• FIX: use revoke uri instead of token uri (pr [#106](https://gi…

• FIX: use revoke uri instead of token uri (pr #106 of bakiller). (5c40d924)
• FIX: default redirectUri with port 80 does not work on linux (pr #117 of timalenustmf). (97a17741)
• FEAT: adds implementation for RP initiated logout (pr #112 of svsk417). (59ee7128)

• FIX: dedupe token refresh future. (69e638bc)

• REFACTOR: migrate from 'dart:html' to 'package:web'. ([9fd34b0…

• REFACTOR: migrate from 'dart:html' to 'package:web'. (9fd34b02)
• FEAT: client credentials flow. (86425c1d)

• REFACTOR: set min sdk to 3.0.0. ([754fa49](https://github.com…

• REFACTOR: set min sdk to 3.0.0. (754fa497)
• REFACTOR: support for pointycastle ^4.0.0. (64480c07)

• FIX: Move early return check before creating completer to prev…

• FIX: Move early return check before creating completer to prevent incomplete completer bug. (793bffa3)
• FIX: Prevent race condition in Credential.getTokenResponse. (e38d76a9)

• FIX: use proper authentication in revoke endpoint (issue [#83]…

• FIX: use proper authentication in revoke endpoint (issue #83). (09d49652)
• FIX: Exception thrown before redirecting on web (#76). (7c803048)
• FEAT: add support for additional parameters (pull request #101 from twklessor). (dee2e3b5)

• FIX: update contentSecurityPolicy of keycloak server to allow …

• FIX: update contentSecurityPolicy of keycloak server to allow silent refresh with iframe. (df9ef506)
• FIX: initial token persisted in browser Authenticator. (a4ac2c50)
• FIX: logout from Authenticator on web. (05343c8a)
• FIX: length of random string always 50. (850acc96)
• FIX: bug only first supported scope included in the auth request (pull request #63 from insertjokehere). (fd2f3b3e)
• FEAT: add optional prompt parameter to Flow and Authenticator constructors. (f0af92fc)
• FEAT: add trySilentRefresh method to browser Authenticator. (e74d8e3f)
• FEAT: add device parameter to implicit flow. (5a6bf046)
• FEAT: add support for password flow. (c89d11b1)
• FEAT: add scopes argument to Flow.authorizationCodeWithPKCE constructor (pull request #64 from insertjokehere). (bd37e6d9)
• FEAT: added possibility to hide or change message after redirect (pull request #66 from BetterBOy). (aafaab80)
• DOCS: add docs to Authenticators. (65f9b285)
• DOCS: fix logout button in browser_example. (70ffbebc)
• DOCS: add funding info. (e006d6de)
• DOCS: add example usage with keycloak server. (a2939419)

Changelog

• REFACTOR: upgrade http dependency (pull request [#94](https://…

• REFACTOR: upgrade http dependency (pull request #94 from wstrange). (bb3fbac5)

• keep old refresh token when access token refreshed and no new refresh token received

• handle tokens without expiration

• added onTokenChanged stream to Credential
• added Authenticator.fromFlow constructor

• handle non successful http requests correctly, throwing either an OpenIdException when the response is in the openid error format or an HttpRequestException otherwise

• Bugfixes

• Null safety

• Fix not using Client's httpClient for getTokenResponse

• Add http.Client arguments
• Breaking change: clientSecret is now a named argument in Client constructor
• Add optional forceRefresh argument to getTokenResponse
• Add fromJson and toJson to Credential
• Add revoke method to Credential
• Add generateLogoutUrl method to Credential

• Add jwtBearer flow for grant_type urn:ietf:params:oauth:grant-type:jwt-bearer
• Added getTokenResponse method
• Added createHttpClient method

• Allow only signing algorithms specified in id_token_signing_alg_values_supported parameter of issuer metadata

• Fix Authorization Code PKCE flow

• Dart 2/flutter compatibility

• Initial version