chore: release 1.6.6

chore: release 1.6.5

chore: release 1.6.4

Version 1.6.3

-------------

**Released on Aug 26, 2025**

- OIDC ``id_token`` are signed according to ``id_token_signed_response_alg``
  client metadata. :issue:`755`

Version 1.6.2

-------------

**Released on Aug 23, 2025**

- Temporarily restore OAuth2Request body parameter. #781 #791
- Allow 127.0.0.1 in insecure transport mode. #788
- Raise MissingCodeException when the code parameter is missing. #793 #794
- Fix id_token generation with EdDSA algs. #799 #800

chore: release 1.6.1

Version 1.6.0

-------------

**Released on May 22, 2025**

- Fix issue when :rfc:`RFC9207 <9207>` is enabled and the authorization endpoint response is not a redirection. :pr:`733`
- Fix missing ``state`` parameter in authorization error responses. :issue:`525`
- Support for ``acr`` and ``amr`` claims in ``id_token``. :issue:`734`
- Support for the ``none`` JWS algorithm.
- Fix ``response_types`` strict order during dynamic client registration. :issue:`760`
- Implement :rfc:`RFC9101 The OAuth 2.0 Authorization Framework: JWT-Secured Authorization Request (JAR) <9101>`. :issue:`723`
- OIDC :class:`UserInfo endpoint <authlib.oidc.core.userinfo.UserInfoEndpoint>` support. :issue:`459`

**Released on Apr 1, 2025**

- Forbid fragments in ``redirect_uris``. :issue:`714`
- Fix invalid characters in ``error_description``. :issue:`720`
- Add ``claims_cls``` parameter for client's ``parse_id_token`` method. :issue:`725`

- Fix RFC9207 ``iss`` parameter. :pr:`715`

Version 1.5.0

-------------

**Released on Feb 25, 2025**

- Fix token introspection auth method for clients. :pr:`662`
- Optional ``typ`` claim in JWT tokens. :pr:`696`
- JWT validation leeway. :pr:`689`
- Implement server-side :rfc:`RFC9207 <9207>`. :issue:`700` :pr:`701`
- ``generate_id_token`` can take a ``kid`` parameter. :pr:`702`
- More detailed ``InvalidClientError``. :pr:`706`
- OpenID Connect Dynamic Client Registration implementation. :pr:`707`