All work

Transcoding of object type of claim fails

Release 3.2.0

Profile configuration setting for limiting initial access token to self

Profile configuration setting for strict scope validation

Maximum lifetime for jti-claim validator's replay cache records

Improve jti-claim validator's handling of overly long values

Release 3.1.1

As an OIDC RP, loginHintLookupStrategy seems to be ignored

Profile configuration setting for custom redirect URI validation

Profile configuration setting for message handler

Update Nimbus oauth2-oidc-sdk into 10.15

BaseJWTSignatureSecurityHandler cannot resolve trust engine via custom context location

TrustEngine implementation for token derived credentials

Profile configuration settings for OAuth2 DPoP

Remove exp-claim requirement for JWTIdentifierClaimsValidator

Add link back to Nimbus and JOSE javadocs

Profile Configuration for OAuth2 PAR

Release 3.1.0

Fix incorrect NonNull annotations in API

Profile configuration setting to require OIDC authentication request

Enable dynamic type header naming when signing tokens

Add metadata-driven naming to attribute transcoders

Implement metadata cache loading strategy for generic resources

Fix Principal typing issue in profile config default implementation

Allowed ResponseModes should be configurable

Metadata policy merging misses subordinate values with some operators

Suggest changing the support level for Versions 1.0.0 through 3.0.0

Release 3.0.1

Support custom/additional metadata policy operators

Add clockSkew and idGenerator configuration hooks to JSONSecurityConfiguration

Profile configuration option for refresh token type

com.nimbusds.oauth2.sdk subject_types_supported out of spec

Refactor profile configuration options on major version change

Add CSP protection to views

Add a new CredentialFactoryBean type which allows null objects from createInstance

Credential factory beans are returning null from doCreateInstance

Profile configuration for OIDC logout

Add PKCE support to the OIDC message encoders

Add PKCE support to authorization request object

Test-jar dependency is needed for generic testing utility classes

Release commons 3.0.0 and config 2.0.0

Update into the IdP V5 codebase

Support policies for unregistered clients

RemoteJwkUtils HTTP resource leak

Add protocol message logging support to the AbstractOIDCMessageEncoder

Fix possible NPE in JWETokenDecrypter when jcaKeyAlg is not supported by the registry

Use security params lookup strategy in base signature security handler

Decouple signature signing logic from SignJWTHandler

Release 2.2.1