v3.8.3

Refactor

• relax www-authenticate auth-param presence requirement (35d4622)

v3.8.2

Documentation

• remove mention of Edge Runtime from the readme (313c263)

Refactor

• workaround dpop nonce caching caveats with customFetch (e201d3a)

v3.8.1

Fixes

• DPoP: add header JWK alg and pub when using ML-DSA keys (90a702e)

v3.8.0

Features

• support ML-DSA JWS Algorithm Identifiers (5e9e629)

v3.7.0

Features

• optional recognition of proprietary or unrecognized token types (c875d5a)

v3.6.2

Refactor

• skip checking www-authenticate if expected status is received (596ae33), closes #191

v3.6.1

Fixes

• allow 0 in auth_time (3b9db46)

v3.6.0

Features

• add request's url as a signal function option argument (aab6c30)

Fixes

• allow 0 in max_age and expires_in (15c0c50), closes #182

Refactor

• update signal() resolver for new Deno check rules (4791e9c)

v3.5.5

Fixes

• RFC9728: keep any terminating "/" when pathname is present (f951e73)

v3.5.4

Fixes

• RFC8414: strip any terminating "/" when pathname is present (50d8307)