dex-app release v3.0.0

Changed

  • Breaking: Default oidc.responseTypes to ["code"] only, disabling the insecure OAuth2 implicit flow by default. Any client relying on the implicit or hybrid flow without setting oidc.responseTypes explicitly will stop working. Set oidc.responseTypes explicitly to ["code", "token", "id_token"] to keep them.
  • CI: bump architect orb from 9.4.1 to 10.1.2.