• v1.1.0 72afbc91bd

    Ghost released this 2025-10-29 14:08:40 +00:00 | 301 commits to main since this release

    Change OAuthHandler signature from func(context.Context,
    OAuthHandlerArgs) to func(req *http.Request, res *http.Response).

    • Remove OAuthHandlerArgs struct
    • Update HTTPTransport to pass req and resp to handler
    • Update tests to use new signature
    • Handler can now call oauthex.GetProtectedResourceMetadataFromHeader
      with proper validation against request URL

    This change fixes an impedance mismatch between OAuthHandler and the
    protected resource metadata functions of the oauthex package. The new
    signature allows handlers to properly validate resource metadata against
    the request URL, as required by RFC 9728.

    Fixes #600

    Downloads