> ## Documentation Index
> Fetch the complete documentation index at: https://developers.authlete.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Authlete 3.0 Release Notes - March 2026

##### Version Number : 3.0.28

# Overview

This minor update introduces changes for Authlete 3.0.
This new version is available from March 26th (Thu).

# New Features & Improvements

## AWS KMS support

Added support for AWS KMS as a new HWM provider.

## Token update API improvements

Implemented support for using `refreshToken` and `refreshTokenHash` as identifiers in the `/auth/token/update` API.

## Server properties definition improvements

Removed unused server properties, and consolidated default property definition logic.

# Specs support

## OAuth SPIFFE support

Added support for [OAuth SPIFFE Client Authentication](https://datatracker.ietf.org/doc/draft-ietf-oauth-spiffe-client-auth/) using JWT-SVIDs

* Added required client metadata parameters

# Bug fixes

## Client alias cache flow issue

Fixed an issue where a newly created client alias could be used to attempt to delete older related entries in the cache.

## VCI encryption request fix

Fixed an issue where a VCI encryption request holding a `credential_response_encryption` without the optional 'zip' parameter would result in NPE.

## Service update augit logs fix

Fixed an issue where the service update audit logs would be missing the `api_key` in some cases.

## Credential request fix

Fixed an issue where the credential request would return `invalidRequest` instead of `invalidProofs` in some cases.

## CIMD error code fix

Fixed an issue where the CIMD endpoints would return `401 Unauthorized` instead of `400 Bad Request` on registration, metadata retrieval and metadata validation failures.

## Cache flow fix

Fixed an issue where the cache would be updated before committing changes to the database in certain scenarios, which could lead to data inconsistencies.

# Other

N/A