/ 
Browser-OIDC-0.003

Changes for version 0.003 - 2026-11-07

  • Split new into new_from_discovery and new_from_config (BREAKING)
  • Always add nonce to authorization request
  • Don't send any client_secret in authorization request
  • Force certificate verification in HTTPS requests
  • Always include PKCE
  • Harden response checking code
  • Add userinfo method to TokenResponse
  • Add timeout to local HTTP daemon
  • URI escape basic authentication id and secret
  • Handle failure to open browser more gracefully
  • Handle authorization server issuer identification
  • Mandate use of client_id

Modules

Browser::OIDC
Get an OIDC token for a CLI application

Provides

Browser::OIDC::TokenResponse
in lib/Browser/OIDC/TokenResponse.pm

Other files