v0.31.3

feat(pkce): add EnforcePKCEForPublicClients config flag (#431)

Alternative proposal for the issue discussed in #389 and #391, where enforcement of PKCE is wanted only for certain clients.

Add a new flag EnforcePKCEForPublicClients which enforces PKCE only for public clients. The error hint is slightly different, as it mentions PKCE is enforced for "this client" rather than "clients". (It intentionally does not mention why it's enforced, as I think basing it on public clients is an implementation detail that servers may want to change without adding to the error hints).

Closes #389
Closes #391

v0.31.2

fix: introduce better linting pipeline and resolve Go issues (#428)

v0.31.1

fix: return invalid_grant instead of invalid_request in refresh flow …

v0.31.0

Merge pull request from GHSA-v3q9-2p3m-7g43

* u

* u

v0.30.6

fix: handle serialization errors that can be thrown by call to 'Commi…

v0.30.5

fix: handle concurrent  transactional errors in the refresh token gra…

v0.30.4

fix: add ability to specify amr values natively in id_token payload (…

v0.30.3

fix: Support RFC8252#section-7.3 Loopback Interface Redirection (#400)

Closes #284

v0.30.2

Return state parameter in authorization error conditions (#388)

Related to ory/hydra#1642

v0.30.1

pkce: Enforce verifier formatting (#383)