Version Number : 3.0.28
Overview
This minor update introduces changes for Authlete 3.0. This new version is available from March 26th (Thu).New Features & Improvements
AWS KMS support
Added support for AWS KMS as a new HWM provider.Token update API improvements
Implemented support for usingrefreshToken and refreshTokenHash as identifiers in the /auth/token/update API.
Server properties definition improvements
Removed unused server properties, and consolidated default property definition logic.Specs support
OAuth SPIFFE support
Added support for OAuth SPIFFE Client Authentication using JWT-SVIDs- Added required client metadata parameters
Bug fixes
Client alias cache flow issue
Fixed an issue where a newly created client alias could be used to attempt to delete older related entries in the cache.VCI encryption request fix
Fixed an issue where a VCI encryption request holding acredential_response_encryption without the optional ‘zip’ parameter would result in NPE.
Service update augit logs fix
Fixed an issue where the service update audit logs would be missing theapi_key in some cases.
Credential request fix
Fixed an issue where the credential request would returninvalidRequest instead of invalidProofs in some cases.
CIMD error code fix
Fixed an issue where the CIMD endpoints would return401 Unauthorized instead of 400 Bad Request on registration, metadata retrieval and metadata validation failures.