You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: CHANGELOG.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -23,10 +23,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
23
23
This completes the view to provide all the REQUIRED and RECOMMENDED [OpenID Provider Metadata](https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderMetadata).
24
24
25
25
### Changed
26
-
*#1129 (**Breaking**) Changed default value of PKCE_REQUIRED to True. This is a **breaking change**. Clients without
26
+
*#1129 (**Breaking**) Changed default value of PKCE_REQUIRED to True. This is a **breaking change**. Clients without
27
27
PKCE enabled with fail to authenticate. This breaks with [section 5 of RFC7636](https://datatracker.ietf.org/doc/html/rfc7636)
28
28
in favor of the [OAuth2 Security Best Practices for Authorization Code Grants](`Authorization Code Grant <https://datatracker.ietf.org/doc/html/draft-ietf-oauth-security-topics#section-2.1.>`_ )
29
-
To maintain the legacy behavior set [PKCE_REQUIRED](https://django-oauth-toolkit.readthedocs.io/en/latest/settings.html?highlight=PKCE_REQUIRED#pkce-required)
29
+
To maintain the legacy behavior set [PKCE_REQUIRED](https://django-oauth-toolkit.readthedocs.io/en/latest/settings.html?highlight=PKCE_REQUIRED#pkce-required)
30
30
to `False`.
31
31
*#1093 (**Breaking**) Changed to implement [hashed](https://docs.djangoproject.com/en/stable/topics/auth/passwords/)
32
32
client_secret values. This is a **breaking change** that will migrate all your existing
0 commit comments