From 2fbc85ee128cfdf7a1521bbc9554424e9ba510da Mon Sep 17 00:00:00 2001 From: Xiyue Deng Date: Tue, 30 Jul 2024 03:46:57 -0700 Subject: [PATCH 6/6] Add NEWS file to document the changes to plstore id generation --- NEWS | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 NEWS diff --git a/NEWS b/NEWS new file mode 100644 index 0000000000..6715a1914a --- /dev/null +++ b/NEWS @@ -0,0 +1,23 @@ +Summary of changes to oauth2.el +------------------------------- + +For changes of 0.16 and older or full changes please check the git +history of the repository of oauth2.el. + +* 0.17 + +** Changes to plstore id generation and needs to reacquire refresh_token + +The generation of plstore id used to include `auth-url', `token-url', +and `scope'. Now `client-id' is also included. This is required to +support multiple accounts of some providers which use the same +`auth-url', `token-url', and `scope' (e.g. Gmail), and hence the +generated plstore id is not unique amount accounts. Adding +`client-id' solves this problem. + +The hash function of calculating the plstore id has also changed from +MD5 to SHA512 to be more secure. + +As a result, users of oauth2.el will need to redo the authentication +process to get a new refresh_token when upgrading from older version +to 0.17. -- 2.39.2