• fixes #198 - change bearer to Bearer to match spec by @dancastillo in #208

New Contributors

• @rojandahal made their first contribution in #207
• @dancastillo made their first contribution in #208

Full Changelog: v7.1.0...v7.1.1

v7.1.0

What's Changed

• Add note about node types by @ghostdevv in #199
• Fix description for Twitch auth by @mcollina in #201
• ci: only trigger on pushes to main branches by @Fdawgs in #203
• Adds "id_token" property to Token type definition by @giacomorebonato in #202

New Contributors

• @ghostdevv made their first contribution in #199
• @mcollina made their first contribution in #201
• @giacomorebonato made their first contribution in #202

Full Changelog: v7.0.1...v7.1.0

v7.0.1

• [Fix] type definition file (#196)
• docs: update Apple OAuth, recommend apple-signin-auth for new apple integrations (#189)
• docs: update on AccessToken object usage (#188)
• build(deps-dev): bump tsd from 0.27.0 to 0.28.0 (#195)
• build(deps-dev): bump tsd from 0.26.1 to 0.27.0 (#192)
• build(deps-dev): bump tsd from 0.25.0 to 0.26.0 (#191)
• build(deps-dev): bump tsd from 0.24.1 to 0.25.0 (#186)
• chore(.gitignore): add bun lockfile (#190
• chore(.gitignore): add clinic (#187)

v7.0.0

📚 PR:

• build(deps): bump simple-oauth2 from 4.3.0 to 5.0.0 (#182)
• make startRedirectPath optional (#184)
• Restructure + nodenext (#185)