Release 2.3.0

[2.3.0] 2023-05-31

WARNING

Issues caused by Release 2.0.0 breaking changes continue to be logged. Please make sure to carefully read these release notes before
performing a MAJOR upgrade to 2.x.

These issues both result in {"error": "invalid_client"}:

1. The application client secret is now hashed upon save. You must copy it before it is saved. Using the hashed value will fail.

2. PKCE_REQUIRED is now True by default. You should use PKCE with your client or set PKCE_REQUIRED=False if you are unable to fix the client.

Added

• Add Japanese(日本語) Language Support
• #1244 implement OIDC RP-Initiated Logout
• #1092 Allow Authorization Code flow without a client_secret per RFC 6749 2.3.1

Changed

• #1222 Remove expired ID tokens alongside access tokens in cleartokens management command
• #1267, #1253, #1251, #1250, #1224, #1212, #1211 Various documentation improvements