Skip to content

Latest commit

 

History

History
36 lines (19 loc) · 1.83 KB

v4-changes.md

File metadata and controls

36 lines (19 loc) · 1.83 KB
Raw

Breaking changes

  • Removal of previously marked obsolete methods and properties

    Most members previously marked as obsolete were removed.

  • AuthenticationClient.AuthenticateAsync() is now calling the /oauth/token endpoint using the Resource Owner Password grant type, and thus it requires a ClientSecret in the AuthenticationRequest for confidential clients.

  • The Connection property in AuthenticationRequest is renamed Realm, and is now optional.

    If not provided, the Authentication API will use the connection specified as the Default Directory in the Account Settings.

  • The token refresh exchange must be done using the AuthenticationClient.GetRefreshedTokenAsync() with a TokenRefreshRequest instead of using AuthenticationClient.GetDelegationTokenAsync() with a RefreshTokenDelegationRequest.

  • The AccessToken class returned on authentication methods is renamed AccessTokenResponse.

  • AuthenticationClient.AuthenticateAsync() now returns an AccessTokenResponse instead of AuthorizationResponse.

  • The AuthenticationClient.GetUserInfoAsync() method now returns a UserInfo class instead of User.

  • Removed GetTokenInfoAsync method, based on the deprecated /tokeninfo endpoint.

  • Removed GetAccessTokenAsync method, based on the deprecated /oauth/access_token endpoint.

  • Remove WithDevice() method from AuthorizationUrlBuilder, because of obsoleted device parameter.

Non-breaking changes

  • AuthorizationUrlBuilder now supports adding nonce, audience, response_mode and multiple response_types to the /authorize URL.

  • LogoutUrlBuilder now uses the v2/logout endpoint, and supports the federated and clientId values.

  • Removal of (unused) class OAuthToken.