3.51.0 (2026-09-14)

Features

• rp: limit HTTP response body size (#971) (7464275)

3.50.0 (2026-09-14)

Features

• oidc,client: Adds support for OpenID Key Binding to client (#943) (98df270), closes /github.com/openpubkey/openpubkey/blob/main/providers/keybinding_provider.go#L109

3.49.6 (2026-09-04)

Bug Fixes

• oidc: map ErrSubjectInvalid to invalid_grant instead of server_error (#950) (cb9e7df), closes #945

3.49.5 (2026-09-03)

Bug Fixes

• op: stop double-decoding redirect_uri in authorization requests (#969) (2d0c9cb), closes #775 #775 #775 #968 #775 #968

3.49.4 (2026-08-28)

Bug Fixes

• client: avoid mutating caller http.Client in CallRevokeEndpoint (#963) (7a7a91d), closes #911

3.49.3 (2026-08-27)

Bug Fixes

• op: guard against nil claims for opaque access tokens in token exchange (#959) (611e1a6), closes #704

3.49.2 (2026-08-07)

Bug Fixes

• tracing key, doc rephrasing and guard slog.SetDefault against nil (#935) (65199e0)

3.49.1 (2026-08-05)

Bug Fixes

• op: reject requested_token_type that cannot be issued (#932) (1974dae)

3.49.0 (2026-08-05)

Features

• support custom issuer verifier (#928) (4404f82)

4.0.0-next.4 (2026-07-30)

Bug Fixes

• oidc: callTokenEndpoint expiry conversion error (#929) (4527ff1), closes #821