<!-- Template: --> <!-- ### Features --> <!-- --> <!-- ### API --> <!-- --> <!-- ### Enhancements --> <!-- --> <!-- ### Bugfixes --> <!-- --> <!-- ### OpenID Provider --> <!-- --> <!-- ### Dependencies --> <!-- --> ## mytoken 0.3.3 ### Mytoken - Added the name of a mytoken to the JWT. ### API - Don't redirect from `/.well-known/openid-configuration` to `/.well-known/mytoken-configuration`. Instead returning the same content on both endpoints. ### Enhancements - Removed buttons from webinterface in the tokeninfo tabs. The content now loads directly when switching the tab. - Removed most need for CDNs; now self-hosting resources. - Added setup of db database and db user to the setup utility. - Made Link in the web interface on the create-mytoken page better visible. ### Bugfixes - Fixed the error returned from the server if no capability for a mytoken was provided. - Fixed PKCE code verifier length. - Fixed Datetimepicker issues on consent page. - Fixed response type if an (oidc) error occures on the redirect step of the authorization code flow. ## mytoken 0.3.2 - Fixed password prompt for migratedb ## mytoken 0.3.1 - Improved helper tools ## mytoken 0.3.0 ### Features - Changes to the mytoken - Added a version to the mytoken token - Added token type 'mytoken' - Now using a hash value as the subject - Added Dockerfiles; mytoken can easily run with swarm - Added OIDC-compatibility for requesting ATs - ATs can be requested using the mytoken as the refresh token in a OIDC refresh flow - Deployment Configuration - Added option to set maximum lifetime of mytokens - Added option to disable restriction keys - Made request limits configurable - Changed setup db to new db migration tool - Added support for token rotation, incl. optional auto revocation - Added option to set maximum token length when requesting a mytoken ### Webinterface - Added option to create mytoken in the web interface - Reworked consent screen - Added possibility to set scopes and audiences when requesting an AT - Improvements ### Enhancements - Using better cryptographic functions - Set cookie as secure if issuer uses https, indepent of a potential proxy - Improved packaging - Improved code base - Improved error tracebility ### Bugfixes - Fixed bugs in the webinterface - Fixed other bugs ### OIDC - Add PKCE support ### Dependencies - Bumped several dependencies