# @osdk/oauth ## 1.14.0 ### Minor Changes - 488376f: Configure the CI JUnit reporter in each package's vitest config instead of passing it as a turbo `--` argument. Turbo folds passthrough arguments into its global hash, so passing them there made every task in a `turbo run test` invocation a cache miss rather than only the `test` tasks. Test configuration only; no runtime or API changes. ## 1.13.0 ### Minor Changes - 1b33456: Enable the require-await lint rule: drop the redundant `async` keyword from test callbacks that never await, and keep intentionally-async (Promise-returning) functions as-is ## 1.12.0 ### Minor Changes - 6010d45: Migrate @osdk/aip-core, @osdk/foundry-config-json, @osdk/seed-compiler, @osdk/seed-helpers, @osdk/oauth, @osdk/faux, and @osdk/osdk-docs-context to lint with oxlint and format with oxfmt (configured via Ultracite) instead of ESLint and dprint (eleventh increment of the repo-wide oxc migration; the standard libraries). Each package is reformatted with oxfmt, with its newly-surfaced error-level lint rules turned off in a nested oxlint config to keep the change behavior-preserving. ## 1.11.0 ### Minor Changes - e681893: Add Supported Client for Public Apps ## 1.10.0 ### Minor Changes - 56c5630: Drop redundant `--config $(find-up dprint.json)` from `lint`, `fix-lint`, and `format` scripts. dprint already auto-discovers `dprint.json` by walking up from cwd; the substitution was a no-op anyway since `find-up` is an npm package, not a CLI. Also fix the `uploadMediaOntologyEdits` documentation example so its `// @ts-ignore` survives dprint reformatting (the broken `format` step had been masking this). ## 1.9.0 ### Minor Changes - f01a8f4: improvements(build): significant reduction in build task graphs ## 1.8.0 ### Minor Changes - 322c5bc: Simulated release - 05cae47: Add optional `logger` parameter to `createPublicOauthClient` for consumer-controlled warning output - 4cd7389: Remove delay dependency - 35f2f1a: Add Media inputs/outputs for Queries - c9d954d: Add `tokenStorage` option to `createPublicOauthClient` to control refresh token storage. Supports `'localStorage'` (default), `'sessionStorage'` (recommended for shared devices), or `'none'` (most secure, re-authenticates on every page load). ## 1.8.0-beta.5 ### Minor Changes - 05cae47: Add optional `logger` parameter to `createPublicOauthClient` for consumer-controlled warning output ## 1.8.0-beta.4 ### Minor Changes - 35f2f1a: Add Media inputs/outputs for Queries ## 1.8.0-beta.3 ### Minor Changes - 4cd7389: Remove delay dependency ## 1.8.0-beta.2 ### Minor Changes - c9d954d: Add `tokenStorage` option to `createPublicOauthClient` to control refresh token storage. Supports `'localStorage'` (default), `'sessionStorage'` (recommended for shared devices), or `'none'` (most secure, re-authenticates on every page load). ## 1.7.0-beta.2 ### Minor Changes - cceaedf: Export `ConfidentialOauthClient` from `oauth` ## 1.5.0 ### Patch Changes - 322c5bc: Simulated release ## 1.4.0-beta.2 ### Minor Changes - 8c8ecf0: Added Public Apps Support ## 1.2.0 ### Patch Changes - 322c5bc: Simulated release - cbd4ea9: Discard refresh token if requested scopes have changed - 0e0935e: Added api:use-ontologies-read/write to the default scope initialization ## 1.2.0-beta.3 ### Minor Changes - 0e0935e: Added api:use-ontologies-read/write to the default scope initialization ## 1.2.0-beta.2 ### Minor Changes - cbd4ea9: Discard refresh token if requested scopes have changed ## 1.1.0 ### Minor Changes - 25fd9f0: Updating package.json to have better entry points to support react native bundlers. - 0166d14: Fixes an infinite redirect