Repository navigation

Tags

v1.1.2

Check resolved addresses of OAuth discovery hosts (#378)

* Check resolved addresses of OAuth discovery hosts

* Unwrap IPv4 mapped addresses before checking they are public

* Pin OAuth requests to vetted addresses and tighten internal host checks

Oct 26, 2026
ab9238c
zip
tar.gz
Immutable . This tag is bound to an immutable release and cannot be reused.
Notes

v1.1.1

Limit the number and length of redirect URIs in dynamic client regist…

…ration (#373)

Co-authored-by: Amp <amp@ampcode.com>

Oct 21, 2026
e77af70
zip
tar.gz
Immutable . This tag is bound to an immutable release and cannot be reused.
Notes

v0.9.7

Limit the number and length of redirect URIs in dynamic client regist…

…ration (#375)

(cherry picked from commit e77af70)

Co-authored-by: Amp <amp@ampcode.com>

Oct 21, 2026
db4a846
zip
tar.gz
Immutable . This tag is bound to an immutable release and cannot be reused.
Notes

v1.1.0

Verify the resource advertises caller supplied OAuth metadata (#371)

* Verify caller supplied resource metadata is advertised by the resource

* Check resource metadata advertisement only from the connect route

* Send client headers and follow same origin redirects when probing the resource

* Verify advertised resource metadata on every redirect and follow cross origin probes

* Let Guzzle follow redirects when probing the resource

* Report a malformed redirect location on Guzzle 7 as an OAuth error

* Report Guzzle redirect failures on Laravel 11 as an OAuth error

Oct 20, 2026
a40cc38
zip
tar.gz
Immutable . This tag is bound to an immutable release and cannot be reused.
Notes

v1.0.2

Reject legacy requests with an unsupported protocol version header (#367

)

Oct 11, 2026
26c7803
zip
tar.gz
Immutable . This tag is bound to an immutable release and cannot be reused.
Notes

v1.0.1

Validate loopback redirect URIs by parsed host and reject userinfo (#349

)

Sep 24, 2026
92987a9
zip
tar.gz
Immutable . This tag is bound to an immutable release and cannot be reused.
Notes

v0.9.6

Validate loopback redirect URIs by parsed host and reject userinfo (#351

)

Sep 24, 2026
57767d6
zip
tar.gz
Immutable . This tag is bound to an immutable release and cannot be reused.
Notes

v1.0.0

formatting

Sep 14, 2026
cfa4f38
zip
tar.gz
Immutable . This tag is bound to an immutable release and cannot be reused.
Notes

v0.9.5

Preserve Explicit App Resource Domains

Sep 9, 2026
923d8d8
zip
tar.gz
Immutable . This tag is bound to an immutable release and cannot be reused.
Notes

v1.0.0-beta.1

Add 1.0 upgrade guide (#319)

* Add 1.0 upgrade guide

* Document the OAuth client ID metadata document changes

* Simplify and restructure UPGRADE.md for clarity

* formatting

---------

Co-authored-by: Taylor Otwell <taylor@laravel.com>

Aug 14, 2026
442ff44
zip
tar.gz
Immutable . This tag is bound to an immutable release and cannot be reused.
Notes

PreviousNext