v1.13.2

node

Bugfix

• The Client Credential flow had a bug where the expiration time set by the OpenID
  Provider for the token was ignored, and an arbitrary default was applied instead.
  This resulted in the session being unable to make authenticated requests, but
  still acting as if it were logged in. The session now uses the expiration time
  set by the OpenID Provider.

v1.13.1

Node and browser

Bugfix

• The redirect URL provided to the login function was being normalized, which could result in misalignments with the redirect URLs declared in a Client Identifier document, since the latter wasn't being normalized. The normalization step has now been removed, and the redirect provided by the user is sent to the OpenID Provider unchanged.
• Some dependencies updates

v1.13.0

What's changed

New feature

• Added support for RFC 9207

Bugfixes

• Clean up iss parameter from redirect URL after redirect

1.12.4

Dependency updates including security patches.

v1.12.3

Minor dependency updates.

What's Changed

• chore(deps): bump @types/node from 18.6.2 to 18.6.3 by @dependabot in #2262
• chore(deps-dev): bump @playwright/test from 1.24.1 to 1.24.2 by @dependabot in #2264
• chore(deps-dev): bump eslint-plugin-jest from 26.6.0 to 26.7.0 by @dependabot in #2265
• chore(deps-dev): bump typedoc from 0.23.9 to 0.23.10 by @dependabot in #2263
• ci: remove publish-website workflow by @ThisIsMissEm in #2269
• Chore: remove cd packaging by @ThisIsMissEm in #2268
• chore(deps-dev): bump @typescript-eslint/parser from 5.31.0 to 5.32.0 by @dependabot in #2266
• chore(deps): bump actions/upload-artifact from 2.3.1 to 3.1.0 by @dependabot in #2270
• chore(deps-dev): bump @typescript-eslint/eslint-plugin from 5.31.0 to 5.32.0 by @dependabot in #2267
• chore(deps): bump @types/node from 18.6.3 to 18.6.4 by @dependabot in #2271
• chore(deps-dev): bump eslint-plugin-jest from 26.7.0 to 26.8.0 by @dependabot in #2272
• chore(deps-dev): bump rollup from 2.77.2 to 2.77.3 by @dependabot in #2278
• chore(deps): bump @types/node from 18.6.4 to 18.7.1 by @dependabot in #2280
• chore(deps-dev): bump @typescript-eslint/eslint-plugin from 5.32.0 to 5.33.0 by @dependabot in #2276
• chore(deps-dev): bump @typescript-eslint/parser from 5.32.0 to 5.33.0 by @dependabot in #2274
• chore(deps-dev): bump @playwright/test from 1.24.2 to 1.25.0 by @dependabot in #2279
• chore(deps-dev): bump eslint-plugin-jest from 26.8.0 to 26.8.2 by @dependabot in #2273
• chore(deps): bump lerna from 5.3.0 to 5.4.0 by @dependabot in #2277
• chore(deps): bump @types/node from 18.7.1 to 18.7.2 by @dependabot in #2281
• chore(deps-dev): bump rollup-plugin-typescript2 from 0.31.2 to 0.33.0 by @dependabot in #2294
• chore(deps-dev): bump rollup from 2.77.3 to 2.79.0 by @dependabot in #2310
• chore(deps): bump jose from 4.8.3 to 4.9.2 by @dependabot in #2312
• chore(deps): bump pydata-sphinx-theme from 0.9.0 to 0.10.1 in /packages/browser/docs/api by @dependabot in #2308
• chore(deps-dev): bump @inrupt/solid-client from 1.23.1 to 1.23.3 by @dependabot in #2314
• chore(deps-dev): bump @typescript-eslint/eslint-plugin from 5.33.0 to 5.36.2 by @dependabot in #2316
• chore(deps): bump lerna from 5.4.0 to 5.5.0 by @dependabot in #2313
• chore(deps): bump @types/node from 18.7.2 to 18.7.15 by @dependabot in #2315
• chore(deps-dev): bump @typescript-eslint/parser from 5.33.0 to 5.36.2 by @dependabot in #2317
• chore(deps): bump openid-client from 5.1.8 to 5.1.9 by @dependabot in #2321
• chore(deps-dev): bump @playwright/test from 1.25.0 to 1.25.2 by @dependabot in #2323
• chore(deps-dev): bump typedoc from 0.23.10 to 0.23.14 by @dependabot in #2320
