<commit_before># Changelog

See https://github.com/doorkeeper-gem/doorkeeper/wiki/Migration-from-old-versions for
upgrade guides.

User-visible changes worth mentioning.

## main

- [#1528] Don't allow extra query params in redirect_uri
- [#1519] Allow to skip redirect_uri parameter for authorization request as stated in RFC 6749 section 4.1.1.
- [#1525] I18n source for forbidden token error is now `doorkeeper.errors.messages.forbidden_token.missing_scope`.
- [#PR ID] Add your PR description here.

## 5.5.2

- [#1502] Drop support for Ruby 2.4 because of EOL.
- [#1504] Updated the url fragment in the comment for code documentation.
- [#1512] Fix form behavior when response mode is form_post.
- [#1511] Fix that authorization code is returned by fragment if response_mode is fragament.

## 5.5.1

- [#1496] Revoke `old_refresh_token` if `previous_refresh_token` is present.
- [#1495] Fix `respond_to` undefined in API-only mode 
- [#1488] Verify client authentication for Resource Owner Password Grant when
  `config.skip_client_authentication_for_password_grant` is set and the client credentials
  are sent in a HTTP Basic auth header.

## 5.5.0

- [#1482] Simplify `TokenInfoController` to be overridable (extract response rendering).
- [#1478] Fix ownership association and Rake tasks when custom models configured.
- [#1477] Respect `ActiveRecord::Base.pluralize_table_names` for Doorkeeper table names.

## 5.5.0.rc2

- [#1473] Enable `Applications` and `AuthorizedApplications` controllers in API mode.
  
  **[IMPORTANT]** you can still skip these controllers using `skip_controllers` in 
    `use_doorkeeper` inside `routes.rb`. Please do it in case you don't need them.
  <commit_msg>[ci skip] Remove changelog entry, it was reverted<commit_after># Changelog

See https://github.com/doorkeeper-gem/doorkeeper/wiki/Migration-from-old-versions for
upgrade guides.

User-visible changes worth mentioning.

## main

- [#1528] Don't allow extra query params in redirect_uri
- [#1525] I18n source for forbidden token error is now `doorkeeper.errors.messages.forbidden_token.missing_scope`.
- [#PR ID] Add your PR description here.

## 5.5.2

- [#1502] Drop support for Ruby 2.4 because of EOL.
- [#1504] Updated the url fragment in the comment for code documentation.
- [#1512] Fix form behavior when response mode is form_post.
- [#1511] Fix that authorization code is returned by fragment if response_mode is fragament.

## 5.5.1

- [#1496] Revoke `old_refresh_token` if `previous_refresh_token` is present.
- [#1495] Fix `respond_to` undefined in API-only mode 
- [#1488] Verify client authentication for Resource Owner Password Grant when
  `config.skip_client_authentication_for_password_grant` is set and the client credentials
  are sent in a HTTP Basic auth header.

## 5.5.0

- [#1482] Simplify `TokenInfoController` to be overridable (extract response rendering).
- [#1478] Fix ownership association and Rake tasks when custom models configured.
- [#1477] Respect `ActiveRecord::Base.pluralize_table_names` for Doorkeeper table names.

## 5.5.0.rc2

- [#1473] Enable `Applications` and `AuthorizedApplications` controllers in API mode.
  
  **[IMPORTANT]** you can still skip these controllers using `skip_controllers` in 
    `use_doorkeeper` inside `routes.rb`. Please do it in case you don't need them.
  
{'fraction_non_alphanumeric': 0.0948948948948949, 'fraction_numerical': 0.04474474474474475, 'mean_word_length': 4.505785123966942, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 2, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '3980219', 'n_tokens_mistral': 1108, 'n_tokens_neox': 985, 'n_words': 383}