# [2.0.0](https://git.boundstatesoftware.com/boundstate/hapi-oidc-auth/compare/v1.1.1...v2.0.0) (2019-06-20)

### Features

- update dependencies ([4a1808b](https://git.boundstatesoftware.com/boundstate/hapi-oidc-auth/commit/4a1808b))

### BREAKING CHANGES

- peer dependency of @hapi/hapi >=17 <19

## [1.1.1](https://git.boundstatesoftware.com/boundstate/hapi-oidc-auth/compare/v1.1.0...v1.1.1) (2019-02-06)

### Bug Fixes

- access exposed plugin at correct path ([a65e526](https://git.boundstatesoftware.com/boundstate/hapi-oidc-auth/commit/a65e526))

# [1.1.0](https://git.boundstatesoftware.com/boundstate/hapi-oidc-auth/compare/v1.0.0...v1.1.0) (2019-02-06)

### Features

- augment Hapi typings ([cd508ef](https://git.boundstatesoftware.com/boundstate/hapi-oidc-auth/commit/cd508ef))

# [1.0.0](https://git.boundstatesoftware.com/boundstate/hapi-oidc-auth/compare/v0.0.5...v1.0.0) (2019-02-06)

### Features

- update dependencies ([8a6eeb4](https://git.boundstatesoftware.com/boundstate/hapi-oidc-auth/commit/8a6eeb4))

### BREAKING CHANGES

- peer dependency of Hapi >=17

- breaks compatibility with some providers when using `client_secret_basic` (default)
  (see the [openid-client changelog](https://github.com/panva/node-openid-client/blob/master/CHANGELOG.md#version-201))

  To maintain compatibility with such providers, use the `client_secret_post` auth method.

  i.e. for dynamic registration:

  ```typescript
  await this.hapi.register({
    plugin: hapiOidcAuth,
    options: {
      dynamicRegistration: {
        clientMetadata: {
          token_endpoint_auth_method: 'client_secret_post',
          ...
  ```

<a name="0.0.5"></a>

## [0.0.5](https://git.boundstatesoftware.com/boundstate/hapi-oidc-auth/compare/v0.0.4...v0.0.5) (2018-04-27)

### Features

- expose `allowQueryToken` option ([8873271](https://git.boundstatesoftware.com/boundstate/hapi-oidc-auth/commit/8873271))

<a name="0.0.4"></a>

## [0.0.4](https://git.boundstatesoftware.com/boundstate/hapi-oidc-auth/compare/v0.0.3...v0.0.4) (2018-04-03)

### Bug Fixes

- handle invalid client as bad credentials ([423085a](https://git.boundstatesoftware.com/boundstate/hapi-oidc-auth/commit/423085a))

### Features

- option to verify dynamic client and register if necessary ([ad8ba54](https://git.boundstatesoftware.com/boundstate/hapi-oidc-auth/commit/ad8ba54))
- update to openid-client 1.20.0 ([82bd283](https://git.boundstatesoftware.com/boundstate/hapi-oidc-auth/commit/82bd283))

<a name="0.0.3"></a>

## [0.0.3](https://git.boundstatesoftware.com/boundstate/hapi-oidc-auth/compare/v0.0.2...v0.0.3) (2017-11-12)

### Features

- method to get client and better typings ([51fb316](https://git.boundstatesoftware.com/boundstate/hapi-oidc-auth/commit/51fb316))

<a name="0.0.2"></a>

## [0.0.2](https://git.boundstatesoftware.com/boundstate/hapi-oidc-auth/compare/v0.0.1...v0.0.2) (2017-11-12)

### Features

- support for dynamic registration ([a620186](https://git.boundstatesoftware.com/boundstate/hapi-oidc-auth/commit/a620186))

### BREAKING CHANGES

- plugin options changes (see README)