v2.4.0

Added

• Swallor error on silent auth #230 (adamjmcgrath)
• Token Endpoint Parameters #228 (davidpatrick)

v2.3.1

Fixed

• Set cookie headers on header write (before res.end) #214 (adamjmcgrath)
• Prompt should be passed as an auth param #217 (adamjmcgrath)

v2.3.0

Added

• Custom session stores #190 (davidpatrick)

v2.3.0-beta.0

To install: npm install express-openid-connect@beta

Added

• Custom session stores #190 (davidpatrick)

v2.2.0

2.2.0 (2021-01-14)

Full Changelog

Added

• afterCallback Hook #168 (davidpatrick)

Changed

• Move transient cookies into single cookie #171 (davidpatrick)
• Use native node hkdf when available (Node >=15) #177 (panva)

v2.1.0

2.1.0 (2020-12-15)

Full Changelog

Changed

• Default cookie.secure config to the protocol of baseURL #159 (adamjmcgrath)

Fixed

• Fix session.cookie TS definitions #157 (adamjmcgrath)

v2.0.0

For a full list of breaking changes and migration guide, checkout https://github.com/auth0/express-openid-connect/blob/master/V2_MIGRATION_GUIDE.md

Breaking Changes

• postLogoutRedirect and response_type check #123 (adamjmcgrath)
• Logout returnTo param #115 (adamjmcgrath)
• Session duration behaviour #114 (adamjmcgrath)
• Update Session cookie #111 (adamjmcgrath)
• Configuration and API updates #109 (adamjmcgrath)
• Update token set #108 (adamjmcgrath)

Added

• attemptSilentLogin feature #121 (adamjmcgrath)
• Add refresh method to access token #124 (adamjmcgrath)
• Architecture #128 (adamjmcgrath)

v2.0.0-beta.0

For a full list of breaking changes and migration guide, checkout the V2_MIGRATION_GUIDE.md

Breaking Changes

• postLogoutRedirect and response_type check #123 (adamjmcgrath)
• Logout returnTo param #115 (adamjmcgrath)
• Session duration behaviour #114 (adamjmcgrath)
• Update Session cookie #111 (adamjmcgrath)
• Configuration and API updates #109 (adamjmcgrath)
• Update token set #108 (adamjmcgrath)

Added

• attemptSilentLogin feature #121 (adamjmcgrath)
• Add refresh method to access token #124 (adamjmcgrath)
• Architecture #128 (adamjmcgrath)

v1.0.2

Fixed

• Fix returnTo on Login #95 (davidpatrick)
• Cookie options applied when clearing the cookie as well as setting the cookie #94 (adamjmcgrath)

v1.0.1

Full Changelog

Fixed

• Fix issue where authz header was overridden in code exchange #86 (adamjmcgrath)