assent

Requires Elixir 1.13+

• Fixed bug with trailing slash in :base_url not being ommitted when concatenating with relative path #150 (thanks @dtluther)

• Fixed bug where Req was not used by default if included in project #143
• Assent.Strategy.Httpc.request/5 now sets content length header #144

Req will be used by default if available in your project, otherwise :httpc will be used. #139

• Req HTTP adapter added #139
• Req supported by default as HTTP client #139
• Global application config support for HTTP and JWT adapters #139
• More expressive errors now including the whole HTTP response where applicable #138
• Deprecated :site config in favor of :base_url config #140

• Assent.Strategy.Strava added #135

• Added Assent.HTTPAdapter.Finch #124
• Deprecated Assent.HTTPAdapter.Mint #124

• Assent.Strategy.Spotify added #132

• Fixed bug in Assent.JWTAdapter.AssentJWT where verified? could be a {:error, term()} tuple rather than boolean #130
• Improved message on private key file load error #131

• Removed :castore version requirement #117
• Assent.Strategy.Httpc.request/5 raises error when SSL certificate can't be validated #117

• Fixed bug to handle 201 success response #112
• Assent.Strategy.OIDC now has support for multiple audiences #113
• Assent.Strategy.OIDC now permits any auth method if no token_endpoint_auth_methods_supported specified #116
• Assent.Strategy.Linkedin added #115

• Default to using Jason instead of Poison for JSON parsing #107
• Fixed Bitwise warning when running on Elixir 1.14 #106

This release consists of breaking changes.

In previous Assent.Stategy.Slack strategy, the sub user id field consisted of {SUB}-{TEAM}. Slack has migrated to OpenID Connect, and the response has been conformed to OIDC. The sub will now only consists of the sub id, and not include team id. To succesfullly migrate to this release all slack identity records storing the sub user id field has to be updated.

If you wish to continue using the previous sub user id a custom OIDC strategy can be used instead:

defmodule Slack do
  use Assent.Strategy.OIDC.Base

  alias Assent.Strategy.Slack

  defdelegate default_config(config), to: Slack

  def normalize(config, user) do
    user = Map.put(user, "sub", "#{user["https://slack.com/user_id"]}-#{user["https://slack.com/team_id"]}")

    Slack.normalize(config, user)
  end
end

• Assent.Strategy.OIDC.fetch_user/2 now removes the ID token specific keys from the user claims instead of normalizing #100
• Assent.Strategy.OIDC.Base now adds normalize/2 to the macro that will include the full user claims in the user params #100
• Assent.Stategy.Slack now uses OpenID connect instead of legacy OAuth 2.0, please note that the sub value may have changed #97

• Assent.Strategy.OIDC bug fixed so it handles unreachable urls correctly #95

• Assent.Strategy.OIDC bug fixed for normalize/2 macro callback #92

• Assent.constant_time_compare/2 no longer outputs a deprecation warning for OTP 24 #87

Changes

• Assent.Strategy.Apple has been fixed to handle the JSON encoded user in callback params #86

Changes

• Assent.Strategy.OIDC.Base.authorize_url/2 now has correct type specs #83

Changes

Updated to support OTP 24 and no longer support OTP < 22.1 #80

• Assent.Strategy.OIDC now handles missing id_token in token params #81

Changes

• Assent.Strategy.OAuth2.fetch_user/4 now accepts headers in arguments #77
• Assent.Strategy.AzureAD bug fixed so it now uses the RS256 alg #78

Changes

• Assent.Strategy.OAuth now handles missing params in callback phase #75
• Assent.Strategy.Twitter now handles access denied callback #75

Changes

• Assent.Strategy.Stripe added #70
• Assent.Strategy.to_url/3 now handles nested query params #70
• Assent.Strategy.OAuth2 no longer removes padding for base64 encoding authorization header #71
• Assent.Strategy.OIDC.validate_id_token/2 now supports dynamic OpenID configuration #73
• Assent.Strategy.OIDC.fetch_userinfo/2 now supports dynamic OpenID configuration #73