Overview

This minor update introduces changes for Authlete 3.0. This new version was made available on October 30th (Thu).

New Features & Improvements

Environment variables loading improvements

Improved property lookup/resolution to expose all properties as environment variables.

Error handling improvements

Improved error handling of NullPointerException errors in BigQuery Activity Log.

Introspection API improvements

Removed unnecessary checks for the audience value of access tokens and refresh tokens in standard introspection API.

Token import improvements

Added the inScopeForTokenMigration boolean so that users can control the import of tokens when migrating to Authlete 3.0.

Specs support

N/A

Bug fixes

JWE introspection response fix

Fixed an issue where a request including JWE enc value while missing a JWE alg value would return the wrong error code.

FAPI2 MS request fix

Fixed an issue where JWT introspection responses incorrectly needed to be requested in the context of “FAPI2 MS - signing introspection responses”.

Introspection error code fix

Fixed an issue where the standard introspection API would return incorrect error codes when an introspection response is requested.

Introspection response fix

Fixed an issue where the aud claim would always be included in the standard introspection response, even if the initial access token had no resource information.

Token introspection claim fix

Fixed an issue where the format of the value of the token_introspection claim in JWT introspection responses was incorrectly set as string, instead of JSON object .

Other

• Removed memcached support
• Remove all nv-cipher and nv-digest dependencies from all Authlete repositories