Version Packages

CHANGELOG.md

@@ -1,5 +1,24 @@
 # @monocloud/authentication-api
 
+## 0.1.4
+
+### Patch Changes
+
+- 09ca43f: - Infrastructure failures during introspection (discovery, transport, non-2xx responses, malformed
+  JSON, client auth) and exceptions from consumer event handlers on the opaque path now raise
+  `AuthenticationFailed` with the real exception and rethrow (→ 500) instead of failing with a
+  misleading 401 `invalid_token`. Token verdicts (`active:false`, certificate binding) still produce
+  a 401. To restore the old behavior, handle `OnAuthenticationFailed` and set a `Result`.
+  - A failing introspection-cache write no longer fails an otherwise-successful authentication.
+  - A space-delimited `scope` claim in a locally validated JWT is split into one claim per scope,
+    matching the introspection path, so `RequireClaim("scope", ...)` behaves identically on both paths.
+  - Claim normalization preserves the validated identity's type (Wilson 8's
+    `CaseSensitiveClaimsIdentity` on .NET 9+) instead of rebuilding a case-insensitive `ClaimsIdentity`.
+  - The in-flight introspection de-duplication map is keyed by scheme + token, so concurrent
+    introspections of the same token under different schemes no longer share a result.
+  - Removed `JwtAssertion.AssertionCacheExpiry` (compile-breaking if set): it was never honored — a
+    fresh assertion (new `jti`) is generated for every introspection request.
+
 ## 0.1.3
 
 ### Patch Changes

Directory.Packages.props

@@ -3,7 +3,7 @@
     <LangVersion>14.0</LangVersion>
     <Nullable>enable</Nullable>
     <SignAssembly>true</SignAssembly>
-    <Version>0.1.3</Version>
+    <Version>0.1.4</Version>
     <AssemblyVersion>0.0.1</AssemblyVersion>
     <FileVersion>0.0.1</FileVersion>
     <Company>MonoCloud</Company>

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@monocloud/authentication-api",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "private": true,
   "scripts": {
     "changeset": "changeset",