refactor!: change default on allowOmittingSingleRegisteredRedirectUri

BREAKING CHANGE: Omitting a redirect_uri parameter when a single one is registered is now enabled by default (again). This can be reverted using the `allowOmittingSingleRegisteredRedirectUri` configuration option.
panva · Dec 1, 2022 · d41bb0f · d41bb0f
1 parent 0f93b8c
commit d41bb0f
Show file tree

Hide file tree

Showing 3 changed files with 2 additions and 3 deletions.
diff --git a/docs/README.md b/docs/README.md
@@ -1954,7 +1954,7 @@ Allow omitting the redirect_uri parameter when only a single one is registered f
 
 _**default value**_:
 ```js
-false
+true
 ```
 
 ### claims

diff --git a/lib/helpers/defaults.js b/lib/helpers/defaults.js
@@ -729,7 +729,7 @@ function makeDefaults() {
      *
      * title: Allow omitting the redirect_uri parameter when only a single one is registered for a client.
      */
-    allowOmittingSingleRegisteredRedirectUri: false,
+    allowOmittingSingleRegisteredRedirectUri: true,
 
     /*
      * acceptQueryParamAccessTokens

diff --git a/test/default.config.js b/test/default.config.js
@@ -54,7 +54,6 @@ export default () => ({
   ],
   features: {},
   enabledJWA: cloneDeep({ ...JWA }),
-  allowOmittingSingleRegisteredRedirectUri: true,
   pkce: {
     required: () => false,
   },
-Original file line number
+Diff line change
@@ Expand Up @@
     _**default value**_:
     ```js
-    false
+    true
     ```
     ### claims
@@ Expand Down @@