Released: Jul 23, 2024

Updates in v3.6.0

Features

• Support clearing the session state by client ID.
• Include the logout request in the IOpenIDStatus.
• Support multiple claims of the same type.
• Add the ClientConfiguration.RedirectUrisAreRegex to specify whether redirect URIs are regular expressions.
• Add IClaimFactory to support customization of the claims returned in the ID token and by the UserInfo endpoint.
• Replace IOpenIDProvider.SendAuthnErrorResponseAsync(Exception) with IOpenIDProvider.ToErrorCode.
• Include the optional correlationID to support multiple pending responses.

Fixes

• Don’t serialize the Claims.Subject property as it isn’t required for OIDC and could cause a stack overflow.
• Don’t include the idp and ver claims in the ID token as this breaks the OIDC conformance tests.