summaryrefslogtreecommitdiff
path: root/NEWS
diff options
context:
space:
mode:
authorLars Wirzenius <liw@liw.fi>2018-11-05 09:56:36 +0200
committerLars Wirzenius <liw@liw.fi>2018-11-05 09:56:36 +0200
commitdf351c2661cd838e1b7de521f1fcd4f84acdf4a0 (patch)
tree5ebbab360420bcd299d53ddd330b654fc67837e4 /NEWS
parent5a74ba9553fd21465e04dd4ace7007e2f865d7f1 (diff)
downloadqvisqve-df351c2661cd838e1b7de521f1fcd4f84acdf4a0.tar.gz
Add: sub fields to clients, tokens created by client-cred grant
Diffstat (limited to 'NEWS')
-rw-r--r--NEWS5
1 files changed, 5 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index d6729ac..cd65c84 100644
--- a/NEWS
+++ b/NEWS
@@ -24,6 +24,11 @@ Version 0.10+git, not yet released
* Change: the HTML code for the login form is now in a separate file,
so it is easier to style.
+* API clients may now have a `sub` field, and if they do, tokens
+ created using the client credentials grant variant of OAuth2 get
+ their `sub` claim set accordingly. This is a first step towards
+ allowing users to authorize API clients to act on their behalf.
+
Version 0.9, released 2018-02-09
---------------------------------