openid-client 5.3.1 → 5.3.3

package/README.md

@@ -93,6 +93,11 @@ Node.js LTS releases Codename Erbium and newer LTS releases are supported.
 npm install openid-client
 ```
 
+Note: Other javascript runtimes are not supported.
+I recommend [panva/oauth4webapi][oauth4webapi], or a derivate thereof, if you're 
+looking for a similarly compliant and certified client software that's not dependent 
+on the Node.js runtime builtins.
+
 ## Quick start
 
 Discover an Issuer configuration using its published .well-known endpoints
@@ -252,8 +257,10 @@ private API and is subject to change between any versions.
 
 #### How do I use it outside of Node.js
 
-It is **only built for Node.js** environments - including openid-client in
-browser-environment targeted projects is not supported.
+It is **only built for Node.js**. Other javascript runtimes are not supported.
+I recommend [panva/oauth4webapi][oauth4webapi], or a derivate thereof, if you're 
+looking for a similarly compliant and certified client software that's not dependent 
+on the Node.js runtime builtins.
 
 #### How to make the client send client_id and client_secret in the body?
 
@@ -284,14 +291,15 @@ See [Customizing (docs)][documentation-customizing].
 [npm-url]: https://www.npmjs.com/package/openid-client
 [sponsor-auth0]: https://a0.to/try-auth0
 [support-sponsor]: https://github.com/sponsors/panva
-[documentation]: https://github.com/panva/node-openid-client/blob/master/docs/README.md
-[documentation-issuer]: https://github.com/panva/node-openid-client/blob/master/docs/README.md#issuer
-[documentation-client]: https://github.com/panva/node-openid-client/blob/master/docs/README.md#client
-[documentation-customizing]: https://github.com/panva/node-openid-client/blob/master/docs/README.md#customizing
-[documentation-tokenset]: https://github.com/panva/node-openid-client/blob/master/docs/README.md#tokenset
-[documentation-strategy]: https://github.com/panva/node-openid-client/blob/master/docs/README.md#strategy
-[documentation-errors]: https://github.com/panva/node-openid-client/blob/master/docs/README.md#errors
-[documentation-generators]: https://github.com/panva/node-openid-client/blob/master/docs/README.md#generators
-[documentation-methods]: https://github.com/panva/node-openid-client/blob/master/docs/README.md#client-authentication-methods
-[documentation-webfinger]: https://github.com/panva/node-openid-client/blob/master/docs/README.md#issuerwebfingerinput
+[documentation]: https://github.com/panva/node-openid-client/blob/main/docs/README.md
+[documentation-issuer]: https://github.com/panva/node-openid-client/blob/main/docs/README.md#issuer
+[documentation-client]: https://github.com/panva/node-openid-client/blob/main/docs/README.md#client
+[documentation-customizing]: https://github.com/panva/node-openid-client/blob/main/docs/README.md#customizing
+[documentation-tokenset]: https://github.com/panva/node-openid-client/blob/main/docs/README.md#tokenset
+[documentation-strategy]: https://github.com/panva/node-openid-client/blob/main/docs/README.md#strategy
+[documentation-errors]: https://github.com/panva/node-openid-client/blob/main/docs/README.md#errors
+[documentation-generators]: https://github.com/panva/node-openid-client/blob/main/docs/README.md#generators
+[documentation-methods]: https://github.com/panva/node-openid-client/blob/main/docs/README.md#client-authentication-methods
+[documentation-webfinger]: https://github.com/panva/node-openid-client/blob/main/docs/README.md#issuerwebfingerinput
 [express-openid-connect]: https://www.npmjs.com/package/express-openid-connect
+[oauth4webapi]: https://github.com/panva/oauth4webapi#readme

package/lib/helpers/deep_clone.js

@@ -1,3 +1 @@
-const { serialize, deserialize } = require('v8');
-
-module.exports = globalThis.structuredClone || ((obj) => deserialize(serialize(obj)));
+module.exports = globalThis.structuredClone || JSON.parse(JSON.stringify(obj));

package/lib/helpers/keystore.js

@@ -1,9 +1,6 @@
-const v8 = require('v8');
-
 const jose = require('jose');
 
-const clone = globalThis.structuredClone || ((value) => v8.deserialize(v8.serialize(value)));
-
+const clone = require('./deep_clone');
 const isPlainObject = require('./is_plain_object');
 const isKeyObject = require('./is_key_object');
 

package/lib/passport_strategy.js

@@ -41,6 +41,11 @@ function OpenIDConnectStrategy(
   this._usePKCE = usePKCE;
   this._key = sessionKey || `oidc:${url.parse(this._issuer.issuer).hostname}`;
   this._params = cloneDeep(params);
+
+  // state and nonce are handled in authenticate()
+  delete this._params.state;
+  delete this._params.nonce;
+
   this._extras = cloneDeep(extras);
 
   if (!this._params.response_type) this._params.response_type = resolveResponseType.call(client);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openid-client",
-  "version": "5.3.1",
+  "version": "5.3.3",
   "description": "OpenID Connect Relying Party (RP, Client) implementation for Node.js runtime, supports passportjs",
   "keywords": [
     "auth",