Packages

charon_oauth2

1.1.0
1.1.0 1.0.0 0.6.0 0.5.1 0.5.0 0.4.0 0.3.0 0.2.2 0.2.1 0.2.0 0.1.0 0.0.5 0.0.4 0.0.3 0.0.2 0.0.1 0.0.1-beta3 0.0.1-beta2 0.0.1-beta

Add Oauth2 capabilities to a Charon-protected server.

HexDocs

Current section

Files

Jump to
Readme
19 Versions
4 Dependencies
0 Dependants
Files
Activity
charon_oauth2 CHANGELOG.md
Raw

CHANGELOG.md 

# Changelog



All notable changes to this project will be documented in this file.



The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),

and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).



## [1.1.0] - 2025-11-22



### Added



- Config option `:grant_types` can be used to restrict which OAuth2 flows are supported by the server.



### Changed



- Major README overhaul with improved structure and clarity



### Fixed



- Client ID was not correctly set in the `client_credentials` grant; it was set to a user ID. This should not be a security risk because client IDs are random UUIDs, so using a user ID would simply result in client-not-found errors.



## [1.0.0] - 2025-11-17



### Changed



- **BREAKING**: Now requires Charon 4.0 or later (previously compatible with Charon 3.x)

- **BREAKING**: Minimum Elixir version raised to 1.16 (previously 1.13)

- Removed direct dependency on Jason - now uses the JSON module configured for Charon instead

- Reduced (new) client secret size to 256 bits from 384



## [0.6.0] - 2025-11-13



### Added



- Support for OAuth2 Client Credentials grant type