Version Number : 3.0.31
Overview
This minor update introduces changes for Authlete 3.0. This new version is available from April 30th (Thu).New Features & Improvements
Client deletion improvements
Added cleanup queue to client deletion flow in order to minimize impact when working with a large number of entities.Flexible service tokens
Added the following permissions to Service Access Tokens :VIEW_SERVICEVIEW_CLIENTUSE_INTROSPECTIONUSE_SERVICECREATE_CLIENTMODIFY_CLIENTMODIFY_SERVICE
Authorization Code Duration
Implemented capability to setauthorization_code_duration at service level.
Specs support
OID4VCI update
Updated OID4VCI implementation to include Key Attestation signature verification feature.HAIP support
Implemented the required validation steps and service properties to support HAIP specification.- Allows OAuth 2.0 Attestation-Based Client Authentication (ABCA) as a client authentication method
- When client authentication method is ABCA, will perform additional validation on Client Attestation JWT and Client Attestation PoP JWT
- When OpenID for Verifiable Credential Issuance (OID4VCI) is enabled, will verify that the
scopeparameter includes values referring to credential configurations - Always requires DPoP (RFC 9449 OAuth 2.0 Demonstrating Proof of Possession (DPoP))
- For more information on HAIP, documentation is available here