1_6_5.md

doc/release_notes/1_6_5.md

1.6.5

Bugfixes

  • :oauth_dynamic_client_registration feature: scoping to the client being updated, preventing thst the resulting database operations touch every row in the "oauth_applications" table.

  • :json feature: fixed implementation of json_request?.

  • json-jwt support: set explicit :skip_verification parameter when the jwt decoding algorithm is "none".

  • rails generators: add missing uniqueness constraint to the index on the "issuer" column of the "oauth_saml_settings" table.

  • rails generators: remove the "jti" column entry from the "oauth_dpop_proofs" table (already made the pkey in the create_table instruction).

  • Make password_hash method public, which restores compatibility with rodauth v2.28 or more recent; rodauth minimum supported version becomes 2.28.0 as a result, which should not be perceived as a breaking change, as there are no other significant API changes, and ruby version support remains the same.