ABANDONED-RENOVATE chore(deps): update dependency duende.accesstokenmanagement to v2.1.2

[marvin-serp-bot]

This PR contains the following updates:

Package	Type	Update	Change
Duende.AccessTokenManagement	nuget	minor	2.0.3 -> 2.1.2

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

DuendeSoftware/Duende.AccessTokenManagement (Duende.AccessTokenManagement)

v2.1.2

Compare Source

This is a patch release that fixes a bug when using DPoP and Resource Indicators together.

What's Changed

• Fix DPoP proof token creation when resources are used by @​josephdecock in https://github.com/DuendeSoftware/Duende.AccessTokenManagement/pull/90

Full Changelog: DuendeSoftware/Duende.AccessTokenManagement@2.1.1...2.1.2

v2.1.1

Compare Source

This is a patch release that fixes a DPoP bug and updates our dependency on ASP.NET framework packages.

What's Changed

• update dependencies to latest patches by @​brockallen in https://github.com/DuendeSoftware/Duende.AccessTokenManagement/pull/78
  Updated dependency on ASP.NET framework packages from version 8.0.0 to version 8.0.3. This updates our transitive dependency on the System.IdentityModel.Tokens.Jwt and Microsoft.IdentityModel.JsonWebTokens packages past versions that have a known Denial of Service vulnerability.
• Fix handling of dpop nonce sent during token exchange by @​josephdecock in https://github.com/DuendeSoftware/Duende.AccessTokenManagement/pull/79
  Fixes a bug where DPoP nonces provided by authorization servers were not processed correctly.

Full Changelog: DuendeSoftware/Duende.AccessTokenManagement@2.1.0...2.1.1

v2.1.0

Compare Source

What's Changed

• Respect explicitly passed scopes on refresh by @​hybrid2102 in https://github.com/DuendeSoftware/Duende.AccessTokenManagement/pull/43
• Support for .NET 8 by @​josephdecock in https://github.com/DuendeSoftware/Duende.AccessTokenManagement/pull/44

New Contributors

• @​hybrid2102 made their first contribution in https://github.com/DuendeSoftware/Duende.AccessTokenManagement/pull/43
• @​josephdecock made their first contribution in https://github.com/DuendeSoftware/Duende.AccessTokenManagement/pull/44

Full Changelog: DuendeSoftware/Duende.AccessTokenManagement@2.0.3...2.1.0

---

Configuration

📅 Schedule: Branch creation - "anytime" in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[github-actions]

✒️ PR Title Commitlint - ✔️ Lint success!

[dare-renovate]

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

[marvin-serp-bot]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (2.1.2). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.