• chore(deps): bump uuid from 8.3.2 to 9.0.0 by @dependabot in #2318
• chore(deps-dev): bump typescript from 4.7.4 to 4.8.2 by @dependabot in #2319
• chore(deps): bump @types/node from 18.7.15 to 18.7.16 by @dependabot in #2325
• chore(deps-dev): bump typescript from 4.8.2 to 4.8.3 by @dependabot in #2326
• chore(deps): bump lerna from 5.5.0 to 5.5.1 by @dependabot in #2327
• Override vulnerable git-url-parse version by @NSeydoux in #2340
• chore(deps): bump jose from 4.9.2 to 4.9.3 by @dependabot in #2335
• chore(deps): bump @types/express from 4.17.13 to 4.17.14 in /packages/browser/examples/single/script by @dependabot in #2334
• chore(deps-dev): bump rollup-plugin-typescript2 from 0.33.0 to 0.34.0 by @dependabot in #2329
• chore(deps): bump jose from 4.6.0 to 4.9.3 in /e2e/browser by @dependabot in #2336
• chore(deps-dev): bump ts-loader from 9.3.1 to 9.4.0 by @dependabot in #2338
• chore(deps): bump @types/node from 18.7.16 to 18.7.18 by @dependabot in #2333
• chore(deps-dev): bump typedoc from 0.23.14 to 0.23.15 by @dependabot in #2339
• chore(deps-dev): bump @typescript-eslint/parser from 5.36.2 to 5.38.0 by @dependabot in #2341
• chore(deps): bump jose from 4.8.1 to 4.9.3 in /.codesandbox/sandbox by @dependabot in #2337
• chore(deps-dev): bump @typescript-eslint/eslint-plugin from 5.36.2 to 5.38.0 by @dependabot in #2342
• chore(deps-dev): bump ts-loader from 9.4.0 to 9.4.1 by @dependabot in #2343
• chore(deps-dev): bump @playwright/test from 1.25.2 to 1.26.0 by @dependabot in #2345
• chore(deps): bump lerna from 5.5.1 to 5.5.2 by @dependabot in #2344
• Update bootstrapped app to static registration by @NSeydoux in #2346
• chore(deps-dev): bump rollup from 2.79.0 to 2.79.1 by @dependabot in #2347
• chore(deps-dev): bump @typescript-eslint/eslint-plugin from 5.38.0 to 5.38.1 by @dependabot in #2350
• chore(deps): bump @types/node from 18.7.18 to 18.7.23 by @dependabot in #2352
• chore(deps-dev): bump @typescript-eslint/parser from 5.38.0 to 5.38.1 by @dependabot in #2351
• chore(deps-dev): bump @playwright/test from 1.26.0 to 1.26.1 by @dependabot in #2356
• chore(deps): bump jose from 4.9.3 to 4.10.0 by @dependabot in #2354
• chore(deps): bump openid-client from 5.1.9 to 5.1.10 by @dependabot in #2353
• chore(deps-dev): bump typescript from 4.8.3 to 4.8.4 by @dependabot in #2355
• chore(deps): bump lerna from 5.5.2 to 5.5.4 by @dependabot in #2357
• chore(deps): bump SonarSource/sonarcloud-github-action from 1.6 to 1.7 by @dependabot in #2359
• chore(deps): bump @types/node from 18.7.23 to 18.8.0 by @dependabot in #2358
• chore(deps-dev): bump @typescript-eslint/parser from 5.38.1 to 5.39.0 by @dependabot in #2364
• chore(deps): bump @types/node from 18.8.0 to 18.8.1 by @dependabot in #2360
• chore(deps-dev): bump rollup-plugin-typescript2 from 0.34.0 to 0.34.1 by @dependabot in #2363
• chore(deps-dev): bump @typescript-eslint/eslint-plugin from 5.38.1 to 5.39.0 by @dependabot in #2362
• chore(deps): bump @types/node from 18.8.1 to 18.8.2 by @dependabot in #2366
• chore(deps): bump @types/node from 18.8.2 to 18.8.3 by @dependabot in #2370
• chore(deps): bump pydata-sphinx-theme from 0.10.1 to 0.11.0 in /packages/browser/docs/api by @dependabot in #2369
• chore(deps): bump lerna from 5.5.4 to 5.6.1 by @dependabot in #2368
• chore(deps): bump express from 4.18.1 to 4.18.2 in /packages/browser/examples/single/script by @dependabot in #2373
• chore(deps-dev): bump @playwright/test from 1.26.1 to 1.27.0 by @dependabot in #2371
• chore(deps):...

v1.12.2

The supported NodeJS engines are now explicitly described in the package.json. A number of dependency updates is also included in the release.

