All pull requests

Pull requests

• fix: return 400 instead of 500 for some client_assertion jwt errors

  #891·Oliboy50 opened Sep 9, 2026·6 tasks done·

  ·
  6

• fix: avoid unbounded split in HMACStrategy.Signature

  #890·aroh3006 opened Sep 2, 2026·

  ·
  1

  4

• fix: map HMAC base64 decode failures to ErrInvalidTokenFormat

  #889·BetterAndBetterII opened Sep 2, 2026·2 tasks done·

  ·
  1

  1

• fix: parse aud claim from []interface{} in JWTClaims.FromMap

  #887·vincentluan opened Jul 21, 2026·

  ·
  2

• feat: allow overriding PKCE verifier validation via CodeVerifierStrategy

  #886·shilps1583 opened Jul 15, 2026·

  ·
  1

  4

• fix: delete the PKCE request session only after a successful verification

  #883·shilps1583 opened Jul 15, 2026·

  ·
  2

• fix: set "Content-Type" header rather than add

  #878·jfoshee opened May 19, 2026·6 tasks·

  ·
  2

• fix: reject jwt-bearer assertions with future iat claim

  #877·SAY-5 opened May 13, 2026·3 of 6 tasks·

  ·
  1

  2

• Fix link to CONTRIBUTING.md

  #871·jjasghar opened Mar 11, 2026·5 of 6 tasks·

  ·

• chore(deps): bump golang.org/x/crypto from 0.31.0 to 0.45.0

  dependenciesgo
  #869·dependabot[bot] opened Nov 20, 2025Bot·

  ·

• fix: return refresh token expiration time on introspection

  #867·mitar opened Oct 15, 2025Contributor·5 of 6 tasks·

  ·
  1

• fix: when used with a JWK, the kid value is used to match a JWK k…

  #866·jcouyang opened Oct 14, 2025·4 of 6 tasks·

  ·
  1

• chore: upgrade to ristretto v2 and ory/x to latest

  #865·adityab-datadog opened Sep 17, 2025·6 tasks·

  ·
  2

• add support for RFC8693 (Token Exchange / Token Delegation)

  #863·HarryKodden opened Aug 15, 2025·5 of 6 tasks·

  ·
  3

• feat: pass new expiry to refresh rotation

  #862·aeneasr opened Jul 25, 2025Member·

  ·
  5

• chore(deps): bump golang.org/x/oauth2 from 0.23.0 to 0.27.0

  dependenciesgo
  #861·dependabot[bot] opened Jul 18, 2025Bot·

  ·

• fix: remove useless lock

  #860·aeneasr opened Jul 3, 2025Member·6 tasks·

  ·

• chore(deps): bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4

  #858·dependabot[bot] opened Jul 1, 2025Bot·

  ·

• fix: sign with jose.OpaqueSigner check incorrect key type

  #854·elct9620 opened Jun 20, 2025·6 tasks done·

  ·
  4

• chore(deps): bump golang.org/x/net from 0.33.0 to 0.38.0

  #852·dependabot[bot] opened Apr 16, 2025Bot·

  ·

• fix: typo: JKWKSFetcherWithDefaultTTL -> JWKSFetcherWithDefaultTTL

  #850·FenTiger opened Apr 16, 2025·

  ·
  1

• feat: configure client assertion issuer

  #847·tilgovi opened Apr 8, 2025·5 of 6 tasks·

  ·
  5

• feat: store JWT claims in access request

  #844·phooijenga opened Feb 25, 2025·3 of 6 tasks·

  ·
  2

• chore: upgrade to jose v4 library

  #824·mitar opened Sep 16, 2024Contributor·4 of 6 tasks·

  ·
  1

  23

• feat: (rfc8693) Token exchange

  #821·vivshankar opened Sep 1, 2024Contributor·5 of 6 tasks·

  ·
  6