David Ramos

[4.0.0-rc.1](https://crates.io/crates/openidconnect/4.0.0-rc.1) is now released, so the API is considered stable (i.e., no further breaking changes) for 4.x. If there are no further bugs filed in the next few weeks I'll...

> GitHub, Google, GitLab, Microsoft, Apple, Discord, and many other providers. Ah whoops, I think I was confusing GitHub's support for OIDC [from within Actions](https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/configuring-openid-connect-in-cloud-providers) for its own API auth,...

I updated the README for accuracy in fcada1718118cfebfaa874e8b1920cd1dbc2b358. Thanks for pointing out those issues! I was too hasty in adding those a few weeks ago.

I'd suggest using the `state` value to carry arbitrary payload in addition to a CSRF token (e.g., as a base64url-encoded JSON blob). The OIDC provider will include the `state` you...

Hey @jgiacomoni, This can currently be done using [`AuthorizationRequest::add_extra_param`](https://docs.rs/openidconnect/latest/openidconnect/struct.AuthorizationRequest.html#method.add_extra_param), where `claims` is the name and the serialized JSON is the value. The value will be URL-encoded automatically, so just pass...

I think the current behavior is a sensible default for most use cases. For special use cases, I'd suggest fetching the `openid-configuration` manually (since it's a simple HTTP GET request)...

is there a vulnerability or something that justifies bumping the dependency to a pre-release version?

See https://github.com/ramosbugs/openidconnect-rs/issues/160#issuecomment-2063885944 JWT functionality adds significant complexity that I don't want to add as a maintenance burden to this crate. Instead, it can be built as a separate crate on...

Hey, thanks for the PR. I'd prefer not to add `openid` to the examples in this crate since the `openidconnect` crate is specifically intended for this use case and already...

Yeah I agree. The examples should do a better job of documenting how to set up the corresponding provider to work with each example.