From 67883bfc09b7ef58c09f29c5846e5a3c5462c651 Mon Sep 17 00:00:00 2001
From: Ashlynne Mitchell <ovy@ovyerus.com>
Date: Wed, 22 Apr 2026 16:50:22 +1000
Subject: [PATCH] docs: update changelog

---
 CHANGELOG.md | 39 +++++++++++++++++++++++++++++++--------
 1 file changed, 31 insertions(+), 8 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 238d1f8..433acbb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,16 +8,39 @@ and this project adheres to
 
 ## [Unreleased]
 
-- Fix `raw_input` not actually being set as the request's body in
-  `Atex.XRPC.post/3` when providing a struct as input.
-
 ### Breaking Changes
 
-- `Atex.OAuth.get_key/0` removed — use `Atex.Config.OAuth.get_key/0` directly
-- `Atex.OAuth.create_client_metadata/1`, `create_client_assertion/3`, `create_authorization_url/5`, `validate_authorization_code/5`, `refresh_token/5`, `revoke_tokens/2` moved to `Atex.OAuth.Flow`
-- `Atex.OAuth.create_dpop_token/4`, `send_oauth_dpop_request/3`, `request_protected_dpop_resource/5` moved to `Atex.OAuth.DPoP`
-- `Atex.OAuth.get_authorization_server/2`, `get_authorization_server_metadata/2` moved to `Atex.OAuth.Discovery`
-- Error atom `:invaild_issuer` corrected to `:invalid_issuer`
+- `Atex.OAuth` refactor:
+  - `Atex.OAuth.get_key/0` removed - use `Atex.Config.OAuth.get_key/0` directly
+  - `Atex.OAuth.create_client_metadata/1`, `create_client_assertion/3`,
+    `create_authorization_url/5`, `validate_authorization_code/5`,
+    `refresh_token/5`, `revoke_tokens/2` moved to `Atex.OAuth.Flow`
+  - `Atex.OAuth.create_dpop_token/4`, `send_oauth_dpop_request/3`,
+    `request_protected_dpop_resource/5` moved to `Atex.OAuth.DPoP`
+  - `Atex.OAuth.get_authorization_server/2`,
+    `get_authorization_server_metadata/2` moved to `Atex.OAuth.Discovery`
+  - Error atom `:invaild_issuer` corrected to `:invalid_issuer` in
+    `Atex.OAuth.Discovery`
+- `Atex.Config.OAuth.is_localhost/0` renamed to `Atex.Config.OAuth.localhost?/0`
+- `Atex.ServiceAuth.validate_jwt/2` now returns `{:error, :invalid_jwt}` on
+  malformed input instead of raising
+
+### Added
+
+- `Atex.OAuth.session_keys_name/0` and
+  `Atex.OAuth.session_active_session_name/0` expose Plug session key atoms
+- `Atex.IdentityResolver` now has full module and function documentation
+- `Atex.XRPC.LoginClient` now has a `@moduledoc`
+
+### Fixed
+
+- Fix `raw_input` not actually being set as the request's body in
+  `Atex.XRPC.post/3` when providing a struct as input.
+- `Atex.XRPC.LoginClient.handle_failure/3` now returns consistent 3-tuples
+  `{:error, response, client}`
+- `Atex.OAuth.Cache` metadata cache `ttl_check_interval` corrected to 5 minutes
+  (was 30 seconds)
+- Typo in `Atex.OAuth.Error` moduledoc corrected ("extesion" -> "exception")
 
 ## [0.9.1] - 2026-04-17
 
-- 
2.51.2