5.6.0
Features
- JWTs can now be created from both SecurityTokenDescriptor.Subject and SecurityTokenDescriptor.Claims (#1193).
- Added support for 'typ' header claim validation to JwtSecurityTokenHandler and JsonWebTokenHandler (#1220).
- Added support for creating unsigned JWTs in JsonWebTokenHandler (#1204).
- Added support for creating custom JWT header claims in JsonWebTokenHandler (#1210).
- Added support for creating a JWT with an empty payload in JsonWebTokenHandler (#1237).
- Added a setter for the AuthenticationProtocolMessage.Script property (#1193).
Bug Fixes
- The OpenIdConnectConfiguration.SigningKeys property is no longer used during JSON serialization and deserialization (#1242).
- RSACryptoServiceProviderProxy now properly disposes an RSA instance (#1240).
- DtdProcessing.Prohibit is now explicitly set when creating an XmlReader (#1258).
- JsonWebTokenHandler.CreateToken() now adds iat, nbf, and exp as longs not strings (#1207).
- DateTime claim processing is now corrected and consistent (#1261).
- Various improvements to the documentation.
Click here for a full list of issues that were fixed in this release.