issue on some errors in the OAuth flow - e968bc0: Use api:ontologies-X instead of api:X-data - 44e62f6: Updating fetch for auth and other packages. - 91cfa3a: Fixing url parsing for client. - d501104: Adds unit testing of public oauth flow - 9d35a1f: Remove unused imports - c691c8b: Package now has experimental support for commonjs - 9df2d99: Fixes CJS generation for OAuth - 33590c7: Add tests for createPublicOauthClient overload - 02685ab: Adding return types to functions. - c9da74c: Improves code quality by fixing linting errors - 91cfa3a: Fixing URL parsing for custom entry points. - 3d2ba6f: Revert api:x-read/write back to api:read/write-x - d12c92b: Fixes process.env.NODE_ENV handling - e00bb29: Overload createPublicOauthClient to support object of options - 696c59c: Enables additional metadata to be required to match a refresh token in local storage ## 1.1.0-beta.11 ### Minor Changes - 9df2d99: Fixes CJS generation for OAuth ## 1.1.0-beta.10 ### Minor Changes - 44e62f6: Updating fetch for auth and other packages. ## 1.1.0-beta.9 ### Minor Changes - c691c8b: Package now has experimental support for commonjs ## 1.1.0-beta.8 ### Minor Changes - 02685ab: Adding return types to functions. - 696c59c: Enables additional metadata to be required to match a refresh token in local storage ## 1.1.0-beta.7 ### Minor Changes - 0166d14: Fixes an infinite redirect issue on some errors in the OAuth flow - c9da74c: Improves code quality by fixing linting errors ## 1.1.0-beta.6 ### Minor Changes - 3d2ba6f: Revert api:x-read/write back to api:read/write-x ## 1.1.0-beta.5 ### Minor Changes - 9d35a1f: Remove unused imports ## 1.1.0-beta.4 ### Minor Changes - e968bc0: Use api:ontologies-X instead of api:X-data ## 1.1.0-beta.3 ### Minor Changes - 91cfa3a: Fixing url parsing for client. - d501104: Adds unit testing of public oauth flow - 91cfa3a: Fixing URL parsing for custom entry points. ## 1.1.0-beta.2 ### Minor Changes - 33590c7: Add tests for createPublicOauthClient overload - e00bb29: Overload createPublicOauthClient to support object of options ## 1.1.0-beta.1 ### Minor Changes - 25fd9f0: Updating package.json to have better entry points to support react native bundlers. ## 1.1.0-beta.0 ### Minor Changes - d12c92b: Fixes process.env.NODE_ENV handling ## 1.0.0 ### Major Changes - 7e90f77: Releasing first major version of oauth package. ### Minor Changes - cad781e: PublicClient allows relative paths for login pages - 1252d94: ESM Only - cad781e: adds getTokenOrUndefined() to oauth clients - cad781e: Redirects to root when visiting an old auth callback - cad781e: Fixes a bug where process.env was being emitted - d80e2ec: Fixes a bug that can occur during the login flow - cad781e: Uses default scopes when provided an empty array - d4d6605: Audited and cleaned up deps ## 0.4.0-beta.3 ### Minor Changes - d4d6605: Audited and cleaned up deps ## 0.4.0-beta.2 ### Minor Changes - d80e2ec: Fixes a bug that can occur during the login flow ## 0.4.0-beta.1 ### Minor Changes - 1252d94: ESM Only ## 0.4.0-beta.0 ### Minor Changes - cad781e: PublicClient allows relative paths for login pages - cad781e: adds getTokenOrUndefined() to oauth clients - cad781e: Redirects to root when visiting an old auth callback - cad781e: Fixes a bug where process.env was being emitted - cad781e: Uses default scopes when provided an empty array ## 0.3.0 ### Minor Changes - bc89b62: Spelling fixes and spell check in CI - b62ac80: Adds createConfidentialOauthClient ## 0.3.0-beta.0 ### Minor Changes - bc89b62: Spelling fixes and spell check in CI ## 0.2.0 ### Minor Changes - b1518b3: Fixes issue with **DEV** not being defined