cloudflare/workers-oauth-provider v0.7.2

v0.7.2

Repository: cloudflare/workers-oauth-provider

Tag: v0.7.2

Published: 2026-06-04T08:22:06Z

Prerelease: no

Release notes:

Patch Changes

• #222 `45397d8` Thanks @mattzcarey! - Add an opt-in allowPublicClients flag to enterpriseManagedAuthorization.

By default the enterprise-managed authorization (ID-JAG) grant requires client authentication, so public clients (token_endpoint_auth_method: 'none') are rejected. Setting allowPublicClients: true also accepts public clients on this grant — for example clients registered via a Client ID Metadata Document (CIMD), which are always public and cannot present a client secret. The default remains false, preserving existing behavior.