AccessToken model test coverage
test coverage for exhanging, issuing and refreshing access tokens
release 0.1.22
fix bug initializing payload/header with alternate key name
method to create a signed JWT from an access token
cleaned comments and removed unused commented code
middleware to parse the authorization header
middleware checks for a request bearer token, ensures there is only one authentication method, and sets the token property on the request for convenience downstream.
use `parseAuthorizationHeader` and `getBearerToken` middlewares at userinfo endpoint
AccessToken.verify method
verifyUserToken middleware uses AccessToken.verify method; always set iss on access tokens
use parseAuthorizationHeader and getBearerToken at register endpoint; use AccessToken.verify in verifyClientRegistration middleware
Use AccessToken.verify at token verification endpoint
use authenticateClient middleware instead of requiring the client registration token
general verifyAccessToken middleware; use at token verification endpoint
replace verifyUserToken middleware with verifyAccessToken; deprecate verifyUserToken
remove deprecated verifyUserToken middleware and tests
verifyClientRegistration relies on verifyAccessToken to provide claims on the request upstream
fix claims reference
slightly improved error response format for validation errors