Version Packages

CHANGELOG.md

@@ -1,5 +1,15 @@
 # @monocloud/authentication-api
 
+## 0.1.5
+
+### Patch Changes
+
+- a2edb9a: Add certificate binding validation modes.
+
+  - `ValidateCertificateBinding` is now a `CertificateBindingValidation` enum instead of a `Func<HttpContext, bool>`.
+  - Tokens whose `cnf` (confirmation) claim carries an `x5t#S256` thumbprint are now validated by default; previously the default never validated. Replace `ValidateCertificateBinding = _ => true` with `CertificateBindingValidation.Required`, and set `CertificateBindingValidation.DangerouslyIgnore` to opt out entirely.
+  - A `CertificateRetriever` that throws now fails authentication with a 401 `invalid_token` challenge (`Client certificate is malformed`) instead of surfacing a 500.
+
 ## 0.1.4
 
 ### Patch Changes

Directory.Packages.props

@@ -3,7 +3,7 @@
     <LangVersion>14.0</LangVersion>
     <Nullable>enable</Nullable>
     <SignAssembly>true</SignAssembly>
-    <Version>0.1.4</Version>
+    <Version>0.1.5</Version>
     <AssemblyVersion>0.0.1</AssemblyVersion>
     <FileVersion>0.0.1</FileVersion>
     <Company>MonoCloud</Company>

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@monocloud/authentication-api",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "private": true,
   "scripts": {
     "changeset": "changeset",