diff --git a/CHANGELOG.md b/CHANGELOG.md index 2bb0d2d61..61cd99a3b 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -9,6 +9,8 @@ User-visible changes worth mentioning. Add your entry here. +- [#1705] Add `force_pkce` option that requires non-confidential clients to use PKCE when requesting an access_token using an authorization code + ## 5.7.0 - [#1696] Add missing `#issued_token` method to `OAuth::TokenResponse` @@ -16,7 +18,6 @@ Add your entry here. - [#1702] Fix bugs for error response in the form_post and error view - [#1660] Custom access token attributes are now considered when finding matching tokens (fixes #1665). Introduce `revoke_previous_client_credentials_token` configuration option. -- [#1705] Add `force_pkce` option that requires non-confidential clients to use PKCE when requesting an access_token using an authorization code ## 5.6.9