• 4.3.1latestno API changesDocs2026-07-17 12:06
• Merge from 4.3.0 (#573)11Docs28b074c2021-10-05 13:46

  Change detail

  2 changes across 1 operation

  AllBreakingWarningInfo

  • POST/register-site
    • warning

      removed the request property client_frontchannel_logout_uri

    • info

      added the new optional request property client_frontchannel_logout_uris

• #476 - Check if issuer from OpenID Provider Configuration Information matches with Webfinger issuer12Docs80e50be2020-10-06 11:29

  Change detail

  3 changes across 1 operation

  AllBreakingWarningInfo

  • POST/get-issuer
    • breaking

      added the new required request property op_configuration_endpoint

    • info

      added the new optional request property op_discovery_path

    • info

      added the new optional request property op_host

• #553 - Change `client_frontchannel_logout_uri` from `List` to `string` type during client registration11Docs90e3fb62020-09-22 13:32

  Change detail

  2 changes across 1 operation

  AllBreakingWarningInfo

  • POST/register-site
    • warning

      removed the request property client_frontchannel_logout_uris

    • info

      added the new optional request property client_frontchannel_logout_uri

• #511 - Add `client_assertion`, `TokenEndpointAuthSigningAlgorithm` params in ` /get-tokens-by-code`.2Docsf51d1ed2020-09-02 05:42

  Change detail

  2 changes across 1 operation

  AllBreakingWarningInfo

  • POST/get-tokens-by-code
    • info

      added the new optional request property algorithm

    • info

      added the new optional request property authentication_method

• #499 - Passing `Request Object by Value` and `Request Object by Reference` in Authorization Request3Docs930d4ff2020-07-03 16:35

  Change detail

  3 changes across 3 operations

  AllBreakingWarningInfo

  • POST/get-request-object-uri
    • info

      endpoint added

  • GET/get-request-object/{request_object_id}
    • info

      endpoint added

  • GET/get-rp-jwks
    • info

      endpoint added

• #498 - Use WebFinger (RFC7033) and OpenID Provider Issuer Discovery to determine the location of the OpenID Provider1Docs5c4d65d2020-06-09 14:20
• #466 - Support different AS for `access_token` validation (other then the one processing API call)15Docsb7350b52020-04-22 15:32
• #441 - Identify the invalid 'sub' value and reject the UserInfo Response.1Docsdba3bc82020-04-15 16:28
• #449 - Adding `nonce` request parameter to explicitly pass `nonce` value to Authentication Request.1Docsc0660a32020-04-12 17:21
• #165 - UMA : add creation and expiration resource support to oxd2Docsc536e442020-02-29 10:06
• #91 - UMA 2 : add custom redirect parameters to get_claims_gathering_url command1Docsd900c3c2020-02-26 09:03
• #158 - change op_host config param to `op_discovery_uri`no API changesDocsb678d2c2020-02-15 11:03
• #158 - change op_host config param to `op_discovery_uri`312Docsa40af362020-02-14 16:24
• #195 - corrected licence pathno API changesDocs7d6fc752020-02-14 05:40
• 195 - Migrate to swagger 3.0 once swagger-codegen has stable releaseno API changesDocs01d981a2020-02-13 16:54
• @duttarnabno API changesDocs5ff67802020-02-13 09:58
• #195 - Migrate to swagger 3.0 once swagger-codegen has stable release90Docs3fab30c2020-02-13 09:43
• #409 - Add spontaneous scopes to oxdno API changesDocs042e1fc2020-01-24 13:10
• #309 - Add spontaneous scopes to oxdno API changesDocs16c391b2020-01-24 10:40
• $409 - Add spontaneous scopes to oxdno API changesDocs974279c2020-01-22 13:38
• #no API changesDocsace43822020-01-21 08:51
• #362 - We need `scopes` explicitly passed into `/uma-rs-check-access` to have granular access handlingno API changesDocsa3b95372020-01-16 09:25
• #363 - Introduce new `/uma-rs-modify` command to be able modify existing resource1Docs179d4d42019-12-28 13:39
• #390 - Sync client from OP : Update oxd database by reading clientno API changesDocsf12ef0d2019-12-16 16:26
• #114 - Hybrid flow : add ability to set response_type directly during authorization url requestno API changesDocs3ede3212019-09-17 12:18
• #354 - Unify parameters between /register-site and /update-siteno API changesDocsf83924b2019-07-28 12:15
• Added claims_redirect_uri to /update-siteno API changesDocs812d3e72019-07-26 12:25
• swagger definition: Generated map/dictionaty for params in `/get-authorization-url`no API changesDocs74270a92019-07-23 08:21
• Added ability to pass custom parameters into `/uma-rp-get-rpt` command #350no API changesDocs55cfe032019-07-23 06:49
• #343 - Remove authorization_redirect_uri from /register-site command and make it mandatory in /get-authorization-url commandno API changesDocs5ea35302019-07-12 05:35
• #338 - add `idTokenSignedResponseAlg` to `/register-site` commandno API changesDocs4a463932019-07-06 06:32
• #338 - add `idTokenSignedResponseAlg` to `/register-site` commandno API changesDocsa8401d42019-07-06 06:09
• #338 - add `idTokenSignedResponseAlg` to `/register-site` commandno API changesDocsd3839382019-07-04 12:27
• #130 - Enable client to set custom state valueno API changesDocs3d4a0952019-06-28 07:38
• #334 - Add `params` map to `/get-authorization-url` apino API changesDocs867fdda2019-06-27 14:02
• #217 - During registration we should pass list of post_logout_redirect_uris instead of single valueno API changesDocs150165c2019-05-24 10:10
• #291 - Missed OP discovery info to implement OpenID Connect GG plugin11Docs43eb22e2019-05-22 09:45
• #291 - Missed OP discovery info to implement OpenID Connect GG plugin1Docsda8be202019-05-21 14:07
• #308 - GG request : add `authorization_redirect_uri` parameter support to `/get-authorization-url` commandno API changesDocs82a787c2019-05-17 12:54
• #307 - NEW : Swagger spec must reflect error json returned by oxdno API changesDocsfe2a82e2019-05-15 11:21
• added ErrorResponse model description.no API changesDocs6708f582019-05-09 12:02
• corrected swagger spec and re-generated GetTokensByCodeResponse after token return types changing.no API changesDocsf0201fe2019-04-15 08:37
• Merge remote-tracking branch 'origin/version_4.0' into version_4.0no API changesDocsd9d1cac2019-03-15 10:03
• Transfered response from oxauth /userinfo endpoint `as is`. Corrected swagger spec and tests for it.no API changesDocs576053c2019-03-15 10:02
• swagger implementationno API changesDocsf8e739d2019-03-14 12:47
• Removed 'beta' tag from Swagger YAMLno API changesDocs724dd432019-02-13 14:55
• #285 : added support for RPT as JWTno API changesDocsa59bf572018-12-13 19:49
• Issue#260: Updated definition for jwks for json based responseno API changesDocs175f1a22018-12-02 04:41
• #229 : removed `client_secret_expires_at` from /update-site swagger spec86146Docs9cb0bee2018-11-30 07:40

Revisions go back to the API's first capture.