v0.7.0

• [BC] This module now uses ZfrOAuth2Server 0.7. For learn more about the changes, have a look at the ZfrOAuth2Server changelog: https://github.com/zf-fr/zfr-oauth2-server/releases/tag/0.7.0

v0.6.0

• [BC] Raised minimum dependency to ZfrOAuth2Server 0.6

v0.5.0

• [BC] Raised minimum dependency to ZfrOAuth2Server 0.5. This includes support for token revocation. This module now exposes a new "revoke" route that can be used to revoke an access or refresh token.

v0.4.0

• [BC] Raised minimum dependency to ZfrOAuth2Server 0.4. This includes support for multiple redirect URIs in client, so that the table schema is slightly modified ("redirect_uri" column in Client has been replaced by a "redirect_uris" column, with a different data type).

v0.3.0

• Raised dependency to ZfrOAuth2Server 0.3. This release includes support for event manager.

v0.2.0

• [BC] The AccessTokenAdapter was unused (and useless in OAuth2 context) and is therefore now gone.

v0.1.2

This release contains an important security fix. Before this release, people could reuse an expired token if it was not deleted once expiration time was reached.

v0.1.1

• Console command now delete expired refresh tokens and expired authorization codes too

v0.1.0

• Initial release!