Framework-agnostic OAuth integration for AT Protocol (Bluesky) applications.
Update oauth-client-deno to 5.0.0 — security hardening
Picks up issuer verification, token response validation, metadata
validation, DPoP improvements, auto-retry on 401, and HTTPS enforcement.
+11
-2
+9
CHANGELOG.md
+9
CHANGELOG.md
···
2
2
3
3
All notable changes to this project will be documented in this file.
4
4
5
+
## [2.7.0] - 2026-02-15
6
+
7
+
### Changed
8
+
9
+
- **Update oauth-client-deno to 5.0.0**: Picks up issuer verification after
10
+
token exchange, token response validation, auth server metadata validation,
11
+
DPoP htu normalization, nonce caching, auto-retry on 401, and HTTPS
12
+
enforcement. See oauth-client-deno v5.0.0 changelog for full details.
13
+
5
14
## [2.6.1] - 2026-02-15
6
15
7
16
### Fixed
+2
-2
deno.json
+2
-2
deno.json
···
1
1
{
2
2
"$schema": "https://jsr.io/schema/config-file.v1.json",
3
3
"name": "@tijs/atproto-oauth",
4
-
"version": "2.6.3",
4
+
"version": "2.7.0",
5
5
"license": "MIT",
6
6
"exports": "./mod.ts",
7
7
"publish": {
···
16
16
},
17
17
"imports": {
18
18
"@std/assert": "jsr:@std/assert@1.0.16",
19
-
"@tijs/oauth-client-deno": "jsr:@tijs/oauth-client-deno@4.1.2",
19
+
"@tijs/oauth-client-deno": "jsr:@tijs/oauth-client-deno@5.0.0",
20
20
"@tijs/atproto-sessions": "jsr:@tijs/atproto-sessions@2.1.0",
21
21
"@tijs/atproto-storage": "jsr:@tijs/atproto-storage@0.1.1",
22
22
"@atproto/syntax": "npm:@atproto/syntax@0.3.0"