What's Changed

• Prevent Sonar from running on dependabot PRs by @NSeydoux in #2193
• chore(deps-dev): bump ts-node from 10.7.0 to 10.8.2 in /packages/browser/examples/single/script by @dependabot in #2199
• chore(deps-dev): bump ts-loader from 9.2.8 to 9.3.1 by @dependabot in #2190
• chore(deps-dev): bump @typescript-eslint/parser from 5.26.0 to 5.30.4 by @dependabot in #2201
• chore(deps-dev): bump eslint-plugin-jest from 26.1.5 to 26.5.3 by @dependabot in #2191
• chore(deps): bump jose from 4.8.1 to 4.8.3 by @dependabot in #2204
• chore(deps): bump pydata-sphinx-theme from 0.8.1 to 0.9.0 in /packages/browser/docs/api by @dependabot in #2179
• chore(deps-dev): bump ts-node from 10.7.0 to 10.8.2 by @dependabot in #2205
• chore(deps-dev): bump eslint-plugin-prettier from 4.0.0 to 4.2.1 by @dependabot in #2198
• chore(deps-dev): bump @typescript-eslint/eslint-plugin from 5.26.0 to 5.30.5 by @dependabot in #2207
• chore(deps-dev): bump @typescript-eslint/parser from 5.30.4 to 5.30.5 by @dependabot in #2209
• chore(deps-dev): bump webpack-cli from 4.9.2 to 4.10.0 by @dependabot in #2210
• Fix parse-path vulnerability by @NSeydoux in #2216
• Bump webpack from 5.72.0 to 5.72.1 by @dependabot in #2132
• chore(deps-dev): bump @playwright/test from 1.21.1 to 1.23.2 by @dependabot in #2221
• chore(deps-dev): bump @inrupt/vocab-common-rdf from 1.0.3 to 1.0.5 by @dependabot in #2213
• chore(deps-dev): bump rollup from 2.70.2 to 2.76.0 by @dependabot in #2223
• chore(deps): bump openid-client from 5.1.6 to 5.1.8 by @dependabot in #2212
• chore(deps-dev): bump webpack from 5.72.1 to 5.73.0 by @dependabot in #2222
• chore(deps): bump @types/node from 17.0.25 to 18.0.3 by @dependabot in #2214
• chore(deps-dev): bump typedoc from 0.23.1 to 0.23.7 by @dependabot in #2220
• chore(deps-dev): bump @typescript-eslint/parser from 5.30.5 to 5.30.6 by @dependabot in #2225
• chore(deps-dev): bump @typescript-eslint/eslint-plugin from 5.30.5 to 5.30.6 by @dependabot in #2224
• chore(deps-dev): bump @playwright/test from 1.23.2 to 1.23.3 by @dependabot in #2226
• chore(deps-dev): bump ts-node from 10.8.2 to 10.9.1 by @dependabot in #2228
• chore(deps-dev): bump ts-node from 10.8.2 to 10.9.1 in /packages/browser/examples/single/script by @dependabot in #2230
• chore(deps): bump @types/node from 18.0.3 to 18.0.4 by @dependabot in #2229
• chore(deps-dev): bump rollup from 2.76.0 to 2.77.0 by @dependabot in #2231
• chore(deps-dev): bump eslint-plugin-jest from 26.5.3 to 26.6.0 by @dependabot in #2232
• Temporarily disable production e2e tests by @NSeydoux in #2239
• docs: fix broken link to examples in readme by @ThisIsMissEm in #2238
• Fix GHSA-4wf5-vphf-c2xc by @NSeydoux in #2248
• chore(deps-dev): bump webpack from 5.73.0 to 5.74.0 by @dependabot in #2250
• chore(deps-dev): bump @playwright/test from 1.23.3 to 1.24.1 by @dependabot in #2254
• chore(deps): bump terser from 5.10.0 to 5.14.2 in /packages/browser/examples/single/bundle by @dependabot in #2245
• chore(deps): bump terser from 5.12.1 to 5.14.2 in /packages/browser by @dependabot in #2244
• chore(deps): bump terser from 5.10.0 to 5.14.2 in /packages/browser/examples/demoClientApp by @dependabot in #2246
• chore(deps-dev): bump @typescript-eslint/eslint-plugin from 5.30.6 to 5.31.0 by @dependabot in #2256
• chore(deps-dev): bump typedoc from 0.23.7 to 0.23.9 by @dependabot in #2251
• chore(deps-dev): bump @typescript-eslint/parser from 5.30.6 to 5.31.0 by @dependabot in #2257
• chore(deps): bump @types/node from 18.0.4 to 18.6.2 by @dependabot in #2259
• chore(deps): bump @inrupt/solid-common-vocab from 1.0.0 to 1.0.1 by @dependabot in #2243
• chore(deps): bump lerna from 5.1.8 to 5.3.0 by @dependabot in #2260
• chore(deps-dev): bump rollup from 2.77.0 to 2.77.2 by @dependabot in #2258
• chore(deps): bump terser from 5.14.0 to 5.14.2 in /.codesandbox/sandbox by @dependabot in #2247
• chore: improve strictness of the engines supported by @jeswr in #2242
• Updated changelog for 1.12.2 release by @NSeydoux in #2261

