OpenIddict 5.0 general availability

Almost exactly a year after OpenIddict's last major release, I'm very pleased to announce that 5.0 is now generally available! 🎉

What's new?

While most of the new features were already gradually added to the 4.x branch throughout 2023, some of them required introducing breaking changes and had to wait for 5.0:

  • Relaxed redirect_uri comparison policies for native applications.
  • Per-client static token lifetimes.
  • Client assertions support for the server and validation stacks.

If you're interested in learning more about these new features, don't miss this post: Introducing native applications, per-client token lifetimes and client assertions support in OpenIddict 5.0 preview1.

Migration

While OpenIddict 5.0 comes with some breaking changes, the migration process should be fairly easy. To help users with this process, an OpenIddict 5.0 migration guide was added to the documentation.

OpenIddict 5.0 is fully compatible with ASP.NET Core 2.1 (on .NET Framework), ASP.NET Core 6.0, ASP.NET Core 7.0 and ASP.NET Core 8.0, so the migration can be done without having to upgrade to the latest .NET runtime/ASP.NET Core version.

Support

With OpenIddict 5.0 being now generally available, the previous version, OpenIddict 4.0, stops being supported and won't receive bug fixes or security updates. As such, it is recommended to migrate to OpenIddict 5.0 to continue receiving bug and security fixes.

Unlike the previous major version, there are however two exceptions to this policy:

  • ABP Framework 7.0 users will still receive patches for OpenIddict 4.x for as long as ABP Framework 7.0 itself is supported by Volosoft (typically a year following the release of ABP 8.0), whether they have a commercial ABP license or just use the free packages.

  • OpenIddict sponsors who have opted for a $250+/month sponsorship are now offered extended support:

    • $250/month sponsors get full support for OpenIddict 4.x until June 18, 2024 (6 months).
    • $500/month sponsors get full support for OpenIddict 4.x until December 18, 2024 (12 months).
    • $1,000/month sponsors get full support for OpenIddict 4.x until December 18, 2025 (24 months).

Acknowledgements

As always, a new major release is a great opportunity to thank all the sponsors who have helped keep OpenIddict free for everyone:

Volosoft logo

Sébastien RosSchmitt ChristianFlorian WachsSebastian StehleCommunicatie CockpitJasmin SavardThomasMCeeDigitalOps Co. Ltd.EYERIDE Fleet Management SystemJulien DebacheStian HåveRavindu LiyanapathiranaHieronymusBlazeAkhan ZhakiyanovCorentin BROSSUTTIBarry DorransDevQ S.r.l.GrégoireAndrii ChebukinForterroMarcelJens WillmerBlauhaus Technology (Pty) LtdJan TrejbalAviationexam s.r.o.MonoforRatiodata SEDennis van ZettenJeroenElfsterJohn

Merry Christmas everyone! 🎄 🎁