Authorio 0.8.5 fixes bugs that were found through field testing.
I’ve got some decent integration tests for Authorio, but some bugs are best found through field testing. This release fixes two significant bugs:
- The PKCE flow wasn’t triggering properly. Authorio now properly verifies the code challenge.
- The Return key wasn’t the default if the authentication dialog was cancellable. Now you can enter your password and hit return and it just works.
The IndieAuth Popup reaised the issue of refresh tokens, and also token introspection. I feel that both of those will be added to the spec soon and I’ll add that to Authorio when it happens.