New Contributors

• @jeswr made their first contribution in #2242

Full Changelog: v1.12.1...v1.12.2

v1.12.1

We've fixed the type compatibility issue in fetch

What's Changed

• Integrate Sonar analysis with test coverage on PRs into CI by @edwardsph in #2182
• chore(deps-dev): bump typescript from 4.6.3 to 4.7.4 by @dependabot in #2183
• chore: update release instructions by @ThisIsMissEm in #2174
• chore(release): prepare v1.12.1 by @ThisIsMissEm in #2188

Full Changelog: v1.12.0...v1.12.1

v.1.12.0

Breaking Changes

• Support for Node.js v12.x has been dropped as that version has reached end-of-life.
• We've cleaned up dynamic client registration by removing support for the registrationAccessToken / initialAccessToken when performing the registration flow as this feature was never fully implemented. For Solid apps we recommend the use of a Public Client Identifier Document
• We've also removed support for the iframe-based session renewal, which was never fully implemented.

What's Changed

• security: rotate npm credentials by @ThisIsMissEm in #2163
• Fix: package publishing by @ThisIsMissEm in #2165
• chore: drop support for Node.js v12.x by @ThisIsMissEm in #2166
• chore: upgrade cross fetch by @ThisIsMissEm in #2164
• refactor: remove support for client registration access tokens by @ThisIsMissEm in #2151
• chore(deps-dev): bump @inrupt/solid-client from 1.22.0 to 1.23.1 by @dependabot in #2168
• chore(deps-dev): bump n3 from 1.16.1 to 1.16.2 by @dependabot in #2145
• chore(deps): bump openid-client from 5.1.5 to 5.1.6 by @dependabot in #2160
• chore: commit changes to package-lock relating to engines by @ThisIsMissEm in #2170
• release: prepare v1.12.0 by @ThisIsMissEm in #2173

Full Changelog: v1.11.9...v1.12.0

v1.11.9

What's Changed

• Remove reference to window.localstorage from Session constructor by @ajacksified in #2159
• chore(deps-dev): bump @typescript-eslint/eslint-plugin from 5.21.0 to 5.26.0 by @dependabot in #2156
• chore(deps-dev): bump @typescript-eslint/parser from 5.21.0 to 5.26.0 by @dependabot in #2157
• Chore/release v1.11.9 by @ajacksified in #2161

Full Changelog: v1.11.8...v1.11.9

1.11.7 release

Bugfixes

• @inrupt/oidc-client-ext: remove ts-jest from package dependencies, which should reduce the package size for dependants.
• The PKCE verifier is now cleared from storage as soon as it has been used in the token exchange, regardless of the token type (it used to not be cleared from part of the storage when getting a DPoP-bound token).