openid-client 5.2.0 → 5.3.0

package/README.md

@@ -44,9 +44,9 @@ openid-client.
 - [RFC9126 - OAuth 2.0 Pushed Authorization Requests (PAR)][feature-par]
 - [OpenID Connect RP-Initiated Logout 1.0][feature-rp-logout]
 - [Financial-grade API Security Profile 1.0 - Part 2: Advanced (FAPI)][feature-fapi]
-- [JWT Secured Authorization Response Mode for OAuth 2.0 (JARM) - ID1][feature-jarm]
+- [JWT Secured Authorization Response Mode for OAuth 2.0 (JARM)][feature-jarm]
 - [OAuth 2.0 Demonstration of Proof-of-Possession at the Application Layer (DPoP) - draft 04][feature-dpop]
-- [OAuth 2.0 Authorization Server Issuer Identification - draft-04][feature-iss]
+- [OAuth 2.0 Authorization Server Issuer Identification][feature-iss]
 
 Updates to draft specifications (DPoP, JARM, etc) are released as MINOR library versions,
 if you utilize these specification implementations consider using the tilde `~` operator in your
@@ -87,7 +87,7 @@ specific middlewares. Those can however be built using the exposed API, one such
 
 ## Install
 
-Node.js LTS releases Codename Erbium (starting with ^12.19.0) and newer LTS releases are supported.
+Node.js LTS releases Codename Erbium and newer LTS releases are supported.
 
 ```console
 npm install openid-client
@@ -273,12 +273,12 @@ See [Customizing (docs)][documentation-customizing].
 [feature-mtls]: https://tools.ietf.org/html/rfc8705
 [feature-device-flow]: https://tools.ietf.org/html/rfc8628
 [feature-rp-logout]: https://openid.net/specs/openid-connect-rpinitiated-1_0.html
-[feature-jarm]: https://openid.net/specs/openid-financial-api-jarm-ID1.html
+[feature-jarm]: https://openid.net/specs/oauth-v2-jarm.html
 [feature-fapi]: https://openid.net/specs/openid-financial-api-part-2-1_0.html
 [feature-dpop]: https://tools.ietf.org/html/draft-ietf-oauth-dpop-04
 [feature-par]: https://www.rfc-editor.org/rfc/rfc9126.html
 [feature-jar]: https://www.rfc-editor.org/rfc/rfc9101.html
-[feature-iss]: https://datatracker.ietf.org/doc/html/draft-ietf-oauth-iss-auth-resp-04
+[feature-iss]: https://www.rfc-editor.org/rfc/rfc9207.html
 [openid-certified-link]: https://openid.net/certification/
 [passport-url]: http://passportjs.org
 [npm-url]: https://www.npmjs.com/package/openid-client

package/lib/client.js

@@ -1606,35 +1606,14 @@ class BaseClient {
   fapi() {
     return this.constructor.name === 'FAPI1Client';
   }
-}
 
-/**
- * @name validateJARM
- * @api private
- */
-async function validateJARM(response) {
-  const expectedAlg = this.authorization_signed_response_alg;
-  const { payload } = await this.validateJWT(response, expectedAlg, ['iss', 'exp', 'aud']);
-  return pickCb(payload);
+  async validateJARM(response) {
+    const expectedAlg = this.authorization_signed_response_alg;
+    const { payload } = await this.validateJWT(response, expectedAlg, ['iss', 'exp', 'aud']);
+    return pickCb(payload);
+  }
 }
 
-Object.defineProperty(BaseClient.prototype, 'validateJARM', {
-  enumerable: true,
-  configurable: true,
-  value(...args) {
-    process.emitWarning(
-      "The JARM API implements an OIDF implementer's draft. Breaking draft implementations are included as minor versions of the openid-client library, therefore, the ~ semver operator should be used and close attention be payed to library changelog as well as the drafts themselves.",
-      'DraftWarning',
-    );
-    Object.defineProperty(BaseClient.prototype, 'validateJARM', {
-      enumerable: true,
-      configurable: true,
-      value: validateJARM,
-    });
-    return this.validateJARM(...args);
-  },
-});
-
 const RSPS = /^(?:RS|PS)(?:256|384|512)$/;
 function determineRsaAlgorithm(privateKey, privateKeyInput, valuesSupported) {
   if (

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openid-client",
-  "version": "5.2.0",
+  "version": "5.3.0",
   "description": "OpenID Connect Relying Party (RP, Client) implementation for Node.js runtime, supports passportjs",
   "keywords": [
     "auth",
@@ -56,7 +56,7 @@
     "base64url": "^3.0.1",
     "chai": "^4.2.0",
     "jose2": "npm:jose@^2.0.5",
-    "mocha": "^8.2.0",
+    "mocha": "^10.1.0",
     "nock": "^13.0.2",
     "prettier": "^2.4.1",
     "readable-mock-req": "^0.2.2",

package/types/index.d.ts

@@ -136,6 +136,8 @@ export interface EndSessionParameters {
   id_token_hint?: TokenSet | string;
   post_logout_redirect_uri?: string;
   state?: string;
+  client_id?: string;
+  logout_hint?: string;
 
   [key: string]: unknown;
 }