What's Changed

• refactor: Remove unused time injection from RemoteKeySet by @ponimas in #466
• bump go to 1.24, remove 1.23 support, bump go-jose dependency, remove x/net dependency by @wardviaene in #467

New Contributors

• @wardviaene made their first contribution in #467

Full Changelog: v3.15.0...v3.16.0

What's Changed

• oidc: verify signature before parsing token by @ericchiang in #465

Full Changelog: v2.3.0...v2.4.0

What's Changed

• oidc: verify the ID Token's signature before processing claims by @ericchiang in #464

Full Changelog: v3.14.1...v3.15.0

What's Changed

• oidctest: fix import by @ericchiang in #457

Full Changelog: v3.14.0...v3.14.1

What's Changed

• oidc/oidctest: add new package by @ericchiang in #400

Full Changelog: v3.13.0...v3.14.0

What's Changed

• *: bump dependency versions by @ericchiang in #453

Full Changelog: v3.12.0...v3.13.0

What's Changed

• Support signed jwt userinfo response by @holowinski in #254
• *: s/Json/JSON/g to appease lint by @ericchiang in #255
• userinfo - handling charset in Content-Type header by @ericchiang in #261
• Change Go Version Used in .travis.yml to v1.14 by @dickynovanto1103 in #268
• IDTokenVerifier: fix typo word in Verify function's comment by @dickynovanto1103 in #266
• also run travis tests under 1.15 by @mikedanese in #275
• support AWS Cognito, which is not completely OIDC compliant by @DallanQ in #257
• Added power support by @dthadi3 in #277
• fix up v2 CI by @ericchiang in #448
• Switch to maintained go-jose library by @liggitt in #447

New Contributors

• @holowinski made their first contribution in #254
• @dickynovanto1103 made their first contribution in #268
• @mikedanese made their first contribution in #275
• @DallanQ made their first contribution in #257
• @dthadi3 made their first contribution in #277
• @liggitt made their first contribution in #447

Full Changelog: v2.2.1...v2.3.0

What's Changed

• oidc: add JSON tags to ProviderConfig by @ericchiang in #446

Full Changelog: v3.11.0...v3.12.0

What's Changed

• oidc: verify support for algs from discovery by @ericchiang in #430
• chore(deps): bump dependencies to address security issues by @clambin in #432
• oidc: ignore cancellation of remote key set context by @ericchiang in #433

New Contributors

• @clambin made their first contribution in #432

Full Changelog: v3.10.0...v3.11.0

What's Changed

• fix minor typo by @bgerrity in #414
• updated github actions by @ericchiang in #419
• add staticcheck to github actions by @ericchiang in #420
• update go-jose to v4 by @ericchiang in #421

New Contributors

• @bgerrity made their first contribution in #414

Full Changelog: v3.9.0...v3.10.0