Version Number : 3.0.8

Overview

This minor update introduces changes for Authlete 3.0. This new version was made available on December 26th (Thu).

New Features & Improvements

N/A

Specs support

Audience check improvements

Added new service parameter for client assertion’s audience check.

Client attestation validation

Updated logic to validate the typ header parameter of presented Client Attestation JWT and Client Attestation PoP JWT, in accordance with 4th draft of OAuth 2.0 Attestation-Based Client Authentication.

Bug fixes

Inactive orphaned token fix

Updated standard introspection behavior to mark tokens without associated client applications as active.

Response Type NPE fix

Fixed NPE on sending requests that do not include the responseType parameter.

Client Update API fix

Fixed a bug where token exchange permission parameter could not be updated through the client/update API.

Other

N/A