v5.0.1

tinyauthapp/tinyauthv5.0.1Mar 4, 2026by steveiliop56

AI Summary

A patch fixing config file loading issues and OIDC implementation problems to meet certification goals.

Key Highlights

Config file loading via experimental flag or environment variable
OIDC implementation fixes to pass basic certification tests

New Features

Experimental config file support
Ensure `kid` is present in the JWKS response
Ensure nonce is being acknowledged in the ID token response
Ensure `email_verified` is present as a claim in the ID token
Ensure cache control headers are set on the token endpoint

Full Release Notes

# Tinyauth v5.0.1

Hey everyone, this is a small patch release addressing a config file loading issue (can now be loaded with `--experimental.configfile` or `TINYAUTH_EXPERIMENTAL_CONFIGFILE`) and fixing issues in the OIDC implementation moving towards the certification goal. You can check the OIDC testing status in the [OpenID Connect Certification Platform](https://www.certification.openid.net/plan-detail.html?plan=twxY3fMtRgdPe&public=true) (this release ensures basic oidcc-server passes).

## Fixes

- Ensure `kid` is present in the JWKS response
- Handle empty client name in authorize page
- Use correct environment variable and flag for config loading
- Ensure nonce is being acknowledged in the ID token response
- Ensure `email_verified` is present as a claim in the ID token and user info response
- Ensure cache control headers are set on the token endpoint

## Technical

- Bump dependencies
- Update translations

Please let me know of any issues so as I can fix them as soon as possible.