1. Updated dependencies.

2. Preserve query string params inauthorizationUri (Fixed#144 with#153).
Now whenauthorizationUri contains contains query string parameters, they are preserved ongetUri methods calls.

Affects methods:ClientOAuth2.token.getUri,ClientOAuth2.code.getUri.

E.g. havingauthorizationUri=https://example.com/foo?bar=qux and callinggetUri method, the output would be:
Before:https://example.com/foo?bar=qux?client_id=....
Now:https://example.com/foo?bar=qux&client_id=....

3. Do not send empty scopes to an auth server (Fixed#98 with#154).
Ifscopes is set to"" or[] then we send an empty string to an auth server. Ifscopes is undefined (not set), then we don't send it at all.

Affects method:getUri,ClientOAuth2.owner.getToken,ClientOAuth2.credentials.getToken,ClientOAuth2.jwt.getToken,ClientOAuth2.token.getUri,ClientOAuth2.code.getUri.

• Fixedwindow.btoa call issue in Internet Explorer 11 and Edge (Chromium). Contributed reports and PRs:#150,#148,#78,#70

• Updated dependencies
• Dropped Node 8 support

Fixed

• getToken succeeds when token is not supplied#59
• updated dependencies (using Greekeeper onward)

Fixed

• Merge query over default options withgetUri methods

Changed

• Send authorization header with code flow instead ofclient_secret in the body
• Merge the global and passed inoptions over the local request options (allowing you to override things likegrant_type orresponse_type)
• Updated build and dependencies to use ES2015 language features (namelyObject.assign)

Fixed

• Tweak TypeScript definition - makescope an array of strings, andrequest is optional in constructor

Changed

• Allow thegetToken method to receive the URI pre-parsed and as a partial URL object

Added

• Publish a TypeScript definition for the library

Changed

• Update and documentexpiresIn for setting expiration as a